Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yy3ErXKmr6Qn4WgACvsw20nm5S8.roa
File: yy3ErXKmr6Qn4WgACvsw20nm5S8.roa (raw, json)
Hash identifier: DKcCvhCN4GA+COV/FEmRxnzmPEXHs3VCjt/1etPZWSQ=
Subject key identifier: CB:2D:C4:AD:72:A6:AF:A4:27:E1:68:00:0A:FB:30:DB:49:E6:E5:2F
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019FA7670484060F896E6F672E4E2D8D2A39
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yy3ErXKmr6Qn4WgACvsw20nm5S8.roa
Signing time: Tue 28 Jul 2026 06:26:14 +0000
ROA not before: Tue 28 Jul 2026 06:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/24 maxlen: 24
185.251.80.0/23 maxlen: 24
185.251.82.0/23 maxlen: 24
194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:67:04:84:06:0f:89:6e:6f:67:2e:4e:2d:8d:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jul 28 06:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb2dc4ad72a6afa427e168000afb30db49e6e52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:55:06:d6:de:aa:86:54:e6:06:d7:01:ab:
67:42:13:02:9e:4f:4e:19:6f:98:30:e6:7e:6d:5e:
2c:cf:ca:92:96:40:10:7c:18:a0:46:53:7d:7a:4d:
f0:50:7e:b8:dc:b8:a6:69:26:d4:23:41:a8:bf:d9:
e7:78:31:78:71:95:15:7b:36:95:62:8d:a8:0a:50:
1b:68:d0:1e:be:5d:67:60:9b:50:d1:c0:c2:22:df:
5d:3b:2f:85:bb:82:cb:a5:8b:8f:8c:5e:81:5d:7a:
0c:94:2b:6f:f7:b5:a6:55:21:34:13:7a:cf:35:6d:
97:75:7a:24:f3:0d:92:bc:f0:ac:91:db:20:79:ff:
df:ff:15:54:7a:67:89:03:8a:d6:67:27:9d:98:c8:
9a:a1:80:b3:34:19:3b:6a:de:5c:f9:f2:73:70:e1:
9d:d8:b1:d7:b3:bc:2f:5f:db:1b:da:f5:14:45:27:
f0:5b:fb:ec:86:0e:b9:5c:e5:cf:d8:52:8d:4c:34:
4c:8f:ab:5a:ab:a1:3b:c9:0a:a6:99:ab:b6:88:2b:
f6:fe:78:92:65:c5:12:35:d7:b7:6d:e9:df:f1:5c:
50:c9:56:ba:83:c9:12:61:15:75:0f:76:f1:48:9d:
69:d3:1c:aa:de:1c:2f:6c:2e:cd:8e:13:25:cf:8b:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2D:C4:AD:72:A6:AF:A4:27:E1:68:00:0A:FB:30:DB:49:E6:E5:2F
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yy3ErXKmr6Qn4WgACvsw20nm5S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/24
185.251.80.0/22
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
95:25:5e:bd:8f:55:79:cb:71:df:54:cc:d9:fa:ca:f0:ee:ff:
65:33:74:79:d8:e0:d7:ba:25:49:65:68:fe:6e:65:12:35:97:
25:53:2e:2f:15:a1:5e:a5:c2:c8:97:3a:58:dc:f6:e2:af:78:
49:af:43:bf:15:a8:b1:79:47:1b:7a:cc:56:28:ee:24:e5:79:
b9:54:c6:17:52:c8:8e:78:f4:0e:8a:35:88:d7:cf:55:0c:32:
4a:1e:b8:86:de:ed:4c:48:4a:01:6d:83:e8:c4:1d:f8:2b:a1:
5c:1c:a4:4e:26:16:99:ac:6a:bb:f5:c5:1d:01:6d:b0:ab:2c:
62:d6:80:3f:78:44:06:f6:ae:3a:07:06:e1:24:29:8c:00:55:
28:4a:a5:81:e6:71:aa:95:34:83:95:7e:88:c6:a1:d7:d7:3f:
bb:e0:da:1b:d2:fc:26:00:08:35:81:8d:3c:74:77:85:c4:69:
57:4b:69:28:1d:e0:ee:4b:26:02:8b:28:cf:0f:a8:a8:1e:80:
7c:03:1f:16:04:0a:64:b7:97:84:5f:15:5c:76:8c:4b:42:35:
f0:b8:77:9e:e7:38:2f:ea:2c:f1:a1:cb:b9:b2:c0:60:4e:2e:
59:47:99:9d:1e:80:bf:56:0f:a8:68:0b:a3:08:bd:6b:08:5a:
c8:2c:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:28 2026 by rpki-client