Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/YFuhprzegpzjyzRqf7NfCJJvnCU.roa
File: YFuhprzegpzjyzRqf7NfCJJvnCU.roa (raw, json)
Hash identifier: g6/NKVQlpDAQFcp2/Xrt9tSnOzjcZZUj36Y74zoE9VA=
Subject key identifier: 60:5B:A1:A6:BC:DE:82:9C:E3:CB:34:6A:7F:B3:5F:08:92:6F:9C:25
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A0E7A06A8A6F8321710CF7D3ECEC357B37
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/YFuhprzegpzjyzRqf7NfCJJvnCU.roa
Signing time: Mon 28 Sep 2026 10:47:24 +0000
ROA not before: Mon 28 Sep 2026 10:47:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215613
IP address blocks: 81.85.75.0/24 maxlen: 24
185.224.208.0/24 maxlen: 24
213.155.9.0/24 maxlen: 24
217.177.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a0:6a:8a:6f:83:21:71:0c:f7:d3:ec:ec:35:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Sep 28 10:47:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605ba1a6bcde829ce3cb346a7fb35f08926f9c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:4a:8a:1c:13:6c:d7:c2:31:0c:c7:d2:c1:
fe:af:85:be:1f:6d:ca:b7:39:f7:70:e4:75:c8:da:
3b:ab:d2:59:2b:30:14:5a:22:2e:e2:7c:1f:b3:71:
92:5c:85:1b:2f:51:03:14:97:0b:00:c1:40:66:fb:
75:a0:65:e1:86:bb:3e:fa:42:91:44:fa:86:1e:aa:
c7:b0:38:e8:46:93:9c:2f:8c:11:cb:3e:02:d9:be:
17:ad:9e:08:7f:24:ac:64:57:dd:30:16:69:e9:c9:
3d:a2:1f:c2:9f:fc:68:74:82:3d:4a:87:8c:99:52:
c2:3e:d5:81:07:8d:99:b5:53:a0:73:fc:43:c1:8f:
ee:66:d7:8d:16:80:f2:ce:f6:42:12:a8:bf:9c:cd:
6d:e2:9a:f5:a9:c7:82:08:99:f8:ae:2c:f7:e9:ff:
1a:2b:c2:56:a7:05:67:dd:7d:f5:bd:43:04:a1:3d:
97:36:11:5d:e6:d4:35:99:55:99:80:1b:c1:78:27:
9b:d7:35:e9:f3:de:75:16:26:54:a7:e7:10:ab:e0:
d9:03:5f:ed:5e:86:11:4e:d6:b3:f1:60:04:93:a5:
e1:be:ca:2f:70:14:79:dd:fb:54:2e:a0:f3:41:f2:
39:6d:02:51:a8:1d:7c:3d:af:20:73:bf:26:16:07:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:A1:A6:BC:DE:82:9C:E3:CB:34:6A:7F:B3:5F:08:92:6F:9C:25
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/YFuhprzegpzjyzRqf7NfCJJvnCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.75.0/24
185.224.208.0/24
213.155.9.0/24
217.177.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2d:ec:69:7f:a6:35:88:84:7b:a6:a1:d8:fe:37:36:10:21:
2e:c7:4d:48:b9:e6:55:90:a1:bf:48:f7:5a:9a:c7:2f:8b:0b:
86:d7:75:26:67:01:a8:72:ab:89:9f:64:43:df:bf:07:47:be:
84:60:dc:3c:e4:50:27:1c:1d:45:1e:2d:04:d2:39:42:38:43:
52:d4:60:50:ef:b2:39:bd:81:c8:4e:04:92:6a:78:93:c5:09:
50:d5:a5:e2:55:4f:5d:c8:fc:bb:73:a7:b1:50:58:d4:54:db:
38:93:1a:55:00:5b:30:99:86:c2:6e:f1:5c:9e:11:45:bb:d3:
5b:71:45:93:b0:16:00:11:fc:b7:fb:af:5d:76:51:a5:6a:3c:
67:6b:25:2b:12:70:0a:b5:74:e4:29:24:d7:0f:c1:46:bf:15:
62:15:4b:f9:89:9b:fe:5b:a2:c8:b9:d2:b2:a0:1e:9d:93:1d:
04:6a:6f:2a:5a:d6:cd:52:ab:26:0f:f7:ab:a4:57:64:bd:28:
9e:7f:ec:6d:21:aa:3a:bd:be:79:22:e7:8b:46:cf:be:d7:1a:
85:57:99:d6:ea:0b:93:5d:9b:d0:58:26:f0:4c:05:e5:64:74:
a6:45:fb:2f:30:a7:39:e5:4a:4b:82:d6:51:ea:d7:b5:3e:e6:
d6:ff:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:54:22 2026 by rpki-client