Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa
File: YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa (raw, json)
Hash identifier: DakRO0YaXIPdaZGDlB/0rhFuDBB490F3NKmIPT2J1GQ=
Subject key identifier: 61:5F:6B:D5:07:8B:40:BC:EC:34:30:35:7B:79:C1:4B:0E:09:24:A8
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 019F2368FB94981AB934B9739F97975F8871
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 22
79.140.128.0/20 maxlen: 20
82.195.128.0/19 maxlen: 19
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
212.78.224.0/20 maxlen: 20
212.78.240.0/23 maxlen: 23
212.78.252.0/22 maxlen: 22
212.84.40.0/21 maxlen: 21
2001:1bd8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:94:98:1a:b9:34:b9:73:9f:97:97:5f:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615f6bd5078b40bcec3430357b79c14b0e0924a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:a3:cd:ab:09:32:0a:9a:81:65:c8:15:c5:
25:5d:46:c2:86:6d:0c:5e:c2:4c:3e:9e:39:7d:22:
d6:7b:2d:ed:43:91:58:ee:0e:6b:5e:a2:d6:2a:a8:
54:1b:dc:6d:6d:51:5b:20:8c:7e:a8:f8:1d:d6:79:
77:4a:32:2f:c4:8e:f6:37:7e:27:50:50:9d:93:fc:
1c:bd:81:5a:b1:2f:c0:10:4b:88:7e:33:ec:0d:13:
3d:15:1d:34:66:2d:83:c1:84:9a:f2:3a:e9:bf:f6:
aa:c1:ac:2d:2b:f3:eb:67:b0:38:27:b3:dc:98:78:
cf:1f:e7:35:06:97:13:7c:9a:09:fd:a7:32:cc:31:
6a:86:d2:db:c0:a5:82:ef:f8:12:c0:d2:99:ce:00:
e0:0d:21:15:29:1c:66:0a:f3:2a:8f:30:4c:3a:c1:
70:ce:80:5c:5e:50:1e:e9:88:80:af:5a:8d:d0:e2:
09:e8:5a:42:59:8a:99:77:7c:a9:41:e2:9c:2b:93:
19:b0:82:84:52:a6:b7:13:70:80:65:64:b0:79:c0:
83:ad:a3:59:39:98:74:12:c7:59:bc:fa:7b:5d:5e:
c8:d8:d1:39:97:5b:74:0c:8f:40:98:82:1e:70:a8:
c0:45:ac:46:7c:56:cb:f8:51:5c:31:01:f6:da:f7:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:6B:D5:07:8B:40:BC:EC:34:30:35:7B:79:C1:4B:0E:09:24:A8
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/21
84.51.236.0-84.51.255.255
212.78.224.0-212.78.241.255
212.78.252.0/22
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
05:c0:7c:a0:9d:ca:13:7f:e0:b9:cd:98:8d:44:22:ca:65:dd:
8b:01:ef:4e:ac:3b:18:fb:b9:a1:7a:d5:5f:5f:36:9c:0d:69:
8b:aa:c6:b7:04:c9:de:41:54:6c:6d:db:45:e9:7f:49:55:3e:
10:2d:bf:4c:85:48:bc:ef:53:55:8e:b1:aa:cb:5b:b9:b4:23:
b5:6a:83:18:e3:11:7d:14:aa:d4:2e:c4:25:02:67:29:e3:8c:
01:a4:52:f5:f7:2d:e4:a0:3e:93:3f:34:43:c0:a5:e2:14:12:
d0:f6:a9:14:2c:bd:a1:a6:87:a6:5d:50:3b:d7:6c:11:f6:18:
41:73:6c:f7:36:e0:38:ad:0d:f7:48:17:0f:59:66:99:27:64:
fd:be:2d:9b:00:a7:1d:04:53:55:9d:0c:93:08:86:2f:21:72:
74:5c:02:29:45:80:87:11:31:9b:b4:8f:15:a3:c3:12:16:c7:
19:59:82:8b:bc:74:01:c2:e7:90:79:b6:ad:71:8b:ee:d8:2f:
32:b2:68:15:eb:4b:54:73:ae:f8:b2:cf:ab:fc:fe:fc:16:71:
e4:66:a9:18:32:ab:9b:8c:6a:af:fe:6e:20:6d:69:5e:f2:51:
ae:20:1f:96:f7:68:e3:a2:80:72:66:e0:3c:fa:26:42:d7:4b:
c1:62:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:15 2026 by rpki-client