Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/Yg1vDl0DhjeaHWIjulFGn2EXs50.roa
File: Yg1vDl0DhjeaHWIjulFGn2EXs50.roa (raw, json)
Hash identifier: ZHTaupqQKeBhzDbcDiW4xvhVp2wefwY9mwNkCrn+I/Y=
Subject key identifier: 62:0D:6F:0E:5D:03:86:37:9A:1D:62:23:BA:51:46:9F:61:17:B3:9D
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 01A0A5B0DFACD662BE7F6DA35A805626F0C9
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/Yg1vDl0DhjeaHWIjulFGn2EXs50.roa
Signing time: Tue 15 Sep 2026 15:30:27 +0000
ROA not before: Tue 15 Sep 2026 15:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50903
IP address blocks: 45.148.156.0/22 maxlen: 24
45.159.68.0/22 maxlen: 24
178.23.32.0/21 maxlen: 24
185.118.92.0/22 maxlen: 24
2a00:ab80::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:b0:df:ac:d6:62:be:7f:6d:a3:5a:80:56:26:f0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Sep 15 15:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620d6f0e5d0386379a1d6223ba51469f6117b39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:f0:59:48:8c:30:57:2a:f5:ed:5c:e8:ac:
d8:e0:71:bc:be:59:a7:08:01:80:e0:13:9c:08:72:
c6:d5:1b:ec:4c:60:64:a6:5f:c6:3c:b2:3e:41:d0:
97:38:d9:bb:0f:1d:af:45:4f:d7:11:92:8d:04:45:
11:73:a0:f5:59:c7:e5:dc:60:4b:26:65:4a:04:f3:
65:64:f7:7b:69:35:be:50:9a:b1:1d:3e:8f:c2:7e:
f2:31:50:c4:3c:80:02:72:2d:58:88:e6:95:af:6f:
c2:85:b2:ad:10:c0:e4:2d:fc:37:e1:b9:65:32:ce:
bd:4a:0b:b5:36:cf:46:c2:d5:ca:ab:86:b1:64:a3:
d2:ad:17:30:ac:ce:52:cd:48:3a:7c:a9:b0:5a:fa:
18:e3:9b:62:63:8f:52:9b:0f:7b:f5:6b:c0:73:c0:
13:52:d6:7b:93:3b:28:16:07:c7:c6:cc:79:f1:23:
b5:1c:59:d4:74:41:ab:23:5f:19:c6:0f:81:bd:9f:
fa:b5:42:9a:a8:24:59:ec:f6:e1:29:f7:62:01:54:
69:db:17:bd:6e:6c:de:a2:6b:7f:fc:59:11:41:86:
1d:af:b6:0a:e6:54:3c:b6:b5:9a:aa:93:4e:82:45:
90:43:f4:61:1d:31:01:d1:cd:1d:2f:d6:b3:cf:8f:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:6F:0E:5D:03:86:37:9A:1D:62:23:BA:51:46:9F:61:17:B3:9D
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/Yg1vDl0DhjeaHWIjulFGn2EXs50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.156.0/22
45.159.68.0/22
178.23.32.0/21
185.118.92.0/22
IPv6:
2a00:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
c0:2d:b6:b0:84:e0:ed:d9:3f:21:24:86:ea:1d:41:f0:6d:1c:
73:da:e1:fb:d5:11:ad:ac:fd:0c:f8:4d:4e:7f:e4:02:b7:53:
fa:64:18:dd:32:2e:e9:ac:dd:bf:9b:6a:a4:c3:0b:d1:ee:0a:
29:9e:ac:c4:8b:1a:73:95:eb:39:f4:91:72:08:5c:4f:a0:d3:
4e:74:86:0e:c4:dd:0b:02:d7:a7:97:6f:8f:51:78:47:2d:b1:
72:cc:51:3f:6b:67:71:79:21:62:f5:39:f7:eb:51:a3:ca:69:
d9:e9:97:ab:2a:7d:c9:a3:05:96:8c:af:ba:9d:0a:01:38:97:
c0:57:76:dd:56:5c:7c:f3:b8:79:67:00:d9:a6:66:cb:f3:e2:
dd:01:d4:9b:8a:cb:75:c6:76:c0:04:0a:1d:e4:96:42:9d:3d:
44:4d:aa:24:e2:f0:14:f2:0c:96:1a:fd:a5:fc:68:33:d2:df:
9c:9a:7e:d0:c4:5d:b5:21:ab:3a:9e:c4:5c:a2:b0:2b:99:eb:
11:7c:5b:6e:b5:cb:2a:a8:f2:90:c5:f2:78:1d:25:37:57:77:
38:c6:68:21:1a:7e:99:28:07:0e:7a:ba:20:bb:eb:08:94:98:
f7:35:dd:0e:ef:68:97:37:ac:ae:25:2e:59:b7:7d:74:39:6b:
cb:81:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:50 2026 by rpki-client