Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YTDC7hzg7QzGtp6thpinDTGP-qo.roa
File: YTDC7hzg7QzGtp6thpinDTGP-qo.roa (raw, json)
Hash identifier: ElrXjVymqeJpITeqYHAjPG6cT36CVjD0Pv4HTFntjRY=
Subject key identifier: 61:30:C2:EE:1C:E0:ED:0C:C6:B6:9E:AD:86:98:A7:0D:31:8F:FA:AA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019EACB82C29378F486D6D6AA0D86F7105A1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YTDC7hzg7QzGtp6thpinDTGP-qo.roa
Signing time: Tue 09 Jun 2026 14:10:11 +0000
ROA not before: Tue 09 Jun 2026 14:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.140.145.0/24 maxlen: 24
109.107.155.0/24 maxlen: 32
194.39.110.0/24 maxlen: 24
2a0e:4000::/32 maxlen: 48
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:b8:2c:29:37:8f:48:6d:6d:6a:a0:d8:6f:71:05:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 9 14:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6130c2ee1ce0ed0cc6b69ead8698a70d318ffaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:8d:3d:ec:f8:a9:70:cf:3d:9b:6f:6c:01:
ec:21:72:c7:57:75:8c:e6:40:66:9f:2e:8a:65:71:
32:a1:87:53:96:d3:4c:ab:00:3c:74:13:df:d9:1b:
5b:3d:14:dd:8e:7a:bd:77:ed:01:13:6a:ac:38:a2:
00:e3:59:5c:b5:c1:fb:53:2d:c0:e3:af:ec:fa:97:
a7:47:66:ed:26:b8:ad:18:ef:a8:6e:39:f6:5c:0b:
cf:5d:71:98:47:8b:fa:ed:96:bb:14:44:7f:10:23:
21:92:97:5a:f4:19:29:79:83:0c:8d:46:24:74:92:
b5:b1:f2:81:2c:b2:b0:7a:44:68:2e:73:4e:e5:f0:
c3:54:e2:f6:dd:85:c5:84:89:73:5d:6a:3c:c2:47:
d4:d6:9f:b6:2c:6b:23:b7:c7:e8:a2:dd:9b:92:ef:
ab:20:e5:84:71:66:02:62:76:9d:90:29:0e:bc:9b:
08:98:fb:6e:c9:e0:4f:fe:bb:d9:fc:23:b5:8b:8f:
5c:b8:bd:08:1f:80:ea:bf:bc:f7:4b:02:c4:a9:61:
e4:0e:00:23:92:65:51:46:d6:34:43:cb:ca:e9:21:
46:96:a5:a0:74:e2:9b:e2:f1:92:67:3b:20:ca:79:
56:ed:27:48:0c:91:f5:db:3a:0c:b9:7d:ec:e4:8b:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:C2:EE:1C:E0:ED:0C:C6:B6:9E:AD:86:98:A7:0D:31:8F:FA:AA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YTDC7hzg7QzGtp6thpinDTGP-qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.21.0-5.181.23.255
45.140.145.0/24
109.107.155.0/24
194.39.110.0/24
IPv6:
2a0e:4000::/32
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
20:6f:c7:c5:6f:69:eb:b5:84:95:b0:c1:ab:be:15:32:7f:ee:
b5:c9:1c:2d:48:29:52:c7:c9:66:e6:c0:3c:5e:d8:61:aa:39:
e0:a3:9c:96:a1:b6:b9:0d:93:71:32:86:e2:40:4a:59:76:49:
2c:93:3e:0c:b5:10:ce:f1:09:c5:f9:1a:f6:24:d7:7d:10:a3:
f5:89:97:7c:72:55:dd:0d:31:b5:b2:cc:9c:35:29:f4:b8:35:
38:66:ad:53:94:ad:af:b2:e3:27:34:63:ee:c3:63:eb:e2:3b:
b2:0d:87:8a:a3:77:78:e9:5c:40:50:e0:30:71:89:e1:d2:8d:
0f:1a:c4:15:7e:78:6d:df:f0:b5:17:31:74:11:49:74:06:3c:
dd:a7:83:91:14:34:a3:92:7c:fe:78:f6:18:1c:c3:ba:ca:4d:
d2:b8:1d:ea:1a:41:e1:21:05:31:ea:67:89:be:a4:48:43:54:
37:d2:12:e4:27:26:b7:8b:d9:72:af:80:60:9a:ee:4e:4c:5c:
1e:39:92:e8:0e:85:e0:12:a1:c0:6a:18:a3:79:d4:f2:7f:9d:
5c:7e:33:43:29:73:20:0a:f9:b1:08:8c:c2:74:53:31:f5:1c:
5f:b8:5d:4e:31:a8:7d:d1:25:c4:18:e8:3e:93:aa:39:b1:07:
73:b3:21:83
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ6suCwpN49IbW1qoNhvcQWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNjA5MTQxMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTMwYzJlZTFjZTBlZDBjYzZiNjllYWQ4Njk4YTcwZDMxOGZmYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8GNPez4qXDPPZtvbAHsIXLHV3WM
5kBmny6KZXEyoYdTltNMqwA8dBPf2RtbPRTdjnq9d+0BE2qsOKIA41lctcH7Uy3A
46/s+penR2btJritGO+objn2XAvPXXGYR4v67Za7FER/ECMhkpda9BkpeYMMjUYk
dJK1sfKBLLKwekRoLnNO5fDDVOL23YXFhIlzXWo8wkfU1p+2LGsjt8foot2bku+r
IOWEcWYCYnadkCkOvJsImPtuyeBP/rvZ/CO1i49cuL0IH4Dqv7z3SwLEqWHkDgAj
kmVRRtY0Q8vK6SFGlqWgdOKb4vGSZzsgynlW7SdIDJH12zoMuX3s5IudcQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGEwwu4c4O0MxraerYaYpw0xj/qqMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvWVREQzdoemc3UXpHdHA2dGhwaW5EVEdQLXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAmBAIAATAgMAwDBAAFtRUD
BAMFtRADBAAtjJEDBABta5sDBADCJ24wFgQCAAIwEAMFACoOQAADBwAqDkAH//Qw
DQYJKoZIhvcNAQELBQADggEBACBvx8Vvaeu1hJWwwau+FTJ/7rXJHC1IKVLHyWbm
wDxe2GGqOeCjnJahtrkNk3EyhuJASll2SSyTPgy1EM7xCcX5GvYk130Qo/WJl3xy
Vd0NMbWyzJw1KfS4NThmrVOUra+y4yc0Y+7DY+viO7INh4qjd3jpXEBQ4DBxieHS
jQ8axBV+eG3f8LUXMXQRSXQGPN2ng5EUNKOSfP549hgcw7rKTdK4HeoaQeEhBTHq
Z4m+pEhDVDfSEuQnJreL2XKvgGCa7k5MXB45kugOheASocBqGKN51PJ/nVx+M0Mp
cyAK+bEIjMJ0UzH1HF+4XU4xqH3RJcQY6D6TqjmxB3OzIYM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:59 2026 by rpki-client