Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YbllRlUSv8QIqBXB6ORzV9hLSVA.roa
File: YbllRlUSv8QIqBXB6ORzV9hLSVA.roa (raw, json)
Hash identifier: M3t+HFV9VXuFsU8orgafKIYqJzgcY2WTC3eg2uj+R8s=
Subject key identifier: 61:B9:65:46:55:12:BF:C4:08:A8:15:C1:E8:E4:73:57:D8:4B:49:50
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1DECBB259A9897CA1E51C6BA58B57F44A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YbllRlUSv8QIqBXB6ORzV9hLSVA.roa
Signing time: Sun 15 Nov 2026 10:40:53 +0000
ROA not before: Sun 15 Nov 2026 10:40:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 9.247.49.0/24 maxlen: 24
9.247.55.0/24 maxlen: 24
9.247.57.0/24 maxlen: 24
9.247.59.0/24 maxlen: 24
9.247.61.0/24 maxlen: 24
9.247.68.0/24 maxlen: 24
9.247.69.0/24 maxlen: 24
9.247.73.0/24 maxlen: 24
9.247.75.0/24 maxlen: 24
9.247.76.0/24 maxlen: 24
9.247.85.0/24 maxlen: 24
9.247.87.0/24 maxlen: 24
9.247.93.0/24 maxlen: 24
9.247.94.0/24 maxlen: 24
9.247.95.0/24 maxlen: 24
9.247.97.0/24 maxlen: 24
9.247.99.0/24 maxlen: 24
9.247.101.0/24 maxlen: 24
9.247.105.0/24 maxlen: 24
9.247.106.0/24 maxlen: 24
9.247.108.0/24 maxlen: 24
9.247.114.0/24 maxlen: 24
9.247.116.0/24 maxlen: 24
9.247.117.0/24 maxlen: 24
9.247.120.0/24 maxlen: 24
9.247.123.0/24 maxlen: 24
9.247.125.0/24 maxlen: 24
9.247.129.0/24 maxlen: 24
9.247.130.0/24 maxlen: 24
9.247.137.0/24 maxlen: 24
9.247.152.0/24 maxlen: 24
9.247.153.0/24 maxlen: 24
9.247.154.0/24 maxlen: 24
9.247.156.0/24 maxlen: 24
9.247.161.0/24 maxlen: 24
9.247.162.0/24 maxlen: 24
9.247.163.0/24 maxlen: 24
9.247.170.0/24 maxlen: 24
9.247.176.0/24 maxlen: 24
9.247.182.0/24 maxlen: 24
9.247.198.0/24 maxlen: 24
9.247.203.0/24 maxlen: 24
9.247.205.0/24 maxlen: 24
9.247.207.0/24 maxlen: 24
9.247.208.0/24 maxlen: 24
9.247.211.0/24 maxlen: 24
9.247.214.0/24 maxlen: 24
9.247.216.0/24 maxlen: 24
9.247.219.0/24 maxlen: 24
9.247.220.0/24 maxlen: 24
9.247.232.0/24 maxlen: 24
9.247.242.0/24 maxlen: 24
9.247.254.0/24 maxlen: 24
206.245.147.0/24 maxlen: 24
206.245.150.0/24 maxlen: 24
206.245.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:cb:b2:59:a9:89:7c:a1:e5:1c:6b:a5:8b:57:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 15 10:40:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b965465512bfc408a815c1e8e47357d84b4950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:75:30:a2:04:4c:f7:b2:bc:a8:69:7c:3a:
5a:b5:6e:b1:06:26:32:b2:f5:9d:50:1d:e3:61:3a:
97:f2:3e:d9:43:2b:b2:0d:88:73:a1:ec:c3:d8:21:
b1:1c:09:98:81:c5:f4:a1:47:5e:df:8f:80:66:35:
76:3e:05:1b:dd:06:be:d0:01:46:12:39:a5:fe:40:
df:30:0b:39:ec:39:9c:5c:07:80:af:d0:5b:66:70:
8b:d1:9a:a8:c0:31:69:01:ec:8f:6f:21:8e:5c:26:
a5:c0:f4:10:b0:a2:d9:af:d8:81:3f:0c:38:7f:e4:
7a:22:90:93:ba:03:65:3f:a4:da:12:38:07:df:a0:
40:48:3e:4b:52:bc:a9:11:61:2f:ee:7b:d3:5a:94:
16:7a:f8:cd:c8:ce:1f:69:12:17:e2:2d:59:c6:ea:
b5:f0:bd:5b:c4:05:6a:b8:ff:ac:61:f0:36:5c:37:
0d:12:54:d4:ee:e2:f4:8c:24:ab:47:ea:f9:b9:45:
3d:2d:95:21:e0:da:85:75:4a:75:53:d3:d5:e6:62:
29:42:c8:a3:96:f4:2d:fc:07:76:86:b2:5f:08:f0:
ab:5a:5f:99:d8:f7:d1:0e:84:0c:da:39:1a:c7:cc:
28:af:74:30:f2:f3:06:51:7f:5e:88:32:7e:e6:6d:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:65:46:55:12:BF:C4:08:A8:15:C1:E8:E4:73:57:D8:4B:49:50
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YbllRlUSv8QIqBXB6ORzV9hLSVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.49.0/24
9.247.55.0/24
9.247.57.0/24
9.247.59.0/24
9.247.61.0/24
9.247.68.0/23
9.247.73.0/24
9.247.75.0-9.247.76.255
9.247.85.0/24
9.247.87.0/24
9.247.93.0-9.247.95.255
9.247.97.0/24
9.247.99.0/24
9.247.101.0/24
9.247.105.0-9.247.106.255
9.247.108.0/24
9.247.114.0/24
9.247.116.0/23
9.247.120.0/24
9.247.123.0/24
9.247.125.0/24
9.247.129.0-9.247.130.255
9.247.137.0/24
9.247.152.0-9.247.154.255
9.247.156.0/24
9.247.161.0-9.247.163.255
9.247.170.0/24
9.247.176.0/24
9.247.182.0/24
9.247.198.0/24
9.247.203.0/24
9.247.205.0/24
9.247.207.0-9.247.208.255
9.247.211.0/24
9.247.214.0/24
9.247.216.0/24
9.247.219.0-9.247.220.255
9.247.232.0/24
9.247.242.0/24
9.247.254.0/24
206.245.147.0/24
206.245.150.0/24
206.245.155.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ba:15:ab:2c:e0:87:eb:a8:d7:ff:d6:39:63:2d:10:92:dc:
a5:c0:9a:4c:3a:e1:48:db:f2:82:e8:35:69:80:91:19:07:e8:
94:15:bf:e8:dc:99:b3:f9:83:d6:64:1c:74:dd:4e:38:07:f5:
10:ab:c6:c5:04:d1:12:05:3d:fd:65:3a:ad:2b:9d:be:75:8a:
83:8e:1b:67:63:d5:1a:8b:ed:dd:05:87:0d:55:bc:96:67:74:
92:9f:88:8e:e2:98:ad:e5:7c:41:e3:13:b0:bc:30:5f:e3:20:
94:9c:cd:89:d9:5d:d3:b8:82:e8:a7:0b:33:87:f5:5f:23:93:
a6:f0:08:2c:12:96:28:f2:42:d0:38:ad:99:f5:a4:49:17:43:
55:7d:6b:26:1a:fb:bb:e0:b1:d7:83:f1:cd:5e:5c:f5:ee:b6:
e7:5d:c1:40:6b:55:99:2d:74:e1:70:10:fa:13:f6:09:f0:86:
57:14:d6:f9:a8:ab:b3:b6:40:83:34:c5:4d:ec:7a:93:a5:a6:
5b:80:a2:99:75:b0:6e:31:7e:3a:81:59:fc:5f:32:87:03:9f:
d3:c2:5e:e3:a4:a2:78:f0:90:80:b1:51:26:b0:b7:cf:58:02:
f7:79:0b:61:64:28:c2:ab:cb:7a:97:00:59:6a:8b:c0:7a:f8:
59:9b:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:06 2026 by rpki-client