Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YjbFkBDTS5NFbwdiI2IQ_URw5m0.roa
File: YjbFkBDTS5NFbwdiI2IQ_URw5m0.roa (raw, json)
Hash identifier: cn5rnF1l3S3ChlA89Iu+p7qW6LDPQzVtJ9Adx3d+SJE=
Subject key identifier: 62:36:C5:90:10:D3:4B:93:45:6F:07:62:23:62:10:FD:44:70:E6:6D
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01A0C30C216D1FF0F37B1CF283E32C8906F5
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YjbFkBDTS5NFbwdiI2IQ_URw5m0.roa
Signing time: Mon 21 Sep 2026 08:19:06 +0000
ROA not before: Mon 21 Sep 2026 08:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25019
IP address blocks: 159.0.0.0/16 maxlen: 16
159.0.0.0/20 maxlen: 20
159.0.16.0/20 maxlen: 20
159.0.32.0/20 maxlen: 20
159.0.48.0/20 maxlen: 20
159.0.64.0/20 maxlen: 20
159.0.80.0/20 maxlen: 20
159.0.96.0/20 maxlen: 20
159.0.112.0/20 maxlen: 20
159.0.128.0/24 maxlen: 24
159.0.129.0/24 maxlen: 24
159.0.130.0/24 maxlen: 24
159.0.131.0/24 maxlen: 24
159.0.132.0/24 maxlen: 24
159.0.133.0/24 maxlen: 24
159.0.134.0/24 maxlen: 24
159.0.135.0/24 maxlen: 24
159.0.136.0/24 maxlen: 24
159.0.137.0/24 maxlen: 24
159.0.138.0/24 maxlen: 24
159.0.139.0/24 maxlen: 24
159.0.140.0/24 maxlen: 24
159.0.141.0/24 maxlen: 24
159.0.142.0/24 maxlen: 24
159.0.143.0/24 maxlen: 24
159.0.144.0/24 maxlen: 24
159.0.145.0/24 maxlen: 24
159.0.146.0/24 maxlen: 24
159.0.147.0/24 maxlen: 24
159.0.148.0/24 maxlen: 24
159.0.149.0/24 maxlen: 24
159.0.150.0/24 maxlen: 24
159.0.151.0/24 maxlen: 24
159.0.152.0/24 maxlen: 24
159.0.153.0/24 maxlen: 24
159.0.154.0/24 maxlen: 24
159.0.155.0/24 maxlen: 24
159.0.156.0/24 maxlen: 24
159.0.157.0/24 maxlen: 24
159.0.158.0/24 maxlen: 24
159.0.159.0/24 maxlen: 24
159.0.160.0/20 maxlen: 20
159.0.192.0/20 maxlen: 20
159.0.208.0/20 maxlen: 20
159.0.224.0/20 maxlen: 20
159.0.240.0/20 maxlen: 20
185.139.8.0/22 maxlen: 22
212.215.128.0/17 maxlen: 17
212.215.128.0/18 maxlen: 18
212.215.137.0/24 maxlen: 24
212.215.144.0/20 maxlen: 20
212.215.160.0/20 maxlen: 20
212.215.176.0/20 maxlen: 20
212.215.192.0/20 maxlen: 20
212.215.240.0/22 maxlen: 22
212.215.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:0c:21:6d:1f:f0:f3:7b:1c:f2:83:e3:2c:89:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Sep 21 08:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6236c59010d34b93456f0762236210fd4470e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:37:52:72:e2:01:0b:9b:6a:3b:a6:e7:dc:
e1:78:3f:68:ee:e4:1a:e4:ea:2f:f2:1f:32:bd:1f:
c1:69:1f:33:f1:b5:da:70:9d:ee:11:3c:5d:b1:d6:
34:59:e1:d4:9b:3f:95:6d:ba:9b:6f:7a:b6:96:92:
a3:ca:00:ab:4d:ca:d3:e0:7d:62:3d:2d:94:8d:35:
1c:4f:e8:64:d8:90:2c:72:de:4b:9e:84:ba:ec:40:
cd:61:a1:0d:f6:03:f6:87:72:2d:e3:38:06:4a:39:
bf:7a:ca:a2:5e:d7:4e:31:35:d5:4a:4c:6d:99:51:
53:38:1d:f4:ee:fd:54:0b:97:be:5c:f3:ab:35:ae:
c9:57:13:c9:23:6a:6e:e1:29:cc:6f:ed:f7:6c:90:
6f:b1:ac:1e:4b:75:13:ab:3f:70:45:fb:09:28:a6:
74:7a:20:df:05:a6:45:ff:f9:2d:a3:84:0a:dd:e4:
34:c0:98:03:6f:46:da:05:02:23:d6:85:9f:ea:ae:
02:e8:d6:10:83:b5:61:cf:6c:c5:ad:60:b9:7e:3e:
13:1f:72:2f:88:6b:58:04:e4:4f:52:82:58:68:f8:
cb:b1:16:da:32:d6:94:b3:96:20:d9:dd:72:d9:25:
c8:3f:a0:c5:19:0e:2f:b0:4d:25:32:7f:d5:56:bb:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:C5:90:10:D3:4B:93:45:6F:07:62:23:62:10:FD:44:70:E6:6D
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/YjbFkBDTS5NFbwdiI2IQ_URw5m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0/16
185.139.8.0/22
212.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ae:1c:6b:70:37:a3:ab:0d:68:36:12:31:75:20:f8:18:65:68:
cb:65:cd:10:d3:1d:e8:3d:48:75:53:9b:c2:a6:ab:98:52:e2:
0f:8d:46:6e:d7:de:55:26:f4:34:c1:92:da:74:ee:52:ba:8f:
4f:0f:ed:c5:43:75:23:9f:be:fc:af:16:8a:7f:97:f6:18:b2:
ce:b8:74:4e:ee:31:20:5c:8b:78:bf:53:12:ca:89:de:53:03:
90:5b:c8:87:21:05:02:95:da:68:a9:4b:4b:a8:06:12:d6:92:
dd:c9:90:08:00:99:5a:12:f3:40:a7:5e:d9:06:1d:56:9a:ab:
d1:4c:0c:dc:9e:4a:53:70:2c:bf:91:ae:d3:bd:2b:54:9a:6f:
47:72:6e:e5:24:9f:f1:2b:09:06:b2:02:12:de:80:d4:8d:14:
3b:5a:da:32:4c:84:e7:8d:dd:56:cc:38:05:8b:a8:78:bf:f5:
32:bc:81:b4:99:a6:f2:f8:ca:a0:d2:b6:0b:37:4f:84:73:e5:
c8:89:23:a4:d8:9f:ec:1c:15:bf:97:ce:49:ef:a6:c9:6e:42:
fb:50:5a:68:3b:45:c1:83:b9:f6:20:7a:cb:2b:ed:b6:c6:43:
b9:61:f2:07:88:60:ce:f6:b3:e2:61:e0:4b:d6:07:53:1d:ad:
42:7a:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:36:32 2026 by rpki-client