Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa
File: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (raw, json)
Hash identifier: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=
Subject key identifier: 60:F8:D8:25:DA:69:BC:9F:B1:54:7C:89:DE:FF:97:1C:9A:6E:33:63
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019F4426D66D6A9D1E17FBE8CFB84514C7E0
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa
Signing time: Wed 08 Jul 2026 23:53:43 +0000
ROA not before: Wed 08 Jul 2026 23:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51815
IP address blocks: 62.102.148.0/23 maxlen: 23
62.102.151.0/24 maxlen: 24
78.108.48.0/21 maxlen: 21
91.190.136.0/21 maxlen: 21
176.56.240.0/20 maxlen: 20
185.31.196.0/22 maxlen: 22
185.170.180.0/22 maxlen: 22
2a00:1520::/32 maxlen: 32
2a02:2490::/32 maxlen: 32
2a0b:b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:44:26:d6:6d:6a:9d:1e:17:fb:e8:cf:b8:45:14:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jul 8 23:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60f8d825da69bc9fb1547c89deff971c9a6e3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:ab:83:1b:ca:8a:40:68:84:a7:9f:ff:c9:
d0:3e:d2:77:21:bc:2d:54:6b:1e:14:ab:9d:4c:12:
48:c2:fe:81:fc:6d:81:9f:aa:11:48:e1:7f:7e:e4:
a4:8f:27:cd:3b:ba:37:db:cc:f2:06:48:12:95:4d:
d1:f9:2d:de:c9:57:be:a7:f9:b3:8a:6d:93:db:90:
ba:5a:c4:e4:90:e8:11:7d:73:ba:90:24:18:4f:87:
82:60:56:91:b4:27:2e:d7:dc:60:10:ee:4b:ef:27:
63:ce:a3:44:28:13:c0:75:ad:a2:01:b4:04:87:4b:
5b:65:49:24:07:fe:13:d5:48:97:c8:5f:75:48:38:
95:5d:13:13:73:33:29:2a:e3:ab:9f:a6:b3:3d:d0:
e9:d8:9d:37:05:d7:7a:c8:68:bc:82:5c:55:5e:4c:
9a:59:14:61:44:a6:26:61:7e:66:5c:30:eb:04:2b:
1e:7b:a8:5e:a4:58:f0:13:fd:5b:3c:f6:3f:47:8a:
fb:8a:4d:f2:c0:bc:dd:47:fb:79:50:c1:75:36:43:
70:2e:7a:8e:16:88:90:75:f1:bd:56:60:b5:9b:e7:
5b:8e:7e:de:4b:dc:d5:5e:41:47:9b:ac:50:c8:f4:
de:cb:0e:d0:fa:f0:6b:87:df:c8:4b:6a:5a:2e:3a:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:D8:25:DA:69:BC:9F:B1:54:7C:89:DE:FF:97:1C:9A:6E:33:63
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.148.0/23
62.102.151.0/24
78.108.48.0/21
91.190.136.0/21
176.56.240.0/20
185.31.196.0/22
185.170.180.0/22
IPv6:
2a00:1520::/32
2a02:2490::/32
2a0b:b40::/29
Signature Algorithm: sha256WithRSAEncryption
76:c4:67:fe:de:47:3d:43:34:d2:0e:08:a9:e9:4a:70:21:ee:
c2:12:18:59:49:84:32:29:88:53:f8:c1:06:4c:17:84:8d:48:
3d:dc:12:44:5d:0f:83:b0:7b:b7:a6:13:b1:42:19:7f:dc:61:
77:a7:1e:d0:35:ba:ca:6f:2f:5f:c3:88:86:37:21:6f:50:b0:
67:3c:3e:f2:0e:16:6b:e0:a8:62:84:80:13:b8:97:4e:fd:de:
8e:32:e4:65:02:6b:2e:01:e5:04:5e:68:c3:29:06:49:bb:1a:
88:a0:b7:88:6a:0e:ff:e4:73:c5:99:ad:84:d1:d0:3c:aa:7b:
68:e8:c8:c4:5e:13:4a:3a:c3:3f:8d:d8:d0:b3:70:f8:bc:28:
80:18:bf:02:01:1c:13:e6:dd:f8:7b:a7:46:5e:d0:20:8b:68:
3a:2f:d9:61:82:e2:ae:89:98:54:67:2c:e6:42:d7:c3:0b:cc:
da:16:c8:c7:58:69:00:25:0a:24:b2:ad:81:55:0a:89:94:c9:
16:dd:2d:55:59:0c:6c:f7:3e:6c:f4:f3:5f:f7:da:40:ef:4c:
2d:70:45:72:6c:d0:94:7c:45:0f:14:ca:68:79:a2:27:54:93:
e2:5d:c9:4e:bb:18:ee:57:e9:27:b4:6a:02:52:df:1d:5a:86:
5d:4a:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:24 2026 by rpki-client