Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/lyXkg79P2FE1dqoSHDtkOfaKYYE.roa
File: lyXkg79P2FE1dqoSHDtkOfaKYYE.roa (raw, json)
Hash identifier: cbRt0iwVvDFLlG9nHuLjCQUjtgic0aVsU0+cAtoJ9AI=
Subject key identifier: 97:25:E4:83:BF:4F:D8:51:35:76:AA:12:1C:3B:64:39:F6:8A:61:81
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 019F2368FE33AD23EE352F8C0D5384DBD40B
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/lyXkg79P2FE1dqoSHDtkOfaKYYE.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199938
IP address blocks: 185.41.104.0/22 maxlen: 24
194.39.187.0/24 maxlen: 24
194.39.215.0/24 maxlen: 24
194.40.244.0/24 maxlen: 24
194.41.1.0/24 maxlen: 24
2a01:55e0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:33:ad:23:ee:35:2f:8c:0d:53:84:db:d4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9725e483bf4fd8513576aa121c3b6439f68a6181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:c7:d7:ee:ed:45:64:a5:59:9d:97:db:c2:
ab:35:98:92:b2:8d:9a:04:16:95:94:a1:88:50:9c:
d8:eb:b0:4e:f3:3f:a6:72:5a:d5:3f:3f:0c:61:e5:
64:df:48:10:cf:dd:6d:66:da:35:76:87:90:85:1e:
18:a1:3e:44:a6:c7:b9:ce:7a:ad:db:11:51:ea:51:
25:81:00:e4:df:29:e6:a2:ec:6f:25:70:67:4c:2b:
4b:63:e4:8e:c8:0f:fd:e2:ce:3e:86:c5:a9:16:87:
30:2a:9a:42:6c:2f:61:46:39:4c:1d:4f:fb:a4:16:
8c:82:b2:8f:89:ec:4c:af:3e:89:b7:3b:ce:13:71:
27:13:0d:37:7e:81:45:a1:7e:a9:0f:c2:0f:bf:23:
2e:c8:60:09:b5:ee:16:41:77:04:3d:47:b5:93:8e:
c7:e6:fb:cd:27:e6:a6:8c:86:22:1e:78:f2:8b:78:
82:38:e1:2a:5e:33:ef:2a:36:bc:f1:a8:c9:64:e8:
94:81:2c:3c:0d:b9:42:29:43:f0:f7:57:c6:01:76:
66:1d:31:08:f1:c1:d9:d7:22:85:c3:55:ee:2c:65:
4f:d8:85:14:44:69:2b:bb:6c:a6:ec:eb:46:7b:58:
0e:34:b4:c8:64:fa:1d:97:19:b3:8e:20:31:0a:9e:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:25:E4:83:BF:4F:D8:51:35:76:AA:12:1C:3B:64:39:F6:8A:61:81
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/lyXkg79P2FE1dqoSHDtkOfaKYYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.104.0/22
194.39.187.0/24
194.39.215.0/24
194.40.244.0/24
194.41.1.0/24
IPv6:
2a01:55e0::/29
Signature Algorithm: sha256WithRSAEncryption
03:47:7c:0c:ee:7b:ff:6e:a8:8e:bf:2f:2d:50:a2:51:74:eb:
8c:62:02:dd:d0:42:15:ab:31:f5:d2:00:eb:2d:41:51:7c:a5:
39:0b:7f:42:bf:7e:ae:82:a9:37:68:f6:95:b1:e4:2f:54:0c:
42:15:0f:7b:22:a5:b7:19:77:83:7c:04:01:8b:2b:1e:a8:36:
67:ae:72:62:4b:d1:e0:09:fc:5d:07:42:7b:b5:4f:3f:c4:c2:
33:8b:b8:31:a8:21:2b:45:68:00:44:4c:07:3a:df:da:a9:f3:
bb:81:e8:88:86:4f:04:68:db:ba:a7:51:1c:49:a2:ec:45:d2:
44:a5:60:15:1b:ae:4e:fc:f5:89:7d:db:c3:2d:d3:72:19:40:
f7:f4:e9:be:1d:67:ee:33:30:08:53:48:84:ef:b7:1a:3e:d9:
f9:62:9e:8f:ac:96:83:bc:24:bf:b7:5e:20:69:84:44:c6:7f:
80:46:6f:65:fe:f7:d9:13:69:bb:d5:47:34:00:dd:3e:42:cd:
70:e7:6c:e7:26:32:76:c5:8d:ed:9c:36:3a:e0:d4:96:30:e1:
12:1e:6b:06:f1:31:2d:c3:75:7b:99:ab:3a:c0:8c:5a:44:9d:
67:5b:cd:c5:2f:6d:ec:0c:16:cb:41:3e:39:4c:c3:77:70:2f:
fc:f3:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:09 2026 by rpki-client