Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa
File: YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa (raw, json)
Hash identifier: N4hhBNBcikInb4tPmaHKeGL864VkY1qTbkfnFOK42Zo=
Subject key identifier: 62:F8:14:5B:CB:E5:49:8A:12:A8:98:40:EC:ED:E7:6C:57:74:6C:96
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019CDC99C4FEE65731014883F42904F2DB4F
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa
Signing time: Wed 11 Mar 2026 11:13:10 +0000
ROA not before: Wed 11 Mar 2026 11:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 87.120.244.0/24 maxlen: 24
132.243.160.0/22 maxlen: 24
132.243.172.0/22 maxlen: 24
185.113.8.0/24 maxlen: 24
212.52.6.0/24 maxlen: 24
213.111.160.0/22 maxlen: 22
213.111.164.0/22 maxlen: 22
213.111.168.0/22 maxlen: 22
213.111.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:99:c4:fe:e6:57:31:01:48:83:f4:29:04:f2:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 11 11:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62f8145bcbe5498a12a89840ecede76c57746c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:ca:bf:fd:cc:fc:9d:8a:5a:db:c7:8a:da:
e2:99:0a:f7:f5:d0:3a:ee:2c:17:f5:7f:c7:8e:39:
4d:c8:0e:cd:e5:5f:61:a1:2f:9d:4f:d3:0a:17:09:
e9:53:77:78:6d:9c:b4:6b:e1:c7:67:0e:a6:8e:40:
57:e2:df:fe:c6:f3:67:1d:c7:f9:54:6c:6e:1a:86:
cb:86:13:49:07:a9:e7:08:59:f5:3c:85:fb:e3:32:
dc:2c:e9:a5:5d:69:d5:54:70:b0:25:6d:7e:3e:93:
b7:16:98:40:cd:bb:94:00:4d:04:71:ba:dd:c3:97:
28:b3:83:8a:4c:e0:fa:0a:9d:d9:13:d1:e8:33:bf:
97:7d:f1:f3:53:94:d0:e4:ad:5e:3c:aa:62:f2:88:
c2:14:ed:90:46:3e:0d:ac:1d:49:c6:a3:b8:16:6d:
46:35:96:30:f8:1e:b1:cb:cd:0a:3d:a6:af:f7:95:
ab:4a:90:3d:f3:f6:26:2f:3d:6f:1e:00:21:02:36:
29:2a:5c:08:e1:4f:9e:2d:cf:a0:6c:e8:fd:3b:60:
d1:f0:13:cf:2c:2d:8d:51:cf:19:54:7d:62:dc:a4:
88:49:5f:0e:7d:d5:ec:42:75:c3:c3:7e:9e:53:8d:
0c:61:70:54:5f:18:86:1a:f3:85:03:ff:e7:c3:dd:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:14:5B:CB:E5:49:8A:12:A8:98:40:EC:ED:E7:6C:57:74:6C:96
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/YvgUW8vlSYoSqJhA7O3nbFd0bJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.244.0/24
132.243.160.0/22
132.243.172.0/22
185.113.8.0/24
212.52.6.0/24
213.111.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:89:36:4a:96:ae:30:5b:0e:b4:4f:3a:07:56:96:bd:94:9c:
e2:8e:e7:be:24:f5:bf:98:2c:5f:b6:28:ad:d8:a1:6b:b9:3f:
60:a5:2f:7b:6e:5c:e3:36:b7:28:6c:98:de:f2:2f:bb:66:d7:
f9:18:24:ea:95:47:60:dc:56:b8:e0:ac:8d:22:67:8e:5c:17:
51:17:0d:cb:ca:5b:51:95:01:d4:f9:49:42:58:4e:c3:8f:54:
84:04:7d:2a:b3:ab:4c:89:bd:34:23:e6:23:45:de:10:f7:17:
a1:42:bb:1f:6c:f1:09:3c:e3:f8:ac:54:27:84:6c:e7:13:54:
02:db:51:e3:1f:47:23:74:b2:86:82:16:cd:ab:66:5b:da:70:
78:2e:ec:3c:7c:2f:78:75:db:03:07:03:52:44:44:a6:e7:55:
d3:e0:de:72:d6:b4:a1:1e:c0:20:a5:c7:6d:31:25:2c:c6:0e:
50:99:11:35:57:6c:e0:de:7a:f0:09:ff:b4:4e:a0:3f:9d:af:
f0:71:6f:24:2e:78:d1:58:e6:20:ab:89:14:c5:58:a7:15:18:
56:ba:44:fc:91:4f:24:71:cd:5a:62:88:47:b2:98:da:7d:4c:
60:88:67:35:fa:a8:ac:6c:6d:b7:0e:45:60:f1:d2:0f:2a:c8:
a3:3d:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:41 2026 by rpki-client