Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YDaMnob-poIuRLZ4wAjLgOqFZQM.roa
File: YDaMnob-poIuRLZ4wAjLgOqFZQM.roa (raw, json)
Hash identifier: EN3W1yByHMOyyQbNASn6BXFzScIQPAOmgfjXpvzxDJ0=
Subject key identifier: 60:36:8C:9E:86:FE:A6:82:2E:44:B6:78:C0:08:CB:80:EA:85:65:03
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 0199990D80564949EAFB157C4AD3BA6CFE90
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YDaMnob-poIuRLZ4wAjLgOqFZQM.roa
Signing time: Tue 30 Sep 2025 05:17:02 +0000
ROA not before: Tue 30 Sep 2025 05:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39891
IP address blocks: 159.0.186.0/24 maxlen: 24
159.0.188.0/22 maxlen: 22
185.139.8.0/24 maxlen: 24
185.139.9.0/24 maxlen: 24
185.139.10.0/24 maxlen: 24
185.139.11.0/24 maxlen: 24
212.215.129.0/24 maxlen: 24
212.215.208.0/22 maxlen: 22
212.215.212.0/22 maxlen: 22
212.215.216.0/22 maxlen: 22
212.215.232.0/22 maxlen: 22
212.215.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:0d:80:56:49:49:ea:fb:15:7c:4a:d3:ba:6c:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Sep 30 05:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60368c9e86fea6822e44b678c008cb80ea856503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:9d:62:42:8e:f2:78:41:25:21:3a:7f:c8:
d6:ae:31:4b:fd:31:54:19:8d:79:80:e2:59:16:38:
90:82:e5:be:e5:ab:f3:cd:c4:e9:d6:20:a9:24:dd:
2c:56:4d:6c:92:f1:e3:29:c9:99:aa:6a:9f:0d:af:
e7:4c:46:23:b4:8c:fd:7c:a8:fd:52:bc:34:93:57:
d9:d4:58:be:e6:33:09:71:c0:1f:6d:1f:7c:7c:4a:
37:0d:d0:30:e6:5d:d8:9d:f6:93:08:e5:3b:7a:a8:
5c:22:09:a6:71:54:1c:18:20:94:d0:b0:92:6c:77:
0a:29:16:43:e5:58:f8:04:45:07:97:7f:c2:d8:06:
d1:69:1d:c9:51:6a:69:82:2c:a7:d3:b9:83:05:1c:
21:b8:fe:2c:6b:c6:d5:d3:08:c9:37:c1:d7:04:fc:
51:c2:6e:eb:2f:2e:6e:9c:db:75:d9:6e:ac:ad:a2:
5b:46:aa:ac:af:8e:33:ca:c3:bc:4b:b9:19:5c:06:
8b:46:ec:c7:1c:7f:24:10:57:3c:dd:ab:07:0f:6d:
21:bb:64:86:6a:fd:84:b0:01:b8:16:c9:b8:4b:2a:
e6:63:4d:c5:c9:36:e9:50:5c:cd:1f:d2:85:76:fe:
d7:64:76:97:1f:27:26:14:99:db:f7:2b:6a:0e:69:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:36:8C:9E:86:FE:A6:82:2E:44:B6:78:C0:08:CB:80:EA:85:65:03
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YDaMnob-poIuRLZ4wAjLgOqFZQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.186.0/24
159.0.188.0/22
185.139.8.0/22
212.215.129.0/24
212.215.208.0-212.215.219.255
212.215.232.0/22
212.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8b:3d:b0:18:61:03:06:25:06:cf:77:2a:19:60:14:e7:55:
3c:8f:5b:8c:cf:9e:17:9d:82:96:80:f3:38:af:7b:41:c7:a0:
94:a9:17:37:81:a6:41:3b:03:23:31:93:82:32:33:f1:5f:ff:
40:45:cf:7c:d3:01:d6:ed:0f:d1:4e:6c:43:d8:a4:d3:d5:34:
19:a0:a0:68:79:6a:1d:78:e1:55:d9:87:4f:95:f7:32:32:5d:
dd:c8:a7:09:db:67:b0:f8:27:05:bf:4f:98:f5:93:28:35:be:
b7:b1:8b:43:e8:9d:a0:bd:bb:eb:f6:84:c6:f1:77:f1:7a:ce:
33:5f:8b:3c:80:ff:a4:c1:0b:90:bb:54:ed:3d:ed:9b:29:fb:
42:65:fc:4c:9e:a7:85:34:4b:bb:78:ec:63:da:5d:46:99:3c:
de:de:40:02:0a:d3:0e:a8:da:cd:da:20:d1:8b:1e:85:47:d6:
83:fc:38:bf:b4:db:28:01:fa:d2:67:d3:b1:65:b1:c3:7b:97:
4d:9c:d6:d8:ae:26:27:80:01:99:70:b1:8b:cd:15:03:7a:fd:
74:2d:82:39:4e:b1:bc:ca:5d:f4:95:f5:d4:ff:6b:16:fc:7e:
65:5f:d9:18:0d:3a:10:e7:b9:d9:3b:0f:d1:ac:f6:3a:36:c6:
b3:c9:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:23 2025 by rpki-client