Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/y-zEWENgwx72wpr508JalcWFTv4.roa
File: y-zEWENgwx72wpr508JalcWFTv4.roa (raw, json)
Hash identifier: lajXJ6uXrG4EqEaAIKyHAOUfK3kTua3b1kFfBGNqDqs=
Subject key identifier: CB:EC:C4:58:43:60:C3:1E:F6:C2:9A:F9:D3:C2:5A:95:C5:85:4E:FE
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019D48EE3C459EF1C31E4FCE9B4A06757930
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/y-zEWENgwx72wpr508JalcWFTv4.roa
Signing time: Wed 01 Apr 2026 12:04:25 +0000
ROA not before: Wed 01 Apr 2026 12:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202918
IP address blocks: 185.76.74.0/23 maxlen: 24
185.150.156.0/22 maxlen: 24
185.150.156.0/24 maxlen: 24
185.150.157.0/24 maxlen: 24
185.150.158.0/24 maxlen: 24
185.150.159.0/24 maxlen: 24
185.246.28.0/23 maxlen: 24
2a07:71c0::/29 maxlen: 48
2a0d:7380::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:ee:3c:45:9e:f1:c3:1e:4f:ce:9b:4a:06:75:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Apr 1 12:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbecc4584360c31ef6c29af9d3c25a95c5854efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:29:67:22:e3:1c:0c:d6:a9:4a:f9:8c:20:
25:40:c1:96:c9:e8:0f:23:53:c8:06:c9:01:41:fb:
2a:ca:53:34:ab:b7:b3:a4:93:59:a7:a5:00:61:46:
da:54:ca:8c:27:aa:d5:d2:34:b9:fa:d2:01:95:4f:
bf:32:84:29:98:43:a7:d1:4c:0c:99:de:78:ac:11:
11:2d:d8:b4:95:b4:d6:f6:6c:8d:6b:c1:a7:99:58:
df:d3:07:4c:9f:84:59:e6:52:9d:e8:e4:7c:6a:83:
dd:6f:26:dd:d0:03:a8:25:ac:5e:7d:7e:29:83:0f:
9e:bd:c9:3b:0d:75:4f:eb:20:36:92:85:31:ff:ff:
29:f9:6f:d2:76:99:a8:6a:d5:bc:81:09:73:3c:2a:
40:60:24:05:13:c4:59:05:8b:40:f9:d4:34:89:d7:
1b:8c:e0:cf:39:fd:02:ba:5f:55:fd:8b:db:d5:a2:
fa:e1:68:7b:28:d2:8d:93:70:13:71:91:d3:3a:e5:
44:c1:60:74:2e:8b:e2:fa:fd:79:89:5c:40:54:63:
cd:b0:70:d7:92:92:da:98:86:a8:66:84:ac:63:bb:
8d:22:ec:cc:82:5a:11:ee:9f:3b:8b:c5:2b:e0:26:
d3:5d:0d:b1:e4:51:83:04:cd:4d:96:16:c1:c8:29:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:C4:58:43:60:C3:1E:F6:C2:9A:F9:D3:C2:5A:95:C5:85:4E:FE
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/y-zEWENgwx72wpr508JalcWFTv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.74.0/23
185.150.156.0/22
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
6b:91:1a:dc:c7:29:a0:29:50:6e:70:d8:9e:35:d7:70:19:00:
62:39:41:bf:53:51:e4:8a:d3:f8:51:18:f3:db:39:5c:19:36:
6a:be:6e:bb:1a:c2:e4:c6:8e:b7:08:95:a6:1a:90:a9:89:04:
bf:95:62:a3:ff:5a:33:58:85:57:00:9a:7a:c0:93:ad:f7:c5:
64:e3:32:0c:7f:d2:d8:93:93:ee:47:a6:0e:bb:55:ed:a9:c0:
a6:5b:26:bd:10:0e:9c:11:96:48:58:ed:cc:5f:19:ef:ef:e5:
0f:d9:bd:cd:fe:7c:68:09:13:19:6e:c6:cf:97:eb:71:39:75:
d3:18:5d:df:1e:23:cc:67:6d:3a:01:ef:ac:fa:ab:2c:7b:99:
0b:a5:f7:71:c4:ac:af:86:79:30:2d:5f:c5:b0:71:98:42:6b:
5c:a3:f5:28:15:ec:a0:d7:b1:c1:f1:46:f3:f7:84:83:cb:72:
fe:37:dc:73:0b:14:73:d8:bb:39:89:ba:8a:28:8b:38:a6:c8:
25:ed:ec:fa:32:03:6d:8f:ce:99:18:bb:2c:5e:4d:c9:b0:ea:
24:1e:cd:6b:8a:47:29:cc:48:ee:a7:cb:f9:22:b6:a5:1f:d2:
8c:be:53:30:25:11:5a:a8:7e:5a:b3:95:a7:fe:87:7f:eb:f9:
7d:d9:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:25 2026 by rpki-client