Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YPLyyS086Py_REHuqs0pr_rchCk.roa
File: YPLyyS086Py_REHuqs0pr_rchCk.roa (raw, json)
Hash identifier: TJKKF7cGP71nWVXDSHee/+QOFPA0H7+1lxJJ8KN6m3U=
Subject key identifier: 60:F2:F2:C9:2D:3C:E8:FC:BF:44:41:EE:AA:CD:29:AF:FA:DC:84:29
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A15887C4E1DB1B64F983BD42DFEA595F58
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YPLyyS086Py_REHuqs0pr_rchCk.roa
Signing time: Tue 20 Oct 2026 08:57:35 +0000
ROA not before: Tue 20 Oct 2026 08:57:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.210.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:87:c4:e1:db:1b:64:f9:83:bd:42:df:ea:59:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 20 08:57:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60f2f2c92d3ce8fcbf4441eeaacd29affadc8429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:5e:6b:ef:3c:25:2d:72:c4:c6:ac:58:b3:
a6:cd:52:0a:25:6b:ef:50:2f:d7:50:e1:56:73:37:
14:ad:3c:0c:42:6f:d3:db:6d:f0:bc:5d:76:a3:ba:
6c:07:9f:6c:af:5b:93:6a:19:de:d7:50:2d:cc:15:
d5:78:85:49:f1:ab:a9:b9:b2:87:89:c6:6f:6d:02:
f3:55:fd:51:85:bb:ae:4f:aa:a1:10:d0:b6:72:eb:
6c:4f:ee:8b:4b:33:25:ff:0a:02:c5:39:1f:e1:fa:
5b:a0:82:4c:e9:ef:65:81:5f:91:09:55:8f:c4:b8:
0b:ba:c0:d1:24:6c:0d:d5:0e:2a:b9:41:90:69:00:
0a:28:e1:e3:31:6f:7f:75:19:ea:5d:3b:25:e4:f5:
8f:b3:14:cc:b6:ce:55:d6:67:e7:3d:83:77:d3:54:
0f:11:3a:e2:d1:e4:ea:83:ba:6c:34:39:06:d5:6a:
87:b1:19:3b:eb:00:ac:5c:c3:9f:1c:e8:6c:68:bd:
7e:b1:52:a3:4c:fb:11:d6:0e:09:06:58:72:34:cb:
48:fd:c0:8c:b7:ea:b3:1a:57:51:99:2f:31:ce:8e:
89:61:56:fb:fb:ed:1e:9d:06:e0:eb:fc:ca:7e:f0:
5f:06:fe:36:6c:af:d3:6b:eb:4e:cc:e6:ce:f8:22:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F2:F2:C9:2D:3C:E8:FC:BF:44:41:EE:AA:CD:29:AF:FA:DC:84:29
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YPLyyS086Py_REHuqs0pr_rchCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.123.0/24
82.152.111.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.250.0/24
89.213.153.0/24
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.249.0/24
213.152.61.0-213.152.62.255
213.210.40.0/24
Signature Algorithm: sha256WithRSAEncryption
24:84:66:49:e7:bd:b0:3c:b3:7a:89:f4:2d:8d:71:b8:1e:85:
59:67:ae:6b:58:ca:90:4b:6a:b9:2c:98:8e:0f:4b:48:26:ff:
8b:44:cc:e8:f8:0b:fa:cd:0d:20:ce:31:f0:1b:7a:82:4c:47:
8c:66:d7:95:ed:be:be:03:ee:83:32:3d:cb:a7:c8:98:b3:45:
63:6c:7c:4d:86:f8:b9:9c:ad:0f:75:85:28:65:2b:96:7e:ba:
14:20:54:12:90:66:fb:76:a9:5e:8f:d7:0c:ac:96:d9:ca:dd:
12:a6:5c:16:54:84:e6:ff:2d:8d:c6:65:74:30:c4:bf:7c:d3:
49:14:97:65:6a:6d:7d:ad:d3:ff:29:6d:36:c6:7d:92:40:be:
cb:92:b5:f5:12:52:90:2d:79:57:46:5c:11:b2:5b:25:07:0d:
b3:82:7c:ec:6f:43:87:92:07:4c:b8:62:5c:cd:41:eb:4f:aa:
8d:94:46:25:9f:31:1a:d5:37:c5:dc:60:3e:f1:58:64:88:04:
a7:fa:f9:ac:6f:b3:08:cb:69:fc:19:eb:25:24:fc:c1:10:63:
bb:2f:b8:bc:7b:5b:6d:5a:a4:b3:e8:57:d4:4e:25:00:6a:18:
ea:ea:57:28:3f:f6:19:67:50:b4:62:6f:f2:f5:ec:01:3e:9e:
00:cb:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:35:37 2026 by rpki-client