Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa
File: Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa (raw, json)
Hash identifier: Ud/VdUNLwM8U8Wf4qqElLCvSQBMZGtbKM6rNdGJ2xtI=
Subject key identifier: 62:FF:E3:E7:EA:27:06:BE:A9:31:DF:AC:35:4E:45:F5:D1:90:33:25
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 01A0A183898F2EB2509B44ADFBF4A7F61CAE
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa
Signing time: Mon 14 Sep 2026 20:02:27 +0000
ROA not before: Mon 14 Sep 2026 20:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214570
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
185.101.39.0/24 maxlen: 24
185.254.165.0/24 maxlen: 24
193.93.171.0/24 maxlen: 24
195.234.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:83:89:8f:2e:b2:50:9b:44:ad:fb:f4:a7:f6:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Sep 14 20:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62ffe3e7ea2706bea931dfac354e45f5d1903325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:e4:f4:36:1c:73:eb:95:40:76:11:a7:73:
5e:af:91:a7:d7:2b:b1:73:67:0f:d1:4c:54:28:6f:
38:85:10:1c:57:cc:9e:bd:79:58:51:c6:e4:72:51:
45:33:50:07:83:5d:55:73:ed:81:ff:a8:7a:95:7c:
66:6c:3b:04:2c:56:f0:5d:7a:b0:dc:ae:36:50:41:
6c:27:4e:de:e6:81:e3:a8:7d:d0:3e:63:f4:38:e0:
52:c9:60:09:dd:d2:29:81:37:2d:41:b2:e7:36:25:
cb:52:c7:15:d0:67:11:87:3e:26:57:94:5f:38:ce:
f1:e4:bb:3a:7b:bd:d1:3d:27:5b:0a:c6:ac:80:94:
58:ac:cb:9d:66:f1:84:77:27:15:70:cc:5b:f5:42:
3a:50:72:6e:21:56:41:d9:02:4d:9e:52:eb:3c:38:
7f:d4:3c:ec:30:04:ee:f8:94:71:36:e1:cd:4c:85:
f0:a4:e9:52:bf:c0:f9:c1:c1:73:50:e0:56:ba:7e:
f8:52:8c:82:d3:e2:c5:d5:76:03:ca:c7:07:24:4f:
0f:db:e9:bf:ce:f3:25:e6:c1:52:8c:ed:ee:f4:9d:
4a:3e:0e:d6:84:e8:68:86:18:fa:9a:e0:a7:a0:eb:
60:39:ed:ed:6d:da:0a:80:02:29:20:5d:a2:47:af:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:E3:E7:EA:27:06:BE:A9:31:DF:AC:35:4E:45:F5:D1:90:33:25
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
45.156.116.0/22
91.228.168.0/24
185.101.39.0/24
185.254.165.0/24
193.93.171.0/24
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:be:17:07:bd:67:17:6c:c8:35:b5:eb:bf:7b:5b:26:b7:
42:79:3c:91:6f:08:14:d6:39:5f:67:cb:02:15:9f:ee:6e:99:
ee:93:77:3e:18:45:c5:e3:7c:52:d5:ef:14:29:85:1a:be:0b:
a2:25:c7:0f:64:c4:ca:f9:fa:93:40:94:b1:40:86:1c:39:10:
d1:ff:02:84:b8:bb:ad:c2:e2:8f:08:53:34:f1:c1:31:c3:19:
23:d2:61:64:ae:33:0d:8a:1c:33:e9:f7:d1:f1:ae:ea:6a:f7:
cd:b9:39:be:26:7b:3c:11:ea:8c:56:9c:48:c6:b8:5b:4e:ae:
db:83:19:0a:8a:e6:df:ee:27:45:6c:31:de:cc:67:1e:c8:c2:
7a:c4:ed:ab:ed:ea:9a:17:99:8b:c5:da:9b:a1:23:75:d7:88:
d8:f7:55:1d:0c:71:99:41:df:d9:6e:9c:c3:02:79:55:e2:96:
88:d7:76:f0:17:06:07:3b:0e:8e:a2:52:11:0e:19:2c:19:aa:
34:d7:ac:e1:a5:96:6d:af:84:8b:68:71:91:3a:af:39:39:8d:
d7:f8:fb:c3:f5:c2:7a:62:93:22:fa:11:3d:51:13:6a:be:71:
e8:f4:05:e5:27:87:37:50:35:95:a6:72:e0:11:d3:5e:72:68:
17:36:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:39:57 2026 by rpki-client