Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dNYiCxRI0MpKWwycK9cEcfSkjA0.roa
File: dNYiCxRI0MpKWwycK9cEcfSkjA0.roa (raw, json)
Hash identifier: fz4se6IsWXrPwtkr7LA3dNzRqAqCxueRSE8x3n+LnDg=
Subject key identifier: 74:D6:22:0B:14:48:D0:CA:4A:5B:0C:9C:2B:D7:04:71:F4:A4:8C:0D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C9E46355CD255E1CBAC7C0EB02D5BCEA9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dNYiCxRI0MpKWwycK9cEcfSkjA0.roa
Signing time: Fri 27 Feb 2026 08:45:27 +0000
ROA not before: Fri 27 Feb 2026 08:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 2.56.122.0/24 maxlen: 24
45.15.152.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:46:35:5c:d2:55:e1:cb:ac:7c:0e:b0:2d:5b:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 27 08:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74d6220b1448d0ca4a5b0c9c2bd70471f4a48c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:27:46:5a:02:22:cc:74:9d:1e:d1:22:9c:
05:6c:29:3b:98:47:ef:b9:8c:39:32:0f:86:a6:51:
25:4f:93:eb:0c:22:9c:c0:bf:98:b1:46:1c:d9:aa:
6d:20:bc:61:e2:31:12:63:02:39:0c:1e:42:ca:38:
bf:23:fb:a8:32:6d:b3:ac:4a:8d:6c:3e:bd:69:2b:
7f:68:b2:82:f6:a5:f5:2c:86:9f:5d:41:1a:31:dc:
74:86:c5:df:47:61:1e:f1:88:fb:c3:f9:46:4e:36:
7c:ea:89:57:3c:d5:4c:50:5f:cc:88:df:7e:c9:8f:
0d:60:e0:47:f8:f3:3f:ff:43:a1:63:8a:a9:05:b0:
79:6e:9b:18:40:81:9f:29:db:db:65:e2:b3:b9:af:
b0:19:1f:fd:e9:fa:54:48:29:23:0f:29:66:8e:43:
a3:ca:c6:9e:42:41:fa:93:34:e0:15:c2:14:06:22:
e7:35:80:98:0b:fe:e6:55:c8:9d:3a:bf:c3:24:ba:
de:8c:3d:3e:e8:cd:49:af:31:49:6f:4f:86:38:32:
0d:03:de:7f:c2:77:1a:bf:f1:52:54:b7:fc:ef:18:
af:38:5b:c4:97:24:8c:1b:99:0a:6f:f6:56:05:5a:
c7:bd:cc:eb:4d:bf:95:a4:24:70:ba:ac:88:4b:17:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:22:0B:14:48:D0:CA:4A:5B:0C:9C:2B:D7:04:71:F4:A4:8C:0D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dNYiCxRI0MpKWwycK9cEcfSkjA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.122.0/24
45.15.152.0/23
45.83.150.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
185.203.4.0/22
194.76.136.0/24
194.76.138.0/24
Signature Algorithm: sha256WithRSAEncryption
87:db:7d:3e:54:a8:d7:bb:4e:cb:bc:33:cf:b4:83:da:02:5f:
b4:fa:4b:fd:d4:1f:6c:3a:6b:05:26:45:55:0a:ce:37:d3:40:
21:48:70:d2:a4:66:d8:e5:86:91:0d:c0:ec:74:e9:02:82:5c:
45:5f:67:af:72:80:77:ab:47:0a:32:5c:93:01:be:db:18:4e:
c3:2d:b9:e0:fd:a3:32:a6:cf:6c:d9:53:42:b2:60:e0:06:98:
5b:52:aa:64:b6:bf:01:81:af:56:7d:17:39:92:97:86:bd:5d:
ff:f9:ed:74:23:ad:29:c3:38:03:2a:06:bc:3b:40:0a:68:1b:
3e:73:2f:b5:9b:49:fa:05:96:64:06:17:b2:2e:93:ec:1c:1b:
6f:5b:ca:ea:95:e6:4c:a2:e4:74:48:ce:aa:79:4f:60:3a:83:
47:d0:f7:15:a2:42:4e:2b:4f:3d:7c:de:97:0a:f7:bf:75:51:
77:52:7c:dd:46:72:18:d7:4f:0c:26:d5:56:b0:a0:b3:a0:5c:
3a:3a:0e:4c:50:bc:11:15:ea:a6:8a:90:b5:66:1c:a4:bb:d4:
10:d3:c8:e4:6b:66:08:67:1d:4b:65:49:06:9a:86:91:fa:e4:
bb:40:db:bb:7e:f8:c3:bc:c7:6a:17:89:45:c9:30:4d:0d:9e:
a3:ad:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:24 2026 by rpki-client