Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv4amRZb0pEitDudaZafGBizVDA.roa
File: Yv4amRZb0pEitDudaZafGBizVDA.roa (raw, json)
Hash identifier: s7Z0swlMjHHkc8oKyp3nuUstXNvYXP1yoHnLtCrrEFw=
Subject key identifier: 62:FE:1A:99:16:5B:D2:91:22:B4:3B:9D:69:96:9F:18:18:B3:54:30
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A18725AED2859675F9E1A7D6D5A52CF5A8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv4amRZb0pEitDudaZafGBizVDA.roa
Signing time: Thu 29 Oct 2026 10:12:36 +0000
ROA not before: Thu 29 Oct 2026 10:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 109.204.102.0/24 maxlen: 24
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
195.40.20.0/23 maxlen: 23
212.134.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:25:ae:d2:85:96:75:f9:e1:a7:d6:d5:a5:2c:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 29 10:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62fe1a99165bd29122b43b9d69969f1818b35430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:66:c5:51:57:be:23:db:39:04:ae:57:ad:
96:65:a3:e2:4b:02:a1:43:ce:99:e1:1c:ae:b2:b1:
f1:0e:29:c2:6d:08:ed:4f:0c:f8:5e:8b:3b:fd:2e:
b0:5d:78:f3:90:51:cd:46:df:e1:ca:d8:4a:6a:52:
ac:93:36:36:22:f8:cf:e1:4c:9a:58:38:f9:8c:71:
2a:d9:08:78:b8:97:9c:c2:d1:1e:71:f7:7b:ef:9b:
49:e3:a5:af:5c:93:08:31:fb:4f:05:8f:5b:81:69:
2c:a6:98:28:fa:97:43:76:4b:8d:9e:46:06:87:b2:
66:39:b2:98:d9:4f:9b:72:41:0d:8a:b7:0d:03:7d:
24:b7:ce:a0:cb:de:13:7e:6b:6d:e3:76:b9:ba:98:
ec:ce:b9:bb:50:a6:63:a3:c3:19:3d:92:3e:c1:7b:
ae:ee:05:80:bd:78:ba:1b:20:22:24:19:9e:93:9c:
7a:c0:29:0c:97:e3:23:aa:45:e5:52:35:15:cb:b1:
51:5e:0d:f8:61:2d:92:98:10:d1:14:9c:fc:9e:9f:
99:ea:36:74:7e:98:be:ae:3c:2b:27:4f:b8:38:20:
b0:67:4f:fe:d4:eb:a5:45:28:7a:2a:cb:7a:40:c2:
2d:a8:12:51:0c:9f:f9:17:ad:60:85:7d:ad:bc:07:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:1A:99:16:5B:D2:91:22:B4:3B:9D:69:96:9F:18:18:B3:54:30
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Yv4amRZb0pEitDudaZafGBizVDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.102.0/24
109.204.114.0/24
109.204.127.0/24
195.40.20.0/23
212.134.75.0/24
Signature Algorithm: sha256WithRSAEncryption
af:18:9a:c1:a9:c9:96:37:23:5e:04:de:ec:0d:49:8e:3f:85:
36:0f:5c:5b:2d:64:09:86:39:c0:2c:fa:61:95:3b:33:75:a1:
47:4e:4a:86:f0:47:12:d1:94:06:17:8f:aa:0f:12:a5:96:03:
2b:97:45:15:01:dd:b2:04:1c:8d:2b:9e:2c:9c:ea:10:42:7c:
1b:83:cc:d3:58:49:ac:6b:cf:cd:55:ab:5b:7f:60:8a:a8:13:
71:e4:f0:bc:16:6a:ab:9f:dc:5e:bd:0f:22:7b:73:5f:f0:d4:
45:a1:bf:e2:d6:c3:10:0a:52:f3:82:3e:45:0d:dd:8c:6f:18:
e5:61:79:ca:81:f8:53:9d:39:d1:a2:1a:f3:8b:9e:c3:13:f6:
d4:35:6f:f1:02:35:dc:89:3f:22:53:61:5e:c4:76:26:56:39:
45:99:05:a9:4d:af:3b:b7:8a:2c:25:af:d8:3f:c7:33:b7:a6:
9f:bc:3e:d5:b3:9f:2c:24:79:d3:c7:39:65:6f:db:0b:97:53:
49:40:14:54:80:a2:9d:09:d7:ee:a7:74:12:81:ad:07:e1:6c:
18:05:f5:c3:02:8a:f2:8d:ab:5f:a2:91:4d:6b:f1:b9:49:34:
a3:24:bb:48:39:67:3d:44:e1:5b:98:2c:56:b0:6c:0a:8a:bb:
57:75:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:50:17 2026 by rpki-client