Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/y2YOxq73wxqpsD0YZ8pOXdLitLk.roa
File: y2YOxq73wxqpsD0YZ8pOXdLitLk.roa (raw, json)
Hash identifier: c4b5W1/zwM1DY57UKacEsED6Yc4dNYwQiO/KOLoutlI=
Subject key identifier: CB:66:0E:C6:AE:F7:C3:1A:A9:B0:3D:18:67:CA:4E:5D:D2:E2:B4:B9
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019C5C06593A12E8FDA7716ADE99E4E18C97
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/y2YOxq73wxqpsD0YZ8pOXdLitLk.roa
Signing time: Sat 14 Feb 2026 12:00:45 +0000
ROA not before: Sat 14 Feb 2026 12:00:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 5.159.54.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:06:59:3a:12:e8:fd:a7:71:6a:de:99:e4:e1:8c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Feb 14 12:00:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb660ec6aef7c31aa9b03d1867ca4e5dd2e2b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:d5:0f:9e:8f:7c:ba:c0:0e:34:8b:43:9a:
6d:3c:1b:a9:aa:d7:6d:c0:a2:cd:0a:23:88:89:48:
16:de:cf:71:ea:3e:14:09:3e:74:39:a7:50:e1:24:
74:72:cb:96:a1:e4:c1:d4:af:7b:d0:74:53:b6:f7:
e1:40:0f:fc:c7:42:84:fc:d9:97:f5:88:d5:c4:1c:
33:da:2e:a8:23:e0:8e:83:c4:cc:23:77:f8:a9:af:
49:96:30:1f:be:d1:bc:00:45:0f:eb:c4:7d:37:4b:
50:d6:d5:84:93:4c:e9:ad:99:e6:d3:f4:e5:57:a5:
26:8b:6a:4f:e7:c3:45:da:74:85:12:5f:83:ec:53:
ab:bd:ca:82:61:94:c7:90:72:ad:b9:2f:94:f0:72:
92:f4:e2:d5:db:cc:22:d2:3c:1e:56:65:6e:6c:c1:
eb:d3:2e:ee:e8:57:c3:7a:ad:d6:6f:5f:62:af:ce:
e9:4a:d7:ad:38:93:06:e5:5b:62:97:f0:46:5a:b2:
33:c4:77:05:e3:7b:a7:31:d2:e2:fe:a0:a3:c3:a8:
8b:e5:71:e2:68:68:b7:1b:f6:63:59:fd:0d:8f:eb:
5d:cf:77:7b:26:dc:5f:56:3e:67:e3:39:bd:45:c1:
85:85:1a:01:06:ea:62:7b:4d:c9:35:68:da:fd:6d:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:0E:C6:AE:F7:C3:1A:A9:B0:3D:18:67:CA:4E:5D:D2:E2:B4:B9
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/y2YOxq73wxqpsD0YZ8pOXdLitLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.54.0/24
45.94.213.0/24
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a8:04:5d:bf:e4:af:92:64:82:a5:c3:9d:64:85:93:53:9c:
33:ee:e6:b5:a6:74:77:74:1c:15:1e:8f:ce:77:95:ad:cb:1f:
f4:43:dd:ee:ad:cd:e5:11:53:de:3b:fd:4c:80:51:b8:5d:d7:
72:8d:5e:e5:ab:9a:df:8b:16:d8:cf:23:d7:c8:96:94:6c:37:
fa:82:b3:87:75:90:ee:79:54:52:3f:6c:2b:55:11:58:d8:66:
47:01:ce:92:67:c8:07:95:20:8d:10:d1:16:e7:2a:de:a4:79:
1a:07:db:ef:91:f6:d6:01:da:2b:1b:85:ae:aa:10:31:1e:12:
cd:74:d2:73:f3:4c:67:fa:c5:ae:ac:b8:34:ed:d2:05:e9:28:
1f:7d:b7:74:20:91:98:7b:a6:22:36:a8:99:d9:df:22:aa:3e:
21:79:26:eb:ae:3a:1a:14:5b:60:0a:4f:59:7d:40:8d:d8:f5:
40:23:8a:24:5b:91:ac:4a:d1:f3:c6:7b:10:f5:93:ea:12:96:
84:73:e5:64:b8:02:12:29:92:2d:df:e9:7f:7f:15:92:59:02:
e2:1f:15:51:a9:5a:32:19:3c:25:dc:ef:2d:5b:5d:65:ad:fc:
9d:1c:8c:89:8d:cc:22:8b:9c:05:cc:a6:37:67:94:36:c4:2b:
b8:f1:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:31 2026 by rpki-client