Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/1yp-CyfvXxAtTkk4tSDataHyfwY.roa
File: 1yp-CyfvXxAtTkk4tSDataHyfwY.roa (raw, json)
Hash identifier: SqgokM9PS1NitFY8bOJBDDBU8EreribWl+tjcbzmpfc=
Subject key identifier: D7:2A:7E:0B:27:EF:5F:10:2D:4E:49:38:B5:20:DA:B5:A1:F2:7F:06
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019E1D381B831034E1FDF6E68578EF839242
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/1yp-CyfvXxAtTkk4tSDataHyfwY.roa
Signing time: Tue 12 May 2026 17:24:36 +0000
ROA not before: Tue 12 May 2026 17:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203938
IP address blocks: 136.175.222.0/24 maxlen: 24
136.175.223.0/24 maxlen: 24
163.123.192.0/24 maxlen: 24
163.123.194.0/24 maxlen: 24
205.178.176.0/24 maxlen: 24
205.220.226.0/24 maxlen: 24
205.220.227.0/24 maxlen: 24
2a11:3a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:38:1b:83:10:34:e1:fd:f6:e6:85:78:ef:83:92:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: May 12 17:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d72a7e0b27ef5f102d4e4938b520dab5a1f27f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:6a:f2:d9:2c:de:22:63:f9:cf:63:1f:2e:
e9:8c:2b:ba:47:c8:35:a5:e1:3e:6d:b8:a3:5e:c4:
a4:ce:ef:ab:86:c6:77:6a:e5:1d:d8:02:e5:6a:62:
27:c4:ec:f3:0b:a6:97:92:8a:a3:e3:7c:fc:8f:f4:
d4:45:9b:1b:53:e8:02:b1:0b:10:37:f0:83:98:75:
85:a3:b3:fb:57:3e:12:86:60:73:b0:ea:39:12:61:
c7:03:60:f3:f9:c5:20:9a:e4:16:3d:a1:cf:c9:01:
0d:c0:a9:09:d3:d8:80:69:9b:46:fe:85:74:2f:92:
70:1e:08:ae:54:80:7d:b0:55:c5:22:9a:29:d4:fc:
66:db:f6:12:84:9c:b9:d3:9f:ca:77:84:19:89:7a:
37:0d:3f:c3:ad:12:03:7a:24:67:a5:c8:14:a8:6e:
d8:8d:78:0c:29:ce:21:5f:18:32:d8:dc:75:6a:96:
4d:69:d6:20:5e:8e:3c:c1:b2:8d:ac:04:42:ac:f4:
08:e6:e6:66:bb:66:ee:28:b0:3b:48:9c:63:7b:37:
47:01:8d:c3:e2:dc:c7:8e:cb:d2:54:49:eb:bb:b7:
5b:bd:c9:fb:fc:f1:7a:c5:9e:42:29:63:f4:cb:e5:
2b:b1:3a:ac:ac:25:58:f2:00:64:ac:d2:cb:9b:b1:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:7E:0B:27:EF:5F:10:2D:4E:49:38:B5:20:DA:B5:A1:F2:7F:06
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/1yp-CyfvXxAtTkk4tSDataHyfwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.175.222.0/23
163.123.192.0/24
163.123.194.0/24
205.178.176.0/24
205.220.226.0/23
IPv6:
2a11:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
40:1a:06:bd:a3:10:28:77:3b:c2:0e:44:54:f1:f7:42:3d:8b:
7b:98:d0:f0:27:21:ab:a5:53:d8:bc:b8:26:64:00:4e:80:7d:
e1:02:64:89:25:58:fe:7e:ed:2f:3e:45:02:06:c4:5e:0c:85:
80:f8:7d:a3:37:71:34:18:39:3e:ef:0f:bc:b8:08:25:b1:b3:
e5:a6:1b:9f:8c:8f:22:ee:97:0c:07:0f:91:aa:0e:d5:1e:59:
45:10:c7:e8:33:d7:f9:fd:d6:b4:8f:94:8c:8a:b4:a2:f7:91:
dc:c4:7f:59:52:43:dc:88:15:58:64:43:db:b0:0a:8a:91:c6:
17:24:06:43:dc:c3:ba:f2:84:3b:a5:52:91:91:e3:12:0f:7a:
37:16:7f:97:dd:9b:23:0c:4b:17:af:73:ad:93:95:3e:a4:42:
9c:2c:b9:48:ea:99:7d:4d:22:12:86:15:40:cf:8e:87:5d:bf:
05:ec:a3:05:da:1e:c9:4a:d0:b9:42:32:8a:cc:c1:7c:cf:c5:
b7:38:fc:e7:b2:e0:4f:87:f7:f0:53:f9:ca:5d:b2:e8:b6:86:
d0:b4:26:83:d6:3e:a9:01:58:fa:95:52:a1:f7:3a:5b:62:14:
15:6e:b4:8c:90:40:56:e5:4c:19:f2:fb:10:32:ac:13:f6:ee:
cb:50:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:24 2026 by rpki-client