Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/YK_IawN261WogeBGmqdkhiTNN_I.roa
File: YK_IawN261WogeBGmqdkhiTNN_I.roa (raw, json)
Hash identifier: 4EC+vEV7ucG4EBdmqBbe7XaUHceglhtUCKP+XHw06Nw=
Subject key identifier: 60:AF:C8:6B:03:76:EB:55:A8:81:E0:46:9A:A7:64:86:24:CD:37:F2
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019CFB459F4599554360BE264B20A7F4EA90
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/YK_IawN261WogeBGmqdkhiTNN_I.roa
Signing time: Tue 17 Mar 2026 10:09:29 +0000
ROA not before: Tue 17 Mar 2026 10:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43180
IP address blocks: 45.11.57.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
85.137.51.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.222.172.0/24 maxlen: 24
91.222.173.0/24 maxlen: 24
91.222.174.0/23 maxlen: 23
176.97.112.0/23 maxlen: 23
176.97.116.0/22 maxlen: 22
176.97.120.0/23 maxlen: 23
176.119.31.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.206.0/23 maxlen: 23
195.66.210.0/24 maxlen: 24
195.128.248.0/23 maxlen: 24
212.86.122.0/23 maxlen: 23
2a09:2dc2::/32 maxlen: 32
2a09:2dc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:45:9f:45:99:55:43:60:be:26:4b:20:a7:f4:ea:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Mar 17 10:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60afc86b0376eb55a881e0469aa7648624cd37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:b6:71:0c:6e:02:78:a3:67:58:ce:36:1a:
69:98:2a:d7:bf:97:b5:ad:00:5e:b2:f6:20:70:43:
dc:cd:3d:75:9e:6c:85:6c:06:28:64:45:a1:f5:c4:
0e:21:72:2a:34:88:76:ec:dc:69:0d:50:28:db:bc:
e3:a5:dc:13:3e:54:66:bc:8d:8d:d2:54:36:af:bc:
ec:ad:da:92:14:b8:02:6f:b1:f8:af:19:ef:2e:68:
36:38:97:9e:4b:d2:ae:30:a4:be:72:6a:bc:95:0d:
8a:a0:07:8c:58:18:cf:83:e0:c5:22:e9:64:83:41:
7f:40:c0:0f:0a:9d:03:eb:b4:1c:01:3c:e1:93:c0:
50:96:f0:20:ca:61:86:b4:f1:2a:aa:0f:17:a8:49:
68:a1:f5:ec:71:76:21:df:ce:0c:93:09:bc:6c:60:
f9:c7:37:27:d5:12:94:66:77:43:57:06:da:d5:d3:
75:7d:d5:ba:a9:a5:bc:97:4a:f9:c3:59:2b:48:a3:
b9:a6:a6:df:ab:0c:64:f8:be:aa:6d:d3:25:3b:ba:
ef:22:82:8d:d1:d9:86:39:ce:6a:6b:ef:a5:a3:0a:
39:30:45:9a:a9:d2:fb:44:fb:5a:c9:8f:3f:59:e7:
82:46:58:04:32:ba:84:44:2d:23:bb:1a:e8:54:0a:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:C8:6B:03:76:EB:55:A8:81:E0:46:9A:A7:64:86:24:CD:37:F2
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/YK_IawN261WogeBGmqdkhiTNN_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.57.0/24
45.11.59.0/24
45.12.0.0/23
45.12.3.0/24
85.137.51.0/24
91.208.115.0/24
91.222.172.0/22
176.97.112.0/23
176.97.116.0-176.97.121.255
176.119.31.0/24
185.254.199.0/24
194.42.196.0/22
194.42.204.0/24
194.42.206.0/23
195.66.210.0/24
195.128.248.0/23
212.86.122.0/23
IPv6:
2a09:2dc2::/31
Signature Algorithm: sha256WithRSAEncryption
61:a8:32:d5:5b:6a:6f:ed:c2:4c:91:e9:f6:3f:d7:c2:7a:7a:
bd:e1:b5:a0:85:63:48:86:f3:51:00:e0:e4:fd:7e:d7:7b:f3:
3a:07:d5:b9:26:6a:12:34:42:ce:7f:3c:23:fe:77:e2:3a:25:
8a:98:a2:38:d4:10:07:74:d6:55:e4:e6:5c:5f:5d:5c:c8:67:
69:5e:55:0b:63:2e:24:ad:81:d7:82:4d:d0:bc:64:ee:51:b8:
ad:11:ec:54:b9:b3:82:3f:3c:31:fa:f7:d4:f3:b1:69:d9:17:
fd:f6:c3:50:ee:94:8e:dc:b7:0c:fb:cc:11:4b:98:75:97:68:
74:77:37:2c:ca:cc:61:97:95:48:2f:eb:96:fd:09:6b:a6:00:
8d:07:ad:00:43:87:88:cd:df:e6:f1:77:ec:b3:36:bf:0d:52:
1d:aa:23:f9:8f:54:e8:8b:ba:cf:c6:32:06:30:31:3a:56:a5:
62:0b:44:33:12:e6:bc:58:c2:1e:0e:c2:d4:e4:dc:b0:c1:2a:
51:dc:25:6d:a4:84:eb:64:d8:a4:f3:43:d8:9d:d3:e8:1a:ab:
84:74:94:02:fd:ec:18:23:af:b1:a6:48:6e:83:d4:eb:97:98:
fd:82:d7:52:d4:64:2d:09:dd:54:10:34:da:72:31:53:5c:0a:
0b:ac:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:20 2026 by rpki-client