Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yvT_DoKcEXwRFbAO_CjteEdXaLc.roa
File: yvT_DoKcEXwRFbAO_CjteEdXaLc.roa (raw, json)
Hash identifier: aFYo8/DuyIaRtOPIKrKhG+XMzceSFi/OrCzhwTWfT90=
Subject key identifier: CA:F4:FF:0E:82:9C:11:7C:11:15:B0:0E:FC:28:ED:78:47:57:68:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA4DED64784358D91F586E73BE07E7CC9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yvT_DoKcEXwRFbAO_CjteEdXaLc.roa
Signing time: Mon 27 Jul 2026 18:38:15 +0000
ROA not before: Mon 27 Jul 2026 18:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 62.105.196.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
194.77.69.0/24 maxlen: 24
194.120.121.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:de:d6:47:84:35:8d:91:f5:86:e7:3b:e0:7e:7c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 27 18:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caf4ff0e829c117c1115b00efc28ed78475768b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:20:25:40:f1:54:31:8b:5f:20:32:ef:74:
99:55:0c:f2:71:20:7f:05:84:8f:80:21:49:df:24:
85:ea:0b:68:7f:54:d7:91:83:b3:fc:e4:d6:92:3e:
21:19:65:a8:20:6d:75:fa:aa:7c:9f:7e:06:6e:8f:
c1:51:6d:cd:f9:19:dd:d1:3f:03:03:f9:c8:61:33:
c2:c4:d3:7a:6a:49:06:db:8b:59:da:5b:e5:2b:38:
49:05:97:c0:db:5f:4c:5e:68:14:0a:0a:30:6a:3a:
4f:de:77:01:12:b5:e0:7d:e5:72:28:2b:fc:e0:89:
0a:6d:4f:5a:00:59:8f:cc:b4:fe:b1:f6:4d:13:3c:
ba:c7:53:11:3e:f5:b3:56:e0:e1:1b:63:2c:a4:1c:
f2:48:1f:7c:43:25:6a:8f:53:be:91:58:2e:d5:c9:
cd:6f:14:e4:29:fd:89:b5:88:8c:2a:24:0b:ce:f3:
35:0a:20:8b:b2:f7:19:f6:4c:55:61:5c:14:8e:57:
d5:3b:07:ba:3b:8d:64:57:db:6c:06:63:38:ea:18:
c7:80:9d:09:fe:be:4b:de:13:98:20:d2:5d:0d:08:
1a:21:52:99:bd:13:72:29:37:6b:61:04:79:e8:b7:
a0:6f:38:09:fe:ed:45:22:a5:2c:44:63:db:38:d3:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F4:FF:0E:82:9C:11:7C:11:15:B0:0E:FC:28:ED:78:47:57:68:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yvT_DoKcEXwRFbAO_CjteEdXaLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.196.0/24
62.132.116.0/24
77.67.31.0/24
77.67.91.0/24
194.77.69.0/24
194.120.121.0/24
195.21.129.0/24
212.221.26.0/24
212.222.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:86:13:0c:0b:90:b6:0f:7f:92:22:4c:92:af:90:d0:65:ff:
6b:7a:58:4d:0f:d5:82:96:b0:46:27:1c:99:c9:26:df:da:2d:
ad:47:74:cf:85:c2:9d:ac:bb:44:5d:43:71:08:34:46:51:b1:
08:d1:7f:8d:40:03:94:20:8a:c2:1f:b2:fc:bd:8f:2e:72:fb:
c0:f5:5e:bf:62:4c:b6:2f:7c:e3:56:81:6a:3d:41:92:cf:69:
04:ff:c2:6a:26:9f:3d:b2:39:45:50:3e:71:13:bc:60:00:27:
71:33:55:f4:f4:07:4d:4b:c8:10:25:a2:cb:f3:7e:21:00:e2:
3f:59:e7:57:ad:bb:5b:ed:8c:ea:52:fb:1b:1f:ae:32:81:25:
2b:38:b4:33:43:e7:58:4c:02:2a:0f:c6:19:bf:c9:6e:60:51:
a1:2a:d8:65:44:ad:13:fc:b2:1b:64:d4:78:cd:3c:35:28:43:
ea:1d:17:11:b2:97:80:c7:db:94:3f:d5:b5:a8:ba:e9:13:c7:
61:f0:b7:4f:03:6f:88:d7:a5:67:2e:c3:b3:53:a0:fb:15:bf:
0e:0e:51:f9:a4:e5:bb:a8:b2:ea:1c:0c:18:1d:18:ab:ca:d8:
7f:a0:8d:54:69:fb:71:8e:c1:eb:e8:56:2e:7b:ec:5b:d8:de:
fd:3b:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:57 2026 by rpki-client