Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ypY7s36zWHILvulq23bGKuZ2o9c.roa
File: ypY7s36zWHILvulq23bGKuZ2o9c.roa (raw, json)
Hash identifier: C7Mvcwm1E9gnD0gQMleTivJ/u9MHNliPR2TgXm18Gew=
Subject key identifier: CA:96:3B:B3:7E:B3:58:72:0B:BE:E9:6A:DB:76:C6:2A:E6:76:A3:D7
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A0AE427B4F87BAB51FE8C22668ABC5D18F
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ypY7s36zWHILvulq23bGKuZ2o9c.roa
Signing time: Thu 17 Sep 2026 07:26:27 +0000
ROA not before: Thu 17 Sep 2026 07:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44689
IP address blocks: 46.49.187.0/24 maxlen: 24
95.177.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:42:7b:4f:87:ba:b5:1f:e8:c2:26:68:ab:c5:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 17 07:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca963bb37eb358720bbee96adb76c62ae676a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:90:70:e3:a7:69:35:60:ba:c3:a4:4b:0b:
71:64:0d:dd:da:46:d3:0d:9b:f4:29:c9:8a:1d:e3:
23:c9:de:8f:ec:97:54:b0:49:04:8d:fe:34:b5:8a:
de:d5:b8:d4:37:2f:d3:39:84:01:88:cd:84:08:0e:
dd:7b:55:40:67:57:32:9e:a2:45:4e:35:af:5c:ca:
9c:2d:df:d8:46:77:a0:e9:07:60:38:bd:52:75:f8:
62:ba:db:c1:91:c4:42:fa:9e:f2:eb:e9:76:09:ac:
60:93:f4:5c:22:ff:17:55:0e:09:52:ac:55:29:88:
35:4e:af:d5:4b:ed:81:f2:88:0a:56:6e:dd:6b:d5:
67:67:0e:89:a5:8a:6f:87:cc:09:8f:d1:ed:c2:7c:
6c:81:9d:7d:f5:96:89:26:9f:95:b6:99:ec:3f:0c:
84:ce:ac:1a:72:60:3e:27:d1:95:21:57:72:bd:ea:
7c:71:b4:04:e7:8c:65:63:fc:bb:7e:90:39:ce:ad:
e0:ac:0e:86:83:68:d7:ea:28:65:cf:7b:73:98:77:
bd:b5:97:bf:df:2d:a7:d9:7a:d3:ae:00:7a:00:ec:
b4:5f:d1:bd:c6:c5:cf:e8:bf:97:a1:35:e7:67:0a:
78:14:34:03:7e:09:b7:a6:74:71:5e:ff:68:fd:ba:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:3B:B3:7E:B3:58:72:0B:BE:E9:6A:DB:76:C6:2A:E6:76:A3:D7
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ypY7s36zWHILvulq23bGKuZ2o9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.49.187.0/24
95.177.155.0/24
Signature Algorithm: sha256WithRSAEncryption
77:18:fe:3c:8d:e1:2b:b1:ea:64:c8:d1:e7:13:1b:13:a9:45:
b8:4a:78:7e:be:4c:20:88:73:45:bd:c5:7c:99:78:e2:96:54:
82:25:f9:9c:47:33:6e:91:78:0d:fc:bc:74:ac:46:c9:b8:3e:
a0:5c:bd:dc:58:ea:8d:28:68:40:9f:73:7c:2d:5f:cb:1f:c8:
32:ba:dd:66:9a:34:a0:b3:44:98:63:33:7f:d0:2f:61:9b:22:
bb:7c:f8:f9:fc:41:43:af:b9:53:f6:b7:8d:33:0b:18:08:d5:
02:58:49:b9:77:f7:9f:4d:80:60:33:10:96:48:77:a2:20:55:
09:66:4b:aa:bf:69:ea:38:43:c7:94:53:2e:49:6e:bb:1e:b1:
9a:fe:06:72:dd:b1:3f:de:2f:2d:29:31:1f:e1:11:ad:a3:ba:
3a:23:10:f8:01:c5:ee:f1:37:cf:41:1f:34:78:32:61:c7:0b:
e9:d4:94:8f:5a:03:5d:d4:da:28:4e:c2:46:68:89:e2:4c:12:
4c:6c:7c:39:18:89:3f:f5:df:16:06:6b:68:53:c9:01:46:a8:
c1:fe:c0:09:da:78:c3:db:a4:c5:e1:cc:8d:29:41:12:2c:44:
0a:c0:23:bc:fb:2c:8b:39:a3:e6:68:d2:d7:e3:d1:7e:1f:13:
53:b2:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:00 2026 by rpki-client