Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/YqoEfCVI39hAluAfuMKb2WZmnfU.roa
File: YqoEfCVI39hAluAfuMKb2WZmnfU.roa (raw, json)
Hash identifier: dTRvrkco3cUg6qthtYWXfMOfQd/LnK7uBuo3ueDWwbQ=
Subject key identifier: 62:AA:04:7C:25:48:DF:D8:40:96:E0:1F:B8:C2:9B:D9:66:66:9D:F5
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A10FD58EDD9CE9D72B2D89EC8FC86E1870
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/YqoEfCVI39hAluAfuMKb2WZmnfU.roa
Signing time: Tue 06 Oct 2026 06:10:16 +0000
ROA not before: Tue 06 Oct 2026 06:10:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 89.207.12.0/24 maxlen: 24
89.207.13.0/24 maxlen: 24
89.207.14.0/24 maxlen: 24
89.207.15.0/24 maxlen: 24
185.32.12.0/24 maxlen: 24
185.32.13.0/24 maxlen: 24
185.32.14.0/24 maxlen: 24
185.32.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:d5:8e:dd:9c:e9:d7:2b:2d:89:ec:8f:c8:6e:18:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 6 06:10:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62aa047c2548dfd84096e01fb8c29bd966669df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:76:91:9a:70:85:27:dd:90:e0:7f:02:a0:
92:10:8a:3c:40:3e:23:2d:10:fa:99:a5:03:63:6a:
0c:9e:26:80:17:cc:be:e4:1c:d5:41:c5:c9:5a:d0:
d5:3d:2d:90:d5:fd:6b:0d:fa:bf:2e:4c:68:e8:37:
46:ed:e9:7a:b5:c3:b6:0c:82:83:84:3b:3a:d2:7a:
5b:88:e2:1b:f2:58:2d:ab:d0:11:ee:14:b7:aa:19:
37:00:9b:8f:d1:a0:12:34:61:3a:1e:12:60:5f:a8:
8e:61:86:ef:be:a3:05:11:8d:8c:f0:23:79:2b:55:
0d:d1:42:13:81:20:b1:bb:3b:7f:31:11:df:41:ac:
4e:ad:4d:c6:81:5b:fa:37:77:da:14:cc:fe:36:86:
f9:ca:79:06:fd:53:6c:b3:3b:a4:89:c4:46:1d:3d:
e7:f1:8d:e4:89:0e:52:54:8e:64:9f:4d:ad:42:8e:
1c:cc:0c:ac:2d:5e:72:c3:16:70:d9:55:e4:50:68:
03:5f:13:d0:90:81:a0:dd:64:24:db:62:cf:a4:96:
c2:2b:08:6b:56:11:c8:74:82:55:46:66:aa:8a:ad:
d0:9b:09:be:5d:81:0d:f8:6d:ab:90:8e:74:48:4f:
31:cd:5a:dc:37:9d:2d:b3:b2:e6:b3:af:bd:3b:aa:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:04:7C:25:48:DF:D8:40:96:E0:1F:B8:C2:9B:D9:66:66:9D:F5
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/YqoEfCVI39hAluAfuMKb2WZmnfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.12.0/22
185.32.12.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d1:c0:7d:10:cc:35:fe:71:13:39:06:d9:d4:c1:76:5d:19:
b1:f6:02:bb:83:9a:0f:b0:04:2e:31:48:cb:c1:54:64:91:a3:
b6:bc:11:d9:7b:2e:1f:5c:65:90:e8:1c:91:17:85:ac:99:38:
e3:08:31:ec:6d:81:11:ed:59:8e:96:f2:b2:c3:01:c5:72:57:
f8:1c:62:28:1a:0c:66:d7:cf:b4:46:8d:78:4f:a5:d2:db:1f:
2a:5f:ca:02:84:92:9d:b4:b3:b1:70:d7:14:91:7b:c1:be:71:
2b:85:df:43:47:77:ad:cf:f4:c9:1c:8a:d9:10:43:81:5a:64:
04:e3:71:d7:f0:43:b2:7d:49:34:8b:d1:d7:4f:e3:b2:d7:9f:
ee:3f:05:10:0a:16:c4:49:c9:0a:4a:b3:e5:d4:05:33:0c:dd:
ff:46:21:bc:a7:71:24:aa:c7:22:24:34:1b:78:ba:dc:27:6f:
43:fd:61:80:f7:3c:1a:d4:15:14:c5:e0:2b:5f:ef:fb:68:4f:
bd:70:e2:7e:2e:2a:87:19:df:cf:ae:3b:e3:d7:dd:97:8c:d6:
ea:1f:0f:e6:ca:2b:a0:04:43:13:43:ca:94:59:37:20:4a:a4:
48:a2:a8:93:0e:92:ef:9c:c7:fb:d2:fc:d2:02:35:cc:42:94:
7b:2a:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:08:31 2026 by rpki-client