Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/Yzbu2xTuHGDufrR56jzeXJcXst0.roa
File: Yzbu2xTuHGDufrR56jzeXJcXst0.roa (raw, json)
Hash identifier: 3Pb+th0E+BzWqiRK07ig2mdg2VM/g7nhxEWnM+EOw24=
Subject key identifier: 63:36:EE:DB:14:EE:1C:60:EE:7E:B4:79:EA:3C:DE:5C:97:17:B2:DD
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019E6EFBA937C85B61D669B23B30BDEE8987
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/Yzbu2xTuHGDufrR56jzeXJcXst0.roa
Signing time: Thu 28 May 2026 14:27:26 +0000
ROA not before: Thu 28 May 2026 14:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25581
IP address blocks: 45.81.12.0/22 maxlen: 22
45.90.8.0/23 maxlen: 23
91.207.130.0/23 maxlen: 23
185.34.148.0/22 maxlen: 22
185.34.149.0/24 maxlen: 24
185.170.216.0/21 maxlen: 24
2a00:da60::/32 maxlen: 32
2a00:da60:b01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:fb:a9:37:c8:5b:61:d6:69:b2:3b:30:bd:ee:89:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: May 28 14:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6336eedb14ee1c60ee7eb479ea3cde5c9717b2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:0a:d6:b7:20:1c:db:96:21:62:5b:44:8d:
2b:ca:1d:b5:18:24:30:f1:c6:ff:20:ba:55:2e:76:
67:2c:25:d1:21:e2:b0:5d:6e:11:b8:5b:bd:2e:c0:
70:8f:3c:9e:09:88:f5:18:af:3f:1d:57:fa:e7:31:
2a:f0:c7:e0:bb:4d:02:09:69:8c:a2:1c:5a:ba:95:
49:ae:a6:d9:f7:2c:42:fd:70:8b:3d:1b:df:85:3d:
d2:f0:25:1b:1d:a5:32:b4:69:61:3e:66:83:a9:47:
61:cc:30:92:72:dd:db:39:f4:42:09:30:7d:c1:b1:
3b:24:9a:44:32:22:5b:74:59:a1:7a:c5:57:46:c6:
0d:77:58:e5:3b:6a:92:b6:5b:f0:21:fd:55:97:90:
bb:c7:47:ef:40:fc:6f:a5:fc:8b:a6:97:70:a3:68:
ae:44:3c:f7:4b:6a:e5:4d:92:ea:e0:4b:99:cb:b5:
52:57:c8:a0:9f:83:cc:f8:10:51:a7:09:75:5c:08:
52:4a:d6:fd:bf:5f:49:1c:63:41:2d:d5:77:d1:4b:
5a:2d:38:e9:fa:eb:ae:75:45:c9:86:23:1a:53:80:
db:97:d0:7b:0b:a4:65:b4:55:a7:c6:d5:ce:34:dc:
66:0f:63:e9:70:23:17:16:35:63:2c:3c:5a:e9:d4:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:EE:DB:14:EE:1C:60:EE:7E:B4:79:EA:3C:DE:5C:97:17:B2:DD
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/Yzbu2xTuHGDufrR56jzeXJcXst0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.12.0/22
45.90.8.0/23
91.207.130.0/23
185.34.148.0/22
185.170.216.0/21
IPv6:
2a00:da60::/32
Signature Algorithm: sha256WithRSAEncryption
65:6c:7a:21:cf:dd:c1:53:00:03:6b:52:c7:0c:6f:dd:e6:12:
12:32:ed:86:f6:45:91:e8:3f:f6:80:12:20:62:0f:df:29:0c:
45:04:1a:34:b3:a9:a5:0a:20:c3:e7:53:db:58:00:e3:d3:3d:
7e:5a:80:96:c3:c2:b0:d7:9c:14:05:c4:45:33:96:37:4f:46:
cb:6e:f6:2e:92:c0:f0:7c:28:03:9d:f0:53:b8:0d:ee:8c:72:
85:3e:77:d6:51:04:ae:fb:4a:60:06:fc:7b:3c:96:c3:62:b3:
36:2e:e2:cc:d7:72:e3:55:dc:3f:f8:1c:05:15:9d:2b:34:e9:
8e:bc:a0:99:8d:b7:95:da:a6:02:cd:17:a4:b2:c3:70:a1:9e:
ad:08:5a:36:bf:96:ab:fd:a0:82:50:8b:cc:93:b8:50:e4:73:
66:39:6d:49:66:54:be:f0:ca:65:fa:7c:5e:4f:85:87:9e:77:
6b:d3:a1:3a:00:b2:fd:60:01:0c:38:94:26:ed:86:48:00:80:
a2:66:18:09:78:de:4d:71:9c:f5:1c:27:c2:bf:c6:a7:dd:f1:
41:28:ec:02:32:d5:81:65:05:9d:23:e0:dc:94:d4:ee:fc:fa:
a8:97:82:52:10:cc:b4:0d:a4:a8:2d:cc:49:04:b0:d8:3f:fd:
9d:22:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:13 2026 by rpki-client