Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa
File: yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa (raw, json)
Hash identifier: wEYOZFW3nRAdwU0jliufiMLAbI5/X3da3ron9zmXMns=
Subject key identifier: C8:6D:60:AF:65:65:58:AB:93:AE:46:78:3C:E9:6E:F3:E1:6D:F3:1A
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019D24648E487A278F6906EF67CBADE384E5
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa
Signing time: Wed 25 Mar 2026 09:47:42 +0000
ROA not before: Wed 25 Mar 2026 09:47:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51815
IP address blocks: 62.102.148.0/23 maxlen: 23
62.102.151.0/24 maxlen: 24
78.108.48.0/21 maxlen: 21
91.190.136.0/21 maxlen: 21
176.56.240.0/20 maxlen: 20
185.170.180.0/22 maxlen: 22
2a00:1520::/32 maxlen: 32
2a02:2490::/32 maxlen: 32
2a0b:b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:64:8e:48:7a:27:8f:69:06:ef:67:cb:ad:e3:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Mar 25 09:47:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c86d60af656558ab93ae46783ce96ef3e16df31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:6e:01:1a:60:30:12:b9:dc:33:74:ce:5a:
55:f3:57:3e:13:e7:f5:72:85:9a:7c:15:a7:b9:7f:
41:16:4f:1f:23:2e:52:fb:01:78:e2:30:d0:cd:81:
d8:78:c5:a2:f6:fc:a0:3d:89:b5:8b:37:8d:8b:51:
66:bb:5b:7b:78:b1:c3:73:e1:e6:38:08:58:c5:63:
d0:86:17:7c:c8:6b:57:5b:0a:1e:58:65:91:19:50:
b6:07:02:49:83:46:98:8d:cc:e0:53:4e:69:6f:4c:
4c:a5:3b:6c:ca:8b:ba:54:23:5a:b9:50:0a:58:0f:
71:5a:0b:94:6b:ca:1d:62:8c:87:ed:53:62:16:20:
ca:4f:fd:b1:cc:27:34:e9:ee:1d:69:01:a8:2a:a1:
10:49:62:2c:23:3f:54:62:c4:68:4f:06:06:60:dd:
2b:2a:65:33:8f:19:a2:a6:de:46:ba:b1:64:cb:66:
6f:d9:e9:67:cf:19:a8:cf:79:6e:63:ef:25:ba:f5:
fc:17:00:fd:87:82:04:bb:23:e7:c2:54:1a:09:a8:
f5:ec:82:d1:11:e5:d2:68:f5:a4:e4:31:08:11:66:
84:b2:c4:ac:9a:4f:d3:2c:a5:6a:c5:9d:df:76:30:
d9:68:c0:0c:2f:93:fd:f0:82:d9:36:72:eb:aa:c1:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:60:AF:65:65:58:AB:93:AE:46:78:3C:E9:6E:F3:E1:6D:F3:1A
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.148.0/23
62.102.151.0/24
78.108.48.0/21
91.190.136.0/21
176.56.240.0/20
185.170.180.0/22
IPv6:
2a00:1520::/32
2a02:2490::/32
2a0b:b40::/29
Signature Algorithm: sha256WithRSAEncryption
90:1e:b1:8a:7e:f6:e6:dd:03:ea:af:e4:75:d4:8c:f1:38:a2:
b5:20:cf:17:d0:22:0f:90:80:7b:34:cf:b4:a8:08:52:da:f4:
34:fc:4e:a0:1b:30:9c:cf:c9:1c:97:77:fa:bf:64:d0:36:98:
11:79:d5:45:05:50:56:98:68:25:cf:5e:91:38:3f:78:53:cd:
78:bd:1c:e0:a5:d0:b2:46:0e:97:7c:3c:22:af:78:87:53:cb:
6e:ff:53:46:91:3d:cb:23:8b:42:ab:ab:c7:4c:ab:1e:2e:08:
89:1e:b6:59:c4:78:47:53:58:02:f1:63:b1:40:5f:93:6d:c7:
75:e4:f7:9d:22:c2:b4:29:0e:e1:9a:6c:01:0f:4c:c3:97:c6:
16:cd:2e:9f:50:ce:88:47:51:40:73:47:73:1f:31:21:6f:dd:
f0:c6:bc:16:77:a5:d0:cc:39:cb:7e:da:25:0d:7d:91:0c:37:
e2:3f:c4:09:ce:89:1c:01:ff:ba:95:22:45:ff:09:ea:4b:33:
97:c6:ca:5e:72:ed:a8:45:de:77:7f:3c:2f:7e:95:95:36:7b:
88:3c:73:27:0e:96:e2:7a:7d:6f:09:65:3a:fb:8f:44:13:5b:
fc:ba:de:dd:81:10:ec:18:0c:84:5f:a0:bd:86:6f:98:ae:4c:
72:e7:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:37 2026 by rpki-client