Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YApxCSQYZJ1K6uF2iHVJpp5QvWI.roa
File: YApxCSQYZJ1K6uF2iHVJpp5QvWI.roa (raw, json)
Hash identifier: +CLdITTgKAAB/KwkpuHClRDJY5/2LlL1hYVzf4ZnNDg=
Subject key identifier: 60:0A:71:09:24:18:64:9D:4A:EA:E1:76:88:75:49:A6:9E:50:BD:62
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB8D511486853CC128F89CEA6293D2FB4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YApxCSQYZJ1K6uF2iHVJpp5QvWI.roa
Signing time: Thu 11 Jun 2026 22:37:11 +0000
ROA not before: Thu 11 Jun 2026 22:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
89.106.27.0/24 maxlen: 24
103.47.56.0/24 maxlen: 24
103.71.61.0/24 maxlen: 24
103.84.212.0/24 maxlen: 24
103.84.213.0/24 maxlen: 24
124.158.100.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:d5:11:48:68:53:cc:12:8f:89:ce:a6:29:3d:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 11 22:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=600a71092418649d4aeae176887549a69e50bd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:9e:fd:22:95:e0:2d:51:48:4c:a0:bf:ff:
57:a3:79:00:63:88:4d:d5:79:9c:a9:11:9d:0e:d3:
a2:5f:66:50:e8:6a:3f:f6:85:b6:fe:c1:23:39:b9:
11:44:e7:8b:29:34:12:7e:2a:a4:76:76:a4:b2:51:
6d:e5:83:ab:ee:09:93:e8:23:1b:f2:23:fe:20:64:
f7:51:2d:37:b6:db:2c:78:8a:d6:91:9a:e5:b3:2d:
73:44:17:97:f7:d7:fe:be:ad:c6:16:fa:1d:64:ea:
a7:c1:74:1a:66:3a:44:b6:b8:60:8d:0e:12:60:88:
36:b0:84:76:b9:dc:4e:21:96:f9:06:98:d8:7a:57:
c9:81:fc:59:7d:7c:36:23:13:53:8a:97:fb:5f:56:
ad:9e:14:a4:d7:08:7c:71:93:d9:d4:45:27:68:74:
11:a6:7c:22:d0:5b:ce:e3:4a:d7:0e:e2:54:97:2c:
36:28:08:f3:5b:f1:45:ab:f3:e5:46:e2:64:1a:32:
03:7d:36:a9:5f:31:72:cb:24:16:d0:de:e1:58:06:
a1:33:f0:11:19:ff:b0:2c:d6:55:84:29:30:d6:83:
17:d6:af:73:16:da:4a:11:f9:0d:a1:96:f6:88:5a:
d0:9e:97:69:57:83:c2:10:d5:07:76:2d:f3:8f:9b:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:71:09:24:18:64:9D:4A:EA:E1:76:88:75:49:A6:9E:50:BD:62
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YApxCSQYZJ1K6uF2iHVJpp5QvWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
89.106.27.0/24
103.47.56.0/24
103.71.61.0/24
103.84.212.0/23
124.158.100.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
ad:da:d5:20:3f:08:5e:ef:81:62:51:8e:1c:dd:1e:7d:53:8d:
25:cb:54:d0:99:cd:b1:9f:a4:11:ef:41:32:18:87:6b:f9:20:
86:7d:c4:c2:f8:dd:5c:20:5a:c3:cd:c8:17:02:2b:92:48:3d:
74:9f:6b:3f:b4:64:51:bc:75:45:7e:8c:8a:e8:80:3e:fc:32:
e3:a0:3d:e3:a3:f6:4c:5a:5b:82:a9:17:b8:6b:2c:7f:49:bb:
8b:af:01:07:1e:c1:97:63:94:85:dd:5f:89:f7:2d:72:ee:d8:
1d:4a:02:a4:84:af:e3:09:df:c3:f7:d6:5c:98:7a:22:04:6c:
71:e6:4e:5c:be:13:3e:68:2c:94:51:9c:9b:33:05:7c:7f:40:
cb:6e:2b:20:ee:a4:48:14:a2:73:53:d3:72:e8:4e:7f:2d:3b:
60:81:89:aa:e0:a2:28:12:27:9d:46:81:a5:e5:2d:5b:bd:66:
44:4f:d4:02:05:ef:59:4a:44:9b:d3:3d:5c:8f:68:ae:bc:c0:
fa:dc:fe:40:81:a7:3b:54:96:af:bb:da:13:e8:0c:1b:90:fa:
57:4d:1a:56:ef:16:2a:2a:32:f8:b2:b4:21:e3:35:e6:aa:8d:
bd:c1:16:84:06:20:1a:e1:1d:45:5d:cd:51:81:1f:8a:dd:e0:
4a:87:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:22 2026 by rpki-client