Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y1EGSOFYfuC25lIqLe_VW75heKM.roa
File: Y1EGSOFYfuC25lIqLe_VW75heKM.roa (raw, json)
Hash identifier: Vr5a0PasZ9QZd9O1sifooCYt0wsPFCdO2lQLnZ62X4k=
Subject key identifier: 63:51:06:48:E1:58:7E:E0:B6:E6:52:2A:2D:EF:D5:5B:BE:61:78:A3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D668E796FBA0303588F51BF7882FF2278
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y1EGSOFYfuC25lIqLe_VW75heKM.roa
Signing time: Tue 07 Apr 2026 06:08:26 +0000
ROA not before: Tue 07 Apr 2026 06:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.112.0/24 maxlen: 24
80.96.113.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:8e:79:6f:ba:03:03:58:8f:51:bf:78:82:ff:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 7 06:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63510648e1587ee0b6e6522a2defd55bbe6178a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:cf:52:9f:e6:47:e6:63:c0:88:04:0e:52:
55:20:8d:77:12:11:aa:1e:3e:1a:8b:bd:23:58:00:
b1:f5:ea:05:95:b6:fa:50:a7:64:bc:8f:23:85:d5:
8c:85:01:42:27:22:cb:ef:56:83:d7:1a:ae:53:82:
da:f8:55:33:18:59:ab:f7:2d:59:39:5b:84:70:c3:
2e:b4:a6:c3:8e:1d:27:9e:d9:7a:12:c1:00:fc:8c:
f9:3b:1f:17:28:8d:07:da:1a:5c:10:f4:03:9c:aa:
f8:17:32:a0:02:f5:17:47:22:b6:af:57:61:1c:a2:
f5:3e:00:13:d9:61:e2:02:ab:3b:cf:a8:49:ed:06:
4e:2b:bc:4f:9d:b4:eb:87:e7:ee:9a:2e:51:14:0b:
48:37:6f:ee:9b:d4:59:3e:5c:48:58:a5:bf:5a:ba:
b1:f7:5d:8e:08:ba:60:b1:25:92:af:3a:c6:4e:66:
84:90:ac:af:27:9a:09:6b:5f:80:6f:ec:6f:c3:d3:
5a:43:ae:96:0d:df:8a:2e:8b:2b:24:77:39:7b:be:
db:79:8e:17:98:0d:49:7d:fa:d3:69:68:e9:76:08:
29:35:42:fd:d7:3a:0e:7a:0f:ce:cd:ae:5c:f6:b5:
b0:ca:77:23:3e:6e:45:bc:21:86:34:22:6e:4e:6d:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:51:06:48:E1:58:7E:E0:B6:E6:52:2A:2D:EF:D5:5B:BE:61:78:A3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Y1EGSOFYfuC25lIqLe_VW75heKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.96.108.0/24
80.96.112.0/23
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.121.4.0/23
85.121.149.0/24
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:43:8c:cf:f4:88:71:0b:0c:78:07:f5:bb:7c:b6:c4:b8:18:
ab:07:11:0f:cd:59:03:ce:0e:e6:13:c4:e9:f2:f2:55:f5:47:
5e:8e:1c:8c:70:f9:84:86:aa:5c:08:3d:4b:78:87:51:1d:03:
c8:7b:fd:3e:84:47:8c:e8:78:93:6c:f7:87:2c:7a:63:a7:40:
4f:20:f0:b1:eb:8c:0e:59:3f:d3:64:25:3e:93:fc:7e:f6:af:
a2:a0:81:36:4b:87:b2:46:fb:6e:46:c9:f5:62:e8:86:3d:34:
25:3b:79:c3:f6:52:e2:c1:f5:c4:84:b7:83:19:ec:c2:e2:9e:
f7:d8:d5:bd:e2:4e:af:76:b5:60:60:a9:17:ae:89:ec:fe:19:
2b:58:65:57:6b:48:d0:4f:f6:70:39:e5:67:e8:c2:00:43:e7:
7a:ee:6c:2b:82:2a:1a:42:92:f1:d9:ea:c6:10:fd:4e:ca:24:
32:95:ce:4a:3b:8c:aa:47:1a:e5:fe:57:e4:a2:9e:c6:83:aa:
aa:f8:f7:f8:b2:6a:b3:b0:f7:36:1a:6f:dc:cf:c7:7b:0b:da:
8d:11:b8:29:b9:69:80:e5:27:21:d7:22:44:28:03:a2:b9:45:
30:8d:a9:f8:b5:b3:e0:a0:74:f2:54:b8:27:b9:52:d4:54:e6:
17:0c:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:23:32 2026 by rpki-client