Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa
File: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (raw, json)
Hash identifier: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=
Subject key identifier: C9:E5:CE:E9:DF:E1:0C:6C:03:4D:4F:20:36:FA:09:25:93:14:4E:7E
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019C9913F1D0E1A069600E14ABE3A1892548
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa
Signing time: Thu 26 Feb 2026 08:32:26 +0000
ROA not before: Thu 26 Feb 2026 08:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29097
IP address blocks: 185.206.0.0/22 maxlen: 24
185.208.28.0/22 maxlen: 24
217.26.48.0/20 maxlen: 24
2a00:d70::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:13:f1:d0:e1:a0:69:60:0e:14:ab:e3:a1:89:25:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Feb 26 08:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9e5cee9dfe10c6c034d4f2036fa092593144e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:4d:75:83:17:39:7d:4b:39:f0:38:eb:a9:
78:cd:3e:45:8c:3d:52:f3:07:e6:37:32:49:71:99:
37:be:33:ad:bd:49:d6:8d:86:e9:02:9b:33:ce:82:
86:f0:ac:35:7c:38:04:b4:a8:9c:c0:49:18:83:b7:
8b:8a:e2:39:77:f1:1e:a0:38:5f:7a:77:f0:65:8b:
1f:99:6c:d0:d7:6c:37:42:fc:a2:7a:9f:81:fd:73:
d0:f2:dd:b6:45:dd:b9:d1:34:ea:af:a3:f6:23:9f:
a9:19:fe:9e:21:93:3c:78:06:9c:ee:af:68:ff:99:
3d:79:95:fa:b2:e7:a5:91:90:a8:3f:96:36:77:f3:
e4:00:ce:55:f7:b6:67:9f:d1:dc:83:e6:de:9d:68:
e9:00:a8:17:95:8a:c4:0b:5b:03:38:f1:38:ff:9e:
90:8e:b2:4e:5a:23:b3:e5:9d:59:12:ab:a4:4b:48:
00:7e:af:be:ee:c7:22:c9:4e:5f:d9:35:02:ec:66:
e8:8b:71:a7:a8:90:50:54:4b:2e:cb:a9:ad:de:5d:
f0:90:63:4d:2b:2c:06:04:e0:66:c7:13:19:bb:89:
ef:62:69:cf:c3:4e:df:59:63:0f:a9:67:09:66:73:
a8:e8:d0:23:a8:66:d5:f9:23:59:28:e3:67:e5:be:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:CE:E9:DF:E1:0C:6C:03:4D:4F:20:36:FA:09:25:93:14:4E:7E
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.0.0/22
185.208.28.0/22
217.26.48.0/20
IPv6:
2a00:d70::/32
Signature Algorithm: sha256WithRSAEncryption
99:c3:6e:fd:06:58:40:e5:8a:4c:18:df:16:bd:a5:18:c0:08:
f3:08:7a:cd:2b:26:2d:c6:2f:ad:35:68:55:69:a2:48:33:14:
60:5c:a4:41:2d:10:c7:fc:44:bb:07:04:3d:03:4e:b8:69:25:
b0:63:e3:b2:75:70:41:74:1a:25:a6:ed:1f:45:e0:87:0c:af:
93:de:4a:a4:5e:2d:2d:2c:0c:cf:4a:d2:bb:87:e7:d6:4f:75:
c9:08:86:27:a3:41:59:93:47:d0:dd:69:e4:39:e0:3a:b7:ff:
b9:11:01:80:5e:4b:d8:a8:2f:59:dd:b9:e6:58:73:63:81:7e:
74:28:fe:a1:72:79:94:a7:0a:dc:b4:c3:42:15:08:8b:13:56:
2a:f5:08:fc:18:08:01:13:fb:cc:90:ca:3e:d9:29:c2:b4:44:
34:b3:66:9d:c9:4e:f7:b5:a1:0a:5f:1b:75:07:e1:f5:12:fb:
bf:89:75:f3:3c:53:20:a0:a4:24:1b:02:3d:7d:b6:36:4e:ce:
53:72:0a:ba:df:ef:07:70:01:53:72:c2:bb:28:fb:32:06:cb:
0a:af:52:5a:c7:59:6e:77:e2:dd:dd:b2:3f:36:9a:32:bb:b7:
ba:52:7a:40:48:bc:09:52:06:b6:da:64:5f:0d:bf:52:7c:63:
10:31:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:30 2026 by rpki-client