Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa
File: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (raw, json)
Hash identifier: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=
Subject key identifier: CB:3C:A3:E8:2B:48:85:D2:C3:B5:41:98:D9:3A:15:18:C7:4F:F4:69
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019EB07C8D537F08665880E5AB7F513303F3
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa
Signing time: Wed 10 Jun 2026 07:43:33 +0000
ROA not before: Wed 10 Jun 2026 07:43:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
80.173.228.0/23 maxlen: 23
80.173.228.0/24 maxlen: 24
80.173.229.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
2a12:100::/29 maxlen: 29
2a12:100:10::/48 maxlen: 48
2a12:100:11::/48 maxlen: 48
2a12:100:12::/48 maxlen: 48
2a12:100:13::/48 maxlen: 48
2a12:100:14::/48 maxlen: 48
2a12:100:15::/48 maxlen: 48
2a12:100:16::/48 maxlen: 48
2a12:100:17::/48 maxlen: 48
2a12:100:18::/48 maxlen: 48
2a12:100:19::/48 maxlen: 48
2a12:100:1a::/48 maxlen: 48
2a12:100:1b::/48 maxlen: 48
2a12:100:1c::/48 maxlen: 48
2a12:100:1d::/48 maxlen: 48
2a12:100:1e::/48 maxlen: 48
2a12:100:1f::/48 maxlen: 48
2a12:100:20::/48 maxlen: 48
2a12:100:21::/48 maxlen: 48
2a12:100:22::/48 maxlen: 48
2a12:100:23::/48 maxlen: 48
2a12:100:24::/48 maxlen: 48
2a12:100:25::/48 maxlen: 48
2a12:100:26::/48 maxlen: 48
2a12:100:27::/48 maxlen: 48
2a12:100:28::/48 maxlen: 48
2a12:100:29::/48 maxlen: 48
2a12:100:2a::/48 maxlen: 48
2a12:100:2b::/48 maxlen: 48
2a12:100:2c::/48 maxlen: 48
2a12:100:2d::/48 maxlen: 48
2a12:100:2e::/48 maxlen: 48
2a12:100:2f::/48 maxlen: 48
2a12:100:30::/48 maxlen: 48
2a12:100:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:7c:8d:53:7f:08:66:58:80:e5:ab:7f:51:33:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jun 10 07:43:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb3ca3e82b4885d2c3b54198d93a1518c74ff469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:59:5a:75:c8:a9:a9:a5:7c:80:5d:76:48:
71:f7:5d:6c:5e:56:7f:2e:52:57:b4:32:76:39:f5:
a6:f3:5b:fa:ab:ea:f2:23:e9:e5:93:9f:b3:fe:e4:
d3:2e:e8:72:e7:e8:f7:95:d7:45:6e:f7:9c:8f:cf:
5d:bd:a8:f7:65:b5:9c:f5:a5:1f:3c:a3:da:92:ae:
f6:38:ba:7c:bf:2e:d2:bb:fd:8d:03:03:e7:ca:27:
d7:d7:a1:66:8f:51:fd:7f:5b:1e:c1:9c:e1:47:91:
0d:cb:7c:33:d3:54:7b:5a:d5:b0:a8:a5:d1:97:80:
16:a0:f2:a7:12:6a:9b:93:01:b5:56:bf:86:13:2c:
3f:fb:53:f1:d9:11:cd:f7:d6:12:a1:54:a2:db:0f:
9a:3e:2b:c3:63:04:25:14:bd:30:6d:9f:d8:71:9f:
43:c0:45:61:e7:c7:ae:54:a7:d9:35:0e:2f:71:35:
9e:33:e6:cb:08:f6:80:95:c1:8a:dd:e6:cd:47:3c:
22:9c:07:e4:e3:86:77:fc:53:3a:3d:39:95:c1:85:
c9:47:3a:d3:c1:91:75:4c:f6:67:05:a2:8a:53:4b:
9e:3b:18:e7:0d:8f:82:2a:12:a5:cd:de:11:10:82:
a8:0d:4f:d9:cf:92:30:2b:61:70:71:63:94:e5:b1:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:A3:E8:2B:48:85:D2:C3:B5:41:98:D9:3A:15:18:C7:4F:F4:69
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
80.173.228.0/23
185.65.255.0/24
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
7e:9e:56:29:b6:f7:56:69:fc:84:29:fe:af:86:35:72:0e:84:
a2:18:a1:c5:46:d2:53:88:4c:2c:71:b2:de:db:09:01:3a:8c:
7a:a3:ff:c9:d4:11:54:5e:b4:ca:b3:cf:19:d6:a6:45:5e:63:
11:2e:4c:80:61:e3:1a:f7:35:2b:48:cc:54:4f:21:f0:f6:08:
e2:94:00:f6:de:f2:d5:89:2e:72:3a:89:4a:db:1f:35:7d:2f:
92:6c:6c:90:88:d4:c3:df:cd:20:7e:61:cd:b0:cd:d9:51:dd:
a8:14:be:fa:ff:7d:42:39:8f:16:ba:ff:8f:41:84:31:76:56:
de:6f:c8:9e:bc:e5:65:a4:69:a9:ba:fe:86:03:c8:59:aa:f1:
71:2e:2a:63:99:4f:71:3f:2b:81:3d:91:3a:37:ed:2f:3f:f9:
46:73:af:7b:46:fc:e9:f0:eb:e1:84:c7:a0:63:82:3e:12:87:
16:e5:a2:11:79:06:3b:1e:17:94:54:e2:a4:58:31:01:97:82:
07:86:f7:55:31:5f:f5:dc:b1:22:c3:4f:9f:5f:35:25:47:2d:
f6:77:6e:29:77:ed:8c:9f:1a:21:86:68:99:04:07:f8:1c:1f:
d6:4c:ff:7c:14:d5:ec:ea:7f:5b:41:0a:35:c5:3d:8b:12:3c:
0b:b1:e8:fd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ6wfI1TfwhmWIDlq39RMwPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjYwNjEwMDc0MzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjNjYTNlODJiNDg4NWQyYzNiNTQxOThkOTNhMTUxOGM3NGZmNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yBZWnXIqamlfIBddkhx911sXlZ/
LlJXtDJ2OfWm81v6q+ryI+nlk5+z/uTTLuhy5+j3lddFbvecj89dvaj3ZbWc9aUf
PKPakq72OLp8vy7Su/2NAwPnyifX16Fmj1H9f1sewZzhR5ENy3wz01R7WtWwqKXR
l4AWoPKnEmqbkwG1Vr+GEyw/+1Px2RHN99YSoVSi2w+aPivDYwQlFL0wbZ/YcZ9D
wEVh58euVKfZNQ4vcTWeM+bLCPaAlcGK3ebNRzwinAfk44Z3/FM6PTmVwYXJRzrT
wZF1TPZnBaKKU0ueOxjnDY+CKhKlzd4REIKoDU/Zz5IwK2FwcWOU5bF9KwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMs8o+grSIXSw7VBmNk6FRjHT/RpMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEveXp5ajZDdEloZExEdFVHWTJUb1ZHTWRQOUdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAPgM4AwQB
UK3kAwQAuUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQB+nlYp
tvdWafyEKf6vhjVyDoSiGKHFRtJTiEwscbLe2wkBOox6o//J1BFUXrTKs88Z1qZF
XmMRLkyAYeMa9zUrSMxUTyHw9gjilAD23vLViS5yOolK2x81fS+SbGyQiNTD380g
fmHNsM3ZUd2oFL76/31COY8Wuv+PQYQxdlbeb8ievOVlpGmpuv6GA8hZqvFxLipj
mU9xPyuBPZE6N+0vP/lGc697Rvzp8OvhhMegY4I+EocW5aIReQY7HheUVOKkWDEB
l4IHhvdVMV/13LEiw0+fXzUlRy32d24pd+2MnxohhmiZBAf4HB/WTP98FNXs6n9b
QQo1xT2LEjwLsej9
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:07 2026 by rpki-client