Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa
File: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (raw, json)
Hash identifier: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=
Subject key identifier: 61:0E:D4:38:4D:1F:44:A8:94:5F:15:CB:FC:BD:E2:3E:1C:89:C7:CF
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 019D598CAADDC907533E9C6B83EBD40D9A11
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa
Signing time: Sat 04 Apr 2026 17:31:24 +0000
ROA not before: Sat 04 Apr 2026 17:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213354
IP address blocks: 91.228.68.0/22 maxlen: 22
185.248.192.0/23 maxlen: 23
185.248.194.0/23 maxlen: 23
194.15.112.0/24 maxlen: 24
194.15.113.0/24 maxlen: 24
2a11:9c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:59:8c:aa:dd:c9:07:53:3e:9c:6b:83:eb:d4:0d:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Apr 4 17:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=610ed4384d1f44a8945f15cbfcbde23e1c89c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:57:c9:28:ad:a8:53:7b:f2:3e:ed:be:a2:
d4:2c:61:1c:bf:09:e6:bb:0c:69:f5:54:e7:c6:f4:
21:12:a8:10:94:60:fa:92:06:41:e8:8a:e0:70:7c:
2e:28:97:63:8c:90:07:9a:80:6e:9a:d4:91:8b:f4:
04:a6:fc:84:ab:8f:b5:28:bd:fb:30:31:b9:bd:37:
e2:4a:37:7a:28:68:57:f7:da:07:69:dd:5d:80:80:
d9:75:ab:24:ea:a6:41:00:ef:63:fa:21:fd:78:4e:
b5:51:23:db:c8:27:96:b2:67:3b:cb:12:47:51:7f:
73:6b:2d:47:89:cb:c7:eb:34:3e:66:13:53:01:b1:
5f:93:ec:94:98:12:ad:19:ae:8b:83:93:a9:e6:aa:
99:54:e7:6b:64:63:c0:45:4e:0e:84:cc:4e:b3:c0:
b7:8e:b3:80:e1:60:ec:9b:c4:e4:c0:3c:34:f4:df:
99:32:3c:c4:3e:de:5c:0a:6c:19:76:2e:dd:38:40:
7a:a2:9e:55:d2:c2:b7:44:74:9c:41:1b:45:76:f7:
a9:d3:77:af:af:5d:32:93:4e:eb:82:0e:5b:be:53:
32:de:49:0f:ed:6d:f4:f0:b9:d8:87:e4:17:93:7a:
8f:99:ed:e2:83:17:00:31:89:2d:a5:6a:07:14:76:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:D4:38:4D:1F:44:A8:94:5F:15:CB:FC:BD:E2:3E:1C:89:C7:CF
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.68.0/22
185.248.192.0/22
194.15.112.0/23
IPv6:
2a11:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
01:55:c6:43:94:33:7f:4a:d3:f1:58:5b:b5:d7:3b:98:14:99:
28:c9:96:a2:2c:2c:fa:dd:9d:d3:8a:a1:d9:68:d6:c6:19:f8:
92:fb:ee:e7:0f:11:b6:c4:41:40:ee:bd:28:f0:ff:dd:55:e1:
2a:5f:2a:8f:46:d9:50:4b:46:74:6b:05:20:bd:08:7e:4e:5a:
7d:c2:7e:71:55:69:b7:7b:00:3c:41:15:c2:27:67:d7:6c:23:
d2:8d:4b:0d:f2:a3:13:3e:17:a3:50:5b:9e:99:14:21:22:3e:
47:63:a1:95:6c:c3:27:b2:eb:dc:81:06:0b:08:8f:4f:d7:ec:
9c:bf:80:7e:7c:e7:54:9f:af:99:d3:a2:f3:90:7e:d0:e6:c2:
53:95:5b:37:05:b1:18:cb:a5:21:32:1f:b3:c1:b2:65:21:ca:
8e:79:e6:8b:23:a7:8f:e5:5f:0e:26:80:d3:f5:a9:ff:5e:1d:
dc:44:1a:0e:87:91:3d:ca:bb:a5:3d:f9:ad:09:30:3d:b4:fe:
01:92:22:4a:61:30:30:21:ad:7f:0a:28:0b:6f:2e:f3:18:a2:
11:f7:50:4e:15:fd:ba:cb:30:eb:e8:d5:4f:cb:e7:b5:42:2a:
42:12:b4:23:14:91:00:0b:2b:da:cd:d0:94:2d:fc:3a:23:15:
f2:d9:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:32 2026 by rpki-client