Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa
File: y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa (raw, json)
Hash identifier: N8EgNl6vfYaF1Ts0sECLbCkME6l5AEsMF8hotYpNW4g=
Subject key identifier: CB:88:60:88:BA:19:42:EA:B0:CB:D4:72:7F:AC:55:41:2A:AC:66:BE
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019C7126C82F06496ECDD4F06A6CDC453DE8
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa
Signing time: Wed 18 Feb 2026 14:28:12 +0000
ROA not before: Wed 18 Feb 2026 14:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6677
IP address blocks: 31.209.192.0/18 maxlen: 18
85.220.0.0/17 maxlen: 17
157.157.0.0/16 maxlen: 16
157.157.2.0/24 maxlen: 24
157.157.4.0/24 maxlen: 24
157.157.136.0/24 maxlen: 24
157.157.184.0/22 maxlen: 22
192.147.34.0/24 maxlen: 24
194.105.224.0/19 maxlen: 19
194.105.224.0/24 maxlen: 24
212.30.192.0/19 maxlen: 19
212.30.212.0/24 maxlen: 24
213.167.128.0/19 maxlen: 19
213.167.150.0/24 maxlen: 24
213.167.152.0/24 maxlen: 24
2001:1a98::/29 maxlen: 29
2001:1a98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:26:c8:2f:06:49:6e:cd:d4:f0:6a:6c:dc:45:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Feb 18 14:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb886088ba1942eab0cbd4727fac55412aac66be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:6c:1f:4f:72:f6:41:6e:5a:3d:4a:50:73:
98:b7:83:7e:3a:c7:b9:6e:7c:fd:cb:dc:0c:0e:d1:
8e:0e:03:1e:8d:d4:58:02:f8:44:80:c1:ae:15:f8:
5e:01:03:d5:3e:ca:9e:c5:64:9c:24:4e:f2:b1:6a:
10:76:4d:e8:d6:4f:a6:fc:2c:04:3f:df:2f:74:78:
a6:d2:ee:ad:3a:d6:2e:8c:0a:7b:68:c6:5a:4a:3f:
6b:12:aa:a5:72:85:1d:da:76:2c:ed:2f:36:f4:48:
3c:bc:35:ff:8e:2f:0f:1f:8d:12:13:da:e8:9a:58:
74:93:48:3d:08:6a:86:2e:36:5c:3a:5c:e0:8f:26:
77:2d:f7:d0:7c:3b:ba:78:b1:e4:13:05:f8:57:a6:
e0:8a:bd:a8:bf:11:51:36:93:f3:94:c5:79:28:6e:
ed:d8:db:c4:e6:e2:8e:d3:5e:4a:b1:f6:d2:1d:05:
b3:2c:0f:50:2c:f2:db:c8:a3:ef:ad:b6:09:33:eb:
69:97:2c:ca:86:d7:ab:21:c2:25:af:ac:46:5a:77:
34:cf:77:77:ed:e2:cc:e9:71:90:fb:f8:d7:fb:5c:
97:9c:38:9b:36:8f:71:b0:2d:49:ba:46:93:73:26:
e1:91:7b:52:27:3e:21:a5:64:7c:db:28:30:9d:3d:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:60:88:BA:19:42:EA:B0:CB:D4:72:7F:AC:55:41:2A:AC:66:BE
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.192.0/18
85.220.0.0/17
157.157.0.0/16
192.147.34.0/24
194.105.224.0/19
212.30.192.0/19
213.167.128.0/19
IPv6:
2001:1a98::/29
Signature Algorithm: sha256WithRSAEncryption
54:82:c9:d6:f5:95:1e:25:9e:2f:4b:e0:b8:b8:f6:eb:e8:05:
f7:ef:92:d7:fc:65:1d:1e:c2:69:ab:43:4b:b8:e6:ea:04:fe:
4b:23:fa:5a:85:0c:61:ab:29:b0:46:81:05:53:bf:9b:de:59:
52:97:a0:8e:02:43:1b:ae:b5:85:cf:a1:99:08:f6:0c:1b:d5:
9c:36:82:e9:48:5e:d8:ce:35:57:cf:f1:6c:6b:8e:dc:4f:a9:
9c:d3:fc:70:1f:1b:73:5d:ed:cb:89:11:60:ad:77:90:e9:6f:
59:09:af:cf:66:ca:c2:5f:5f:bc:64:e4:d3:2c:dd:c1:cc:85:
f4:20:9a:1d:6f:d9:98:0b:78:ee:bf:0a:ec:25:89:54:96:c5:
d9:e6:53:bf:ab:17:19:4c:54:72:aa:e1:20:34:9e:6d:0f:c3:
eb:4f:f0:a4:1c:d3:0d:c2:e3:f2:7b:d8:65:67:be:c5:8a:f3:
03:f5:16:6d:03:62:41:b2:93:cb:58:48:6a:6e:d0:fd:1d:95:
a7:70:fa:e7:44:56:cf:84:83:b9:8c:f7:f3:7d:19:52:b4:10:
36:f2:0c:d0:75:1b:29:fd:54:e8:6f:1d:12:42:85:2e:1c:0b:
84:05:26:43:04:63:b2:f8:b9:db:bc:89:6f:4a:8c:5b:74:89:
25:78:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:04 2026 by rpki-client