Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/YsPs7_TU2JetQmo-ocTa4qpCrU8.roa
File: YsPs7_TU2JetQmo-ocTa4qpCrU8.roa (raw, json)
Hash identifier: 3DSc7YqgrtcNrv6Djv3SByjyPu46rRDZeyAnR5Ggtx8=
Subject key identifier: 62:C3:EC:EF:F4:D4:D8:97:AD:42:6A:3E:A1:C4:DA:E2:AA:42:AD:4F
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 019A2F97B6667D2C2C81469F758B73B1AFFF
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/YsPs7_TU2JetQmo-ocTa4qpCrU8.roa
Signing time: Wed 29 Oct 2025 10:51:03 +0000
ROA not before: Wed 29 Oct 2025 10:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29037
IP address blocks: 5.57.192.0/21 maxlen: 24
77.236.104.0/21 maxlen: 24
77.236.112.0/21 maxlen: 24
79.171.176.0/21 maxlen: 24
82.115.96.0/19 maxlen: 24
93.119.240.0/20 maxlen: 24
178.248.216.0/21 maxlen: 24
185.5.168.0/22 maxlen: 24
192.54.67.0/24 maxlen: 24
192.54.68.0/22 maxlen: 24
217.17.16.0/20 maxlen: 24
2a01:5580::/32 maxlen: 48
2a02:1628::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:97:b6:66:7d:2c:2c:81:46:9f:75:8b:73:b1:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Oct 29 10:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c3eceff4d4d897ad426a3ea1c4dae2aa42ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:6c:e7:ac:72:8e:c4:38:cf:f5:05:37:cf:
9b:36:85:bd:33:67:b3:48:db:f0:a9:53:d0:44:ff:
e7:b6:6b:60:b5:52:44:90:75:54:33:ed:4c:44:62:
43:30:9c:9b:db:fa:f8:7d:c1:4c:59:40:4e:cb:4c:
4c:68:45:91:78:ea:74:95:fe:9d:f0:8e:5e:4e:c9:
87:bb:50:07:26:78:6f:42:8c:a8:54:d7:6b:99:d1:
f1:00:7d:b2:31:9b:99:b4:d7:e9:3b:13:21:88:cd:
1f:58:3e:3a:ec:af:38:be:da:cc:93:11:90:32:47:
55:82:aa:9f:e9:cf:9f:b7:a9:fa:e1:40:3c:4b:35:
e6:2a:fe:4f:17:49:ef:17:e7:be:ac:df:ce:c5:53:
90:16:07:5f:e1:42:bd:53:6e:ff:3f:c3:cf:7a:96:
36:54:a6:fe:80:e7:7a:96:3f:4f:52:d8:cc:94:76:
70:59:17:e5:b0:c2:3d:af:1b:68:6f:57:51:74:ea:
15:99:39:26:1d:2f:7a:5d:95:53:34:aa:1f:20:3f:
7f:85:56:27:c4:93:e2:f8:4b:17:01:df:a1:49:af:
a3:65:47:55:9a:32:66:c5:df:dd:a6:da:c0:e5:87:
52:2d:37:00:74:4b:29:ee:20:2c:27:38:7b:4a:17:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:EC:EF:F4:D4:D8:97:AD:42:6A:3E:A1:C4:DA:E2:AA:42:AD:4F
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/YsPs7_TU2JetQmo-ocTa4qpCrU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.192.0/21
77.236.104.0-77.236.119.255
79.171.176.0/21
82.115.96.0/19
93.119.240.0/20
178.248.216.0/21
185.5.168.0/22
192.54.67.0-192.54.71.255
217.17.16.0/20
IPv6:
2a01:5580::/32
2a02:1628::/32
Signature Algorithm: sha256WithRSAEncryption
6d:0c:65:30:0a:4d:92:17:52:c4:86:28:23:74:9c:48:c0:23:
ff:c1:a1:8e:75:2e:24:8c:7a:56:94:4a:bb:a4:64:13:ac:5d:
6c:2f:17:97:4b:bb:ea:43:b7:87:69:1e:39:68:0f:15:87:72:
51:b7:9e:47:91:0d:56:8d:7e:54:a3:60:0f:83:fa:63:0c:76:
b0:dc:df:b2:1d:d5:a9:77:68:13:c5:f1:00:8d:a9:60:5f:d1:
91:b6:ca:72:e4:c3:b7:60:ca:fa:f8:34:71:d9:00:4b:45:69:
c6:93:93:b7:58:c4:7b:1a:e0:d9:ad:5a:13:a0:e3:b4:ee:8c:
1f:ab:89:12:55:49:8c:35:ed:a6:f7:a5:96:bf:29:90:d5:c5:
51:38:7c:7e:76:f7:8a:56:92:85:c6:92:9a:49:f1:61:e1:29:
d4:e4:00:19:88:12:c2:2a:8f:8c:c4:9b:b7:1c:6f:21:e4:a4:
07:21:ce:53:38:82:88:a1:3c:fb:10:b5:78:e2:67:0f:4a:2b:
21:06:1e:22:d5:d2:20:92:25:fd:ff:e8:1f:9d:7e:e7:2f:5b:
ec:b0:42:f9:89:9d:8f:de:f8:5b:a3:f6:0a:f3:76:ad:d8:25:
13:6c:82:3b:d0:68:00:0f:b0:32:3a:68:af:59:f7:41:41:4d:
b6:b6:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:56 2025 by rpki-client