Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/y7fVSF5YRkR2QeLzuwW_1IOSnTM.roa
File: y7fVSF5YRkR2QeLzuwW_1IOSnTM.roa (raw, json)
Hash identifier: Q0XSzayknQH7nA2iszMprTs1YiSNDqJgRdq3EVxjE9Q=
Subject key identifier: CB:B7:D5:48:5E:58:46:44:76:41:E2:F3:BB:05:BF:D4:83:92:9D:33
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A19F6D048768DC0F16F14E274715335CD9
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/y7fVSF5YRkR2QeLzuwW_1IOSnTM.roa
Signing time: Tue 03 Nov 2026 03:21:24 +0000
ROA not before: Tue 03 Nov 2026 03:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 64.118.128.0/19 maxlen: 24
191.40.0.0/18 maxlen: 24
191.40.0.0/21 maxlen: 21
191.40.2.0/23 maxlen: 23
191.40.8.0/22 maxlen: 22
216.195.192.0/19 maxlen: 24
216.195.221.0/24 maxlen: 24
216.236.0.0/18 maxlen: 24
216.236.3.0/24 maxlen: 24
216.236.28.0/22 maxlen: 22
216.236.28.0/24 maxlen: 24
216.236.29.0/24 maxlen: 24
216.236.30.0/24 maxlen: 24
216.236.31.0/24 maxlen: 24
2a01:4240::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:6d:04:87:68:dc:0f:16:f1:4e:27:47:15:33:5c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Nov 3 03:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb7d5485e5846447641e2f3bb05bfd483929d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:df:90:20:30:c8:e0:52:e3:98:43:2b:4e:
d2:76:48:16:57:eb:f7:10:b6:ac:0e:b2:4e:1e:b3:
d9:32:37:8d:26:95:3d:37:31:be:24:d6:b1:e5:61:
b9:64:74:e7:50:2d:27:72:d9:2e:a3:5a:82:9d:85:
37:20:02:9f:87:eb:d4:ab:6a:09:81:98:54:4f:2d:
5d:3c:bd:91:32:b8:5a:8f:52:25:9b:ee:4f:a2:a5:
1e:d0:19:d8:99:2b:41:f1:32:37:65:17:9f:f8:a3:
cb:d6:22:9e:de:b5:f5:f7:c8:ee:f2:3a:4b:41:19:
35:1f:05:11:f2:15:28:5a:a3:40:1e:1c:87:93:f3:
c3:c6:0f:43:76:3d:a3:c9:72:d1:18:0d:87:be:6b:
a6:c7:f2:89:91:c8:9b:9c:0b:d8:51:d4:a5:d9:43:
3a:97:3b:90:79:0a:43:b5:f9:96:86:58:79:98:91:
de:c3:cc:4d:fc:a3:49:b4:cf:7f:e0:ae:d2:22:ff:
71:24:4a:b4:8b:4e:60:b5:44:61:aa:5e:7c:2f:e9:
07:40:56:cd:1f:46:da:8d:d4:2a:12:ab:64:47:77:
ed:c4:1d:c6:65:72:b9:3a:58:9e:51:a3:09:f0:11:
5a:f9:ad:15:99:21:47:a7:d1:b4:fc:a0:b6:af:ae:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:D5:48:5E:58:46:44:76:41:E2:F3:BB:05:BF:D4:83:92:9D:33
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/y7fVSF5YRkR2QeLzuwW_1IOSnTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.118.128.0/19
191.40.0.0/18
216.195.192.0/19
216.236.0.0/18
IPv6:
2a01:4240::/30
Signature Algorithm: sha256WithRSAEncryption
73:18:7b:5a:ca:fc:99:db:4f:5b:d9:d2:24:21:03:5f:b3:bf:
70:d3:e4:55:8a:07:bc:70:c8:b9:1f:ea:17:f6:cc:3c:92:6f:
97:3f:19:73:86:4a:5a:d6:81:a3:aa:8c:d6:7d:5a:28:84:fc:
d4:42:e5:dc:4c:9a:5d:11:c3:06:2d:36:36:40:ab:f6:e9:05:
a7:bb:c4:ef:96:1b:0c:9d:4a:a0:9f:6b:46:a7:63:cc:54:dd:
d6:22:8a:87:55:ef:33:2d:b2:58:95:18:07:ce:a5:67:db:9e:
4a:ae:df:b3:23:f2:0d:81:29:6f:2d:1d:18:a0:b6:c6:43:9a:
a7:fe:e0:6d:4a:48:0d:94:20:b5:22:72:5f:f6:86:76:3f:de:
f1:80:c2:04:11:67:6c:a8:a3:91:ff:e9:4a:3b:b0:50:76:a2:
9d:80:90:33:9c:51:b1:1d:29:45:15:c9:14:0e:da:db:e3:4c:
1a:66:d0:9f:6d:d9:94:83:f2:9c:a0:e9:b1:12:09:23:cf:c7:
63:8c:60:c3:48:f5:8d:6f:25:3d:d9:fb:a9:19:4b:55:8e:d4:
6f:47:60:fd:b9:88:94:0c:83:f4:4d:db:b5:31:02:69:be:f6:
3a:f9:65:7b:f8:4a:96:66:9b:80:e1:76:00:4a:fa:58:6b:d4:
82:bf:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:52 2026 by rpki-client