Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/yBFJbFMqqbu_jw-IuzQj64hYTkk.roa
File: yBFJbFMqqbu_jw-IuzQj64hYTkk.roa (raw, json)
Hash identifier: Be/MDYMq/leuNVsg2savAixZPY6XwwlfEfNgtafhrkg=
Subject key identifier: C8:11:49:6C:53:2A:A9:BB:BF:8F:0F:88:BB:34:23:EB:88:58:4E:49
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019DF2353F86BB9C874F742B04A48D69859F
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/yBFJbFMqqbu_jw-IuzQj64hYTkk.roa
Signing time: Mon 04 May 2026 08:57:49 +0000
ROA not before: Mon 04 May 2026 08:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6681
IP address blocks: 45.128.218.0/24 maxlen: 24
45.128.219.0/24 maxlen: 24
89.150.33.0/24 maxlen: 24
193.200.64.0/24 maxlen: 24
193.200.65.0/24 maxlen: 24
195.191.234.0/24 maxlen: 24
195.191.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:35:3f:86:bb:9c:87:4f:74:2b:04:a4:8d:69:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: May 4 08:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c811496c532aa9bbbf8f0f88bb3423eb88584e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:0e:fb:f3:cc:5f:96:93:37:da:4f:f7:a3:
a8:12:c2:de:93:c4:3e:78:c4:d3:6f:92:18:93:f1:
bc:67:70:a7:40:aa:2a:bd:00:4f:b5:df:82:3b:00:
ec:09:64:36:b4:1f:0f:ed:c9:d9:14:91:0d:c2:12:
1b:de:ac:24:4d:47:0b:67:19:a7:0e:c5:d7:19:8e:
d4:06:60:ba:3d:19:61:15:f7:52:89:ec:39:3d:d4:
f4:8d:85:70:b8:37:f8:53:2d:7d:0f:43:39:c9:89:
9a:cf:04:61:ff:41:0c:59:b5:de:0c:4a:0a:17:f8:
da:81:04:6f:e4:5d:be:23:1b:6f:cd:49:21:15:af:
67:f3:16:e1:86:e3:bf:6f:4f:9d:b9:1a:92:30:62:
13:01:eb:85:2c:fc:46:f5:15:25:2b:19:93:7a:e8:
4b:71:d4:54:7a:a9:e7:be:cc:26:47:94:11:0b:82:
c5:e2:0f:7d:5a:ab:fd:ba:37:3c:3e:04:5a:5a:4c:
73:79:67:20:12:06:7c:50:eb:47:91:ce:bb:b8:d7:
49:44:a8:f0:1a:8e:02:1e:5a:a3:f9:9c:d9:fe:05:
19:2b:43:b3:48:08:1e:6c:b8:ab:f6:3a:1f:57:b2:
1a:20:8b:5d:ed:40:e9:6e:e9:1a:64:b1:7b:fd:a2:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:49:6C:53:2A:A9:BB:BF:8F:0F:88:BB:34:23:EB:88:58:4E:49
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/yBFJbFMqqbu_jw-IuzQj64hYTkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.218.0/23
89.150.33.0/24
193.200.64.0/23
195.191.234.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0b:96:75:d2:7a:ca:8a:62:6d:8d:4f:99:b5:52:e2:89:87:
b1:a1:ba:8a:1a:68:8d:11:45:3c:33:dc:c5:a0:9f:68:6c:b4:
49:c8:44:38:d2:16:0b:c6:ba:c5:29:04:13:2c:3c:a4:6c:67:
4c:e8:07:4b:8c:ed:57:de:b9:ab:78:42:5b:f6:b0:91:4e:82:
d3:42:96:49:a0:1d:97:1f:34:9c:7c:9e:48:f2:3a:7e:3c:3a:
a0:5e:f4:7c:59:62:c4:3f:db:af:49:0f:ac:1c:ec:b4:f7:8e:
01:51:ec:6a:80:da:59:8f:6e:d7:34:64:5e:80:ce:6f:3b:fe:
6f:55:9d:ac:68:0d:56:99:65:e7:ff:a2:20:e2:6c:df:97:7a:
3c:ef:68:ad:e3:03:ed:d6:ce:a5:c6:e6:57:bc:94:22:50:a3:
34:39:69:28:cc:f1:ef:08:ef:ee:17:c8:bc:db:cc:cd:54:4e:
71:9b:a7:b1:c0:cf:6f:67:66:7d:ea:db:fd:b7:48:ac:6e:20:
75:11:e4:f9:4e:82:28:bb:d7:76:98:8e:67:cc:d3:6e:39:6c:
5b:58:45:a2:ca:82:76:a1:6f:40:85:45:c6:b9:7b:4f:11:5e:
95:e8:40:6b:10:ba:b1:c8:e0:e2:e2:96:73:25:31:de:7c:ba:
4e:b6:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:14 2026 by rpki-client