Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YkKM9Xz3_-DVh04bCTs1gZOWUuQ.roa
File: YkKM9Xz3_-DVh04bCTs1gZOWUuQ.roa (raw, json)
Hash identifier: uEeHwd4dTU+UutdROXic6qCqHet7nGNG70+ra/KTPTk=
Subject key identifier: 62:42:8C:F5:7C:F7:FF:E0:D5:87:4E:1B:09:3B:35:81:93:96:52:E4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0C4CAE91762B97262643BF9DD8B0DE848
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YkKM9Xz3_-DVh04bCTs1gZOWUuQ.roa
Signing time: Mon 21 Sep 2026 16:27:07 +0000
ROA not before: Mon 21 Sep 2026 16:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 79.182.40.0/24 maxlen: 24
79.183.87.0/24 maxlen: 24
79.183.123.0/24 maxlen: 24
79.183.132.0/24 maxlen: 24
109.65.15.0/24 maxlen: 24
109.65.29.0/24 maxlen: 24
109.65.62.0/24 maxlen: 24
109.65.79.0/24 maxlen: 24
109.65.113.0/24 maxlen: 24
109.65.127.0/24 maxlen: 24
109.65.167.0/24 maxlen: 24
109.65.176.0/24 maxlen: 24
109.65.182.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.191.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.59.0/24 maxlen: 24
109.66.69.0/24 maxlen: 24
109.66.104.0/24 maxlen: 24
109.66.128.0/24 maxlen: 24
109.66.196.0/24 maxlen: 24
109.66.229.0/24 maxlen: 24
109.66.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ca:e9:17:62:b9:72:62:64:3b:f9:dd:8b:0d:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 21 16:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62428cf57cf7ffe0d5874e1b093b3581939652e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:2b:94:83:97:08:e4:6a:35:bc:5a:ac:1f:
e5:ef:d3:c3:5d:0f:b0:1b:f0:c1:b8:53:2f:b1:73:
b6:b7:c9:b7:cd:c7:5f:4e:2a:d0:76:4d:6d:bf:da:
97:8a:47:8a:4a:68:91:03:0c:5c:49:b5:cc:95:4f:
c2:c8:c8:8a:15:95:51:ef:0f:a5:7e:8a:40:0d:05:
81:c0:3b:9a:70:6e:d5:6e:cc:3f:8f:79:ed:be:02:
ea:ef:4d:9a:9f:74:d3:a8:be:bf:e6:e7:10:ae:9b:
37:f1:4b:c6:3a:7f:ab:01:90:c5:c2:91:be:ab:78:
33:16:71:8d:b0:f9:48:52:8b:59:26:bd:f5:bf:01:
16:6c:c5:81:c3:c9:59:48:50:ca:ff:d2:90:28:d1:
69:36:59:85:75:da:ae:9e:9e:8f:d5:94:ae:95:b4:
02:df:b1:1e:fc:63:57:e8:a0:26:5c:2d:3a:b4:a5:
0e:88:61:3d:00:49:70:70:7b:b4:f2:bd:ae:54:99:
4e:02:4e:e0:a4:fa:be:22:00:ca:fb:a9:81:25:aa:
39:87:af:fc:b1:89:3d:c9:10:91:67:f7:fe:62:7a:
eb:8b:ef:f0:54:89:a5:cf:08:84:50:b5:a3:7c:3b:
48:9c:d9:f6:14:ab:73:e3:33:21:d6:35:82:62:87:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:8C:F5:7C:F7:FF:E0:D5:87:4E:1B:09:3B:35:81:93:96:52:E4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YkKM9Xz3_-DVh04bCTs1gZOWUuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.40.0/24
79.183.87.0/24
79.183.123.0/24
79.183.132.0/24
109.65.15.0/24
109.65.29.0/24
109.65.62.0/24
109.65.79.0/24
109.65.113.0/24
109.65.127.0/24
109.65.167.0/24
109.65.176.0/24
109.65.182.0/24
109.65.189.0/24
109.65.191.0/24
109.66.57.0/24
109.66.59.0/24
109.66.69.0/24
109.66.104.0/24
109.66.128.0/24
109.66.196.0/24
109.66.229.0/24
109.66.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9a:47:5c:a9:b6:39:d6:46:d0:06:7e:b1:95:7f:ae:3c:cf:
f6:f1:5d:51:8f:9f:1f:45:2d:67:f5:e2:dd:1f:74:05:12:22:
ab:93:a4:0b:ce:8a:f8:24:35:81:a7:76:65:78:2c:51:15:56:
4e:2c:a7:d2:38:56:e2:44:08:de:2f:20:de:40:6a:4a:9c:6e:
44:75:c0:f5:88:bd:5f:2d:22:f4:75:8a:c3:6f:81:14:5e:62:
1a:a9:bd:e9:13:0a:d4:9c:63:d4:fb:da:59:9a:59:d6:92:f9:
e4:74:d7:be:aa:41:b1:86:a5:11:6a:c1:42:e5:86:ae:e8:c1:
6a:93:43:70:79:99:1e:98:7c:e4:73:9d:1f:3d:6c:21:95:ac:
e7:b9:6d:e3:80:90:20:db:73:94:70:73:17:24:c1:3e:7f:fd:
d7:d6:59:61:26:73:6e:ca:ea:43:ca:7a:a2:00:dd:11:3b:7d:
b0:82:23:f8:5c:d7:ba:53:cc:f4:6d:e8:c5:5c:38:9f:75:79:
77:47:3a:31:39:6c:9a:28:cc:c4:47:ac:4c:5e:5c:7e:51:38:
df:17:3f:4d:4d:0e:68:c9:0f:80:88:38:47:b4:66:c3:e8:38:
76:d8:b2:88:5d:68:f6:60:ea:a3:d7:64:f2:0f:8b:1f:f1:df:
6e:27:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:28 2026 by rpki-client