Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/Hy1oimMyF0Zt5iOfTysR98UwmJw.roa
File: Hy1oimMyF0Zt5iOfTysR98UwmJw.roa (raw, json)
Hash identifier: 3j1La9nRMgrYx/fT0pGAqCAKJB3oozRUXaRVUYYxePo=
Subject key identifier: 1F:2D:68:8A:63:32:17:46:6D:E6:23:9F:4F:2B:11:F7:C5:30:98:9C
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019F19C6C0A24843B2115E42AD389351B820
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/Hy1oimMyF0Zt5iOfTysR98UwmJw.roa
Signing time: Tue 30 Jun 2026 18:24:43 +0000
ROA not before: Tue 30 Jun 2026 18:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6681
IP address blocks: 2.152.66.0/24 maxlen: 24
45.13.27.0/24 maxlen: 24
45.128.218.0/24 maxlen: 24
45.128.219.0/24 maxlen: 24
89.150.33.0/24 maxlen: 24
193.200.64.0/24 maxlen: 24
193.200.65.0/24 maxlen: 24
195.191.234.0/24 maxlen: 24
195.191.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:c6:c0:a2:48:43:b2:11:5e:42:ad:38:93:51:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jun 30 18:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f2d688a633217466de6239f4f2b11f7c530989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:8d:bb:8c:f2:38:77:a5:21:62:3b:57:d2:
00:b5:2a:c0:1b:fa:7a:98:33:ef:a1:75:db:ec:25:
cb:96:c0:07:8c:23:3b:b2:bb:d5:4f:a7:e0:88:ef:
45:63:c4:df:0f:ac:62:c5:8d:b3:3e:42:1c:d5:43:
75:1c:d3:8b:ac:08:23:52:50:68:71:7d:52:0b:99:
a6:56:e5:2a:f7:01:7e:cc:60:d6:41:c2:9c:39:2e:
77:32:74:e5:3d:88:3c:9f:94:e8:f8:eb:7d:e5:40:
68:e9:87:72:2e:c7:9f:f4:2c:1a:8e:4a:f8:9f:16:
65:5e:5a:e2:4e:20:fe:c7:7d:55:8b:4b:df:05:a9:
13:37:71:65:f8:56:be:0e:07:eb:8c:4f:94:8a:45:
d5:74:23:c4:af:28:02:c1:ab:c8:b2:94:1f:cc:63:
c2:6e:40:b3:31:ca:0d:31:02:4e:d1:82:22:5b:89:
98:23:10:3b:bd:a9:bb:36:8a:52:7d:b6:c9:af:94:
61:1a:dc:c9:08:12:cc:c8:53:a6:03:5a:34:2b:e7:
4c:60:0f:56:29:de:16:48:58:fe:1d:2b:49:a6:2b:
0e:c6:73:d8:e7:1f:a2:d7:6b:b9:70:95:dd:11:d7:
13:0a:2e:13:5e:cd:5a:b3:6c:12:8a:52:37:38:d6:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:68:8A:63:32:17:46:6D:E6:23:9F:4F:2B:11:F7:C5:30:98:9C
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/Hy1oimMyF0Zt5iOfTysR98UwmJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.66.0/24
45.13.27.0/24
45.128.218.0/23
89.150.33.0/24
193.200.64.0/23
195.191.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:8b:8f:a4:db:e9:9f:dd:be:2d:ec:d6:55:df:5e:f6:02:49:
d1:7b:07:30:9e:c8:62:a8:cd:46:a3:c1:cb:9f:3b:01:2d:9c:
b3:c4:cd:39:83:af:a6:7c:b6:8c:c1:77:ee:90:de:1a:01:76:
bf:0a:76:ad:09:e5:4f:6f:e1:93:6c:62:57:ff:ee:77:ca:02:
77:83:52:00:a9:37:01:7c:61:2e:b2:5b:ca:f0:a3:4b:78:8d:
df:b6:f0:47:e2:c3:7b:48:b4:77:2b:0b:2e:f5:91:00:8a:57:
53:37:a5:70:90:03:89:c4:ae:26:81:39:d1:9f:4a:53:61:fb:
03:11:ee:e3:e0:f7:48:41:b2:9c:2b:51:ea:93:ab:56:51:e6:
31:93:af:a1:ec:5f:94:6b:40:23:0b:91:a8:e8:2c:91:ca:0a:
09:bf:2d:a2:6f:42:62:d5:19:9b:b6:88:d0:44:0a:fb:c5:5e:
25:f0:5e:e9:34:5d:30:ec:35:ae:aa:3a:53:9f:36:ab:d3:ef:
50:87:e2:ae:4d:8a:a2:3f:54:85:af:be:c5:71:d9:18:4e:48:
b2:67:d6:40:30:64:95:ca:25:e4:f9:07:57:21:3c:37:ea:dc:
cd:23:8e:25:15:7e:21:03:a8:e4:2e:2e:ab:0a:b9:da:0c:3b:
bb:d3:c2:c5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8ZxsCiSEOyEV5CrTiTUbggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjYwNjMwMTgyNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjJkNjg4YTYzMzIxNzQ2NmRlNjIzOWY0ZjJiMTFmN2M1MzA5ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2puNu4zyOHelIWI7V9IAtSrAG/p6
mDPvoXXb7CXLlsAHjCM7srvVT6fgiO9FY8TfD6xixY2zPkIc1UN1HNOLrAgjUlBo
cX1SC5mmVuUq9wF+zGDWQcKcOS53MnTlPYg8n5To+Ot95UBo6YdyLsef9Cwajkr4
nxZlXlriTiD+x31Vi0vfBakTN3Fl+Fa+DgfrjE+UikXVdCPErygCwavIspQfzGPC
bkCzMcoNMQJO0YIiW4mYIxA7vam7NopSfbbJr5RhGtzJCBLMyFOmA1o0K+dMYA9W
Kd4WSFj+HStJpisOxnPY5x+i12u5cJXdEdcTCi4TXs1as2wSilI3ONYmyQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFB8taIpjMhdGbeYjn08rEffFMJicMB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvSHkxb2ltTXlGMFp0NWlPZlR5c1I5OFV3bUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAphCAwQA
LQ0bAwQBLYDaAwQAWZYhAwQBwchAAwQBw7/qMA0GCSqGSIb3DQEBCwUAA4IBAQCK
i4+k2+mf3b4t7NZV3172AknRewcwnshiqM1Go8HLnzsBLZyzxM05g6+mfLaMwXfu
kN4aAXa/CnatCeVPb+GTbGJX/+53ygJ3g1IAqTcBfGEuslvK8KNLeI3ftvBH4sN7
SLR3Kwsu9ZEAildTN6VwkAOJxK4mgTnRn0pTYfsDEe7j4PdIQbKcK1Hqk6tWUeYx
k6+h7F+Ua0AjC5Go6CyRygoJvy2ib0Ji1RmbtojQRAr7xV4l8F7pNF0w7DWuqjpT
nzar0+9Qh+KuTYqiP1SFr77FcdkYTkiyZ9ZAMGSVyiXk+QdXITw36tzNI44lFX4h
A6jkLi6rCrnaDDu708LF
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:27 2026 by rpki-client