Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytm3asCjGZEg8fAEIcfV_LAamEg.roa
File: ytm3asCjGZEg8fAEIcfV_LAamEg.roa (raw, json)
Hash identifier: bMo5PIfCT3otyfk3wP7ZGysR9TPETh1c95IXYBovXrY=
Subject key identifier: CA:D9:B7:6A:C0:A3:19:91:20:F1:F0:04:21:C7:D5:FC:B0:1A:98:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FA36DE19F2AC3F4081C7068BA7BCF3771
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytm3asCjGZEg8fAEIcfV_LAamEg.roa
Signing time: Mon 27 Jul 2026 11:55:15 +0000
ROA not before: Mon 27 Jul 2026 11:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 45.12.62.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
45.151.106.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:6d:e1:9f:2a:c3:f4:08:1c:70:68:ba:7b:cf:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 27 11:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad9b76ac0a3199120f1f00421c7d5fcb01a9848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:0b:83:db:18:4d:f9:be:4f:31:bf:aa:3c:
1a:0d:f5:ba:e6:2c:c1:e9:5b:02:23:db:1e:e2:e3:
16:cf:14:27:98:dd:10:68:71:52:f9:f9:2f:11:3f:
6e:82:5e:cc:22:6b:91:66:d4:37:f4:99:25:29:7f:
95:55:b5:98:0f:5d:26:3e:cf:ae:cb:17:b1:9f:f8:
47:2b:b4:6c:63:88:44:8d:44:b0:17:d1:a7:68:5b:
14:30:fa:0a:d0:2c:1a:ea:21:04:db:25:0e:02:f2:
fe:ea:04:d1:c3:ab:aa:6a:9c:d7:58:79:ea:f0:18:
b2:e6:a0:87:61:98:d1:1c:0a:48:66:01:0d:08:3c:
59:37:50:e4:a7:2e:68:bc:4b:5a:eb:29:70:ba:47:
4f:cf:93:29:4a:52:1a:8b:62:af:7f:31:50:5e:05:
bf:c0:0f:fd:c2:3c:de:04:0b:31:ba:27:73:0c:83:
a1:77:5b:e9:73:ca:8a:bf:6c:21:88:4c:8f:0f:2f:
2f:a1:cc:37:0a:c3:a7:df:11:a4:d7:bb:04:ec:3b:
33:2b:60:ed:ee:5f:01:2b:9f:9e:fc:e9:b1:d1:71:
3e:08:54:60:0a:a4:5c:f5:f4:3f:b9:7e:6c:99:15:
b6:f4:8d:49:5d:2a:37:7f:d5:5d:c4:f4:43:1a:27:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:B7:6A:C0:A3:19:91:20:F1:F0:04:21:C7:D5:FC:B0:1A:98:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytm3asCjGZEg8fAEIcfV_LAamEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
45.131.214.0/24
45.151.106.0/24
45.153.219.0/24
93.190.247.0/24
103.227.84.0/24
193.41.68.0/24
194.33.61.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5b:82:dd:57:33:d7:e4:2b:da:74:2d:cd:2a:00:71:9c:6f:
e8:0e:28:09:3d:8b:d4:0a:f0:71:76:9f:5e:5d:97:43:ea:fc:
e9:77:93:6e:b8:4b:34:35:68:67:84:b7:8a:86:1d:35:03:fe:
22:43:d3:aa:9b:12:a5:d8:1b:08:7f:5d:93:76:be:cd:d6:af:
3c:db:9d:c2:d9:2c:b8:31:10:67:e7:0e:64:a5:4e:ff:50:6a:
40:c0:a2:3b:f0:53:d3:62:87:dc:59:73:72:14:5c:bf:5e:04:
97:9b:ec:10:85:05:0b:48:91:71:31:8e:6b:bd:1b:f2:6a:4a:
75:c9:be:f7:7d:c0:50:f7:76:7f:89:d9:72:0a:05:18:df:71:
10:fd:20:ca:91:37:07:92:d1:e7:df:4a:51:40:bc:f6:74:5b:
78:c7:37:bf:80:f5:47:91:7a:00:f5:bd:d0:ad:99:62:cb:e4:
44:1a:ce:31:63:64:4f:4f:d2:46:7c:86:e7:27:b6:bb:d8:e9:
d2:a8:79:d8:0d:86:17:ed:69:b9:9f:6c:98:6f:57:03:3a:7c:
ff:a9:1a:ca:80:8f:b9:b5:c6:1d:06:90:ca:3d:6d:d0:67:23:
c5:8b:3e:d2:7e:3e:81:e7:18:52:4e:6a:83:98:2a:1a:07:60:
c3:65:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:39 2026 by rpki-client