Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/YwawbICucv1VVVjY7k0DxU3talA.roa
File: YwawbICucv1VVVjY7k0DxU3talA.roa (raw, json)
Hash identifier: 5ZeGP6xC2kmeddsR+KaHD991eNkeiFSXFDKflsvbyMs=
Subject key identifier: 63:06:B0:6C:80:AE:72:FD:55:55:58:D8:EE:4D:03:C5:4D:ED:6A:50
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019B797E3177640F11C61223A524EF08358A
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/YwawbICucv1VVVjY7k0DxU3talA.roa
Signing time: Thu 01 Jan 2026 12:17:51 +0000
ROA not before: Thu 01 Jan 2026 12:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213996
IP address blocks: 91.202.132.0/22 maxlen: 22
178.214.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:31:77:64:0f:11:c6:12:23:a5:24:ef:08:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Jan 1 12:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6306b06c80ae72fd555558d8ee4d03c54ded6a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:ae:92:be:11:4e:16:ba:df:e7:f2:01:75:
ba:09:6e:7d:5e:35:bd:b8:8f:48:5a:2b:90:eb:25:
fc:15:99:a8:49:ee:49:56:bc:2e:60:1b:b3:57:59:
d8:b2:5c:bb:2e:a8:81:d6:dc:ec:d4:24:79:83:49:
29:04:a0:a3:98:58:84:a6:44:86:b4:9d:a0:02:1a:
67:25:21:ae:3f:34:65:de:dc:af:9d:04:c8:ef:f0:
d9:a9:cb:7c:6f:c2:ff:b6:a9:6f:49:bf:99:37:96:
a2:41:20:5d:64:ad:78:43:bd:d3:6e:89:8b:5d:26:
66:ca:ea:8e:50:b4:9a:fb:3a:70:d4:c4:9c:a3:6e:
d7:f4:60:16:9a:6e:b7:71:37:d4:e9:27:4a:f3:23:
56:e3:5e:af:77:10:76:9d:af:83:04:70:ef:39:01:
88:50:48:2a:1f:cb:a7:37:91:5f:09:be:64:d5:f1:
b4:98:87:c0:df:d4:df:b5:c1:f6:76:16:c8:ec:d7:
4b:2d:7f:d6:fd:24:9e:b3:ed:9e:e7:b4:57:44:21:
96:5e:b0:3f:2e:82:c7:05:dd:15:b2:a6:c3:ca:04:
5a:bf:76:69:a0:c9:bd:12:dd:13:ef:e2:8e:db:6b:
b6:9c:f3:41:97:b4:0a:82:59:0e:2e:23:71:9f:e2:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:B0:6C:80:AE:72:FD:55:55:58:D8:EE:4D:03:C5:4D:ED:6A:50
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/YwawbICucv1VVVjY7k0DxU3talA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.132.0/22
178.214.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:a7:81:46:d7:70:ef:f3:4e:fd:37:8a:3c:43:0c:b7:90:d2:
0f:29:ce:1c:a4:16:14:ed:a7:c0:a2:a5:c1:0d:14:98:12:50:
81:fe:19:f5:17:d8:95:68:25:9c:b8:ac:ac:c5:21:6f:5e:d8:
77:38:84:14:24:0e:17:aa:0f:da:0e:e4:d7:2a:21:81:4f:78:
a4:fd:d3:2d:43:23:51:3c:4c:b6:7c:99:1e:cc:f0:d2:51:95:
90:12:b8:00:58:e2:91:b4:49:2d:a7:5a:aa:0e:80:db:4e:78:
36:9b:9c:f3:71:da:08:fb:1b:0a:2b:4c:c2:28:77:53:8f:de:
d5:7a:fb:2c:08:38:10:7b:e0:1f:35:c8:89:35:36:28:9b:06:
8c:b2:d5:83:f6:30:d5:68:ff:9b:de:c0:ea:72:92:cb:61:5e:
af:cd:30:e7:c3:d1:8d:01:7b:73:6e:bc:fb:a0:f3:a7:a7:e4:
3c:f0:51:d1:ca:06:85:b2:0c:69:79:32:35:05:e9:1a:f8:cd:
20:72:9e:0e:cb:85:95:69:58:d8:1d:3e:d9:da:98:b6:d5:77:
d6:b5:b0:24:9b:58:e5:36:ea:6f:23:fd:59:f1:20:05:f4:65:
ae:b6:07:e5:35:57:d1:e1:03:ff:ed:7d:c6:34:17:af:7b:3e:
62:95:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:27:37 2026 by rpki-client