Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa
File: YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa (raw, json)
Hash identifier: 6uJ//EEMyi6s/7I5zLsMnq2mwES70jTLQRVEP2+rnOs=
Subject key identifier: 61:03:38:58:82:14:35:A2:FD:F8:F0:99:37:EF:D8:67:9D:94:55:26
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 01A0B18B8A16A8571A694935B2D048E38FBE
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa
Signing time: Thu 17 Sep 2026 22:45:07 +0000
ROA not before: Thu 17 Sep 2026 22:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62416
IP address blocks: 185.32.188.0/22 maxlen: 24
185.222.8.0/22 maxlen: 22
2a00:c560::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:8b:8a:16:a8:57:1a:69:49:35:b2:d0:48:e3:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Sep 17 22:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61033858821435a2fdf8f09937efd8679d945526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:0c:d5:a3:88:74:78:b0:77:5d:b0:ca:ce:
05:2a:c4:44:c6:9b:40:18:28:39:4c:54:ff:4e:fb:
80:ac:ae:f6:11:d7:ed:5e:f8:a9:e1:7b:35:9c:5f:
95:e9:6d:07:c4:0b:1f:d3:04:8e:c5:b6:ee:7f:f1:
b7:6a:42:a0:0a:3e:5a:57:84:d2:9c:49:5f:64:a4:
1a:79:01:c0:46:3f:fd:0c:e8:33:71:45:e3:6d:ba:
e3:47:de:09:fd:a2:7c:ff:6a:7f:9d:9a:eb:0a:45:
01:f4:0c:48:59:53:5b:56:26:1c:58:a7:53:2d:f3:
af:73:a0:89:a0:0c:22:e1:23:59:2d:97:5a:6d:fb:
31:82:ec:c6:09:00:55:2b:f5:f0:81:f1:77:b6:3c:
09:47:97:2e:2d:83:57:ec:f0:90:aa:5e:13:8a:cd:
f5:cf:52:eb:03:b6:f1:08:73:14:b4:dc:ca:60:51:
e5:a3:d0:93:89:34:a7:9a:e0:a4:a5:bb:5c:19:07:
5d:78:c9:65:84:ea:bb:37:a3:72:85:cc:a5:d7:59:
3f:a4:24:83:af:db:2e:af:21:93:2d:14:30:e9:fd:
63:96:a9:b0:8f:2c:f8:aa:45:b6:47:60:80:82:11:
15:87:bb:e6:2f:ec:48:2a:1d:70:7e:7a:1a:14:38:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:38:58:82:14:35:A2:FD:F8:F0:99:37:EF:D8:67:9D:94:55:26
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.188.0/22
185.222.8.0/22
IPv6:
2a00:c560::/29
Signature Algorithm: sha256WithRSAEncryption
b2:12:e6:d5:4c:31:6f:1c:7f:c8:72:8a:b7:6e:61:78:e3:72:
e7:9b:3e:3a:e2:ff:be:d8:57:7a:29:eb:48:e7:53:86:e7:61:
58:aa:27:85:75:7a:5e:66:47:e0:57:48:25:12:c5:7f:3f:ff:
fc:da:85:10:bb:90:47:89:b7:5a:35:14:16:bb:71:53:c1:44:
f0:2e:69:f9:d3:85:27:b8:af:3e:2f:02:ae:91:d9:d3:cf:72:
3a:9e:e2:65:9f:8d:d7:e9:d7:03:b3:ad:64:32:90:6d:68:18:
ca:f5:89:67:2c:3f:f6:ca:7d:e1:50:23:a5:38:42:0c:2a:1e:
d7:a8:04:06:92:f5:fd:28:fa:e6:23:d5:b1:d0:3e:1f:ab:79:
8a:74:9f:9f:bb:04:0c:63:da:e8:cf:3c:f1:f5:a8:15:09:01:
47:b3:31:84:1b:5c:7e:bb:fe:11:28:d3:4d:52:45:52:52:26:
31:a2:49:34:fd:0c:19:4b:fa:a9:97:84:2d:d1:85:22:b1:ad:
20:f4:a5:8b:3b:47:be:e5:60:b1:61:52:56:4b:4e:44:d5:19:
09:c1:28:14:17:c0:78:d9:6d:9b:eb:f6:e8:bd:e9:47:3a:f5:
bd:2a:4b:d5:ad:b2:90:40:43:cf:80:da:4f:b7:68:c4:6a:f6:
d2:31:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:41 2026 by rpki-client