Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Y_BECm3wsO_V-qTtYESs25RUX-o.roa
File: Y_BECm3wsO_V-qTtYESs25RUX-o.roa (raw, json)
Hash identifier: oZMfMQOR9rwSGeRo/iQrKQBzqynXmP8LAzoSEuWTo98=
Subject key identifier: 63:F0:44:0A:6D:F0:B0:EF:D5:FA:A4:ED:60:44:AC:DB:94:54:5F:EA
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01A1DE4087C80B5824245E80FB361E2985EB
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Y_BECm3wsO_V-qTtYESs25RUX-o.roa
Signing time: Sun 15 Nov 2026 08:08:53 +0000
ROA not before: Sun 15 Nov 2026 08:08:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.10.0/24 maxlen: 24
62.150.57.0/24 maxlen: 24
62.150.110.0/23 maxlen: 23
62.150.142.0/24 maxlen: 24
62.150.155.0/24 maxlen: 24
62.150.175.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
62.150.182.0/24 maxlen: 24
78.154.192.0/18 maxlen: 18
78.154.192.0/20 maxlen: 20
78.154.192.0/24 maxlen: 24
78.154.193.0/24 maxlen: 24
78.154.194.0/24 maxlen: 24
78.154.195.0/24 maxlen: 24
78.154.196.0/24 maxlen: 24
78.154.197.0/24 maxlen: 24
78.154.198.0/24 maxlen: 24
78.154.199.0/24 maxlen: 24
78.154.200.0/24 maxlen: 24
78.154.201.0/24 maxlen: 24
78.154.202.0/24 maxlen: 24
78.154.203.0/24 maxlen: 24
78.154.204.0/24 maxlen: 24
78.154.205.0/24 maxlen: 24
78.154.206.0/24 maxlen: 24
78.154.207.0/24 maxlen: 24
78.154.208.0/20 maxlen: 20
78.154.208.0/24 maxlen: 24
78.154.209.0/24 maxlen: 24
78.154.210.0/24 maxlen: 24
78.154.211.0/24 maxlen: 24
78.154.212.0/24 maxlen: 24
78.154.213.0/24 maxlen: 24
78.154.214.0/24 maxlen: 24
78.154.215.0/24 maxlen: 24
78.154.216.0/24 maxlen: 24
78.154.217.0/24 maxlen: 24
78.154.218.0/24 maxlen: 24
78.154.219.0/24 maxlen: 24
78.154.220.0/24 maxlen: 24
78.154.221.0/24 maxlen: 24
78.154.222.0/24 maxlen: 24
78.154.223.0/24 maxlen: 24
78.154.224.0/20 maxlen: 20
78.154.224.0/24 maxlen: 24
78.154.225.0/24 maxlen: 24
78.154.226.0/24 maxlen: 24
78.154.227.0/24 maxlen: 24
78.154.228.0/24 maxlen: 24
78.154.229.0/24 maxlen: 24
78.154.230.0/24 maxlen: 24
78.154.231.0/24 maxlen: 24
78.154.232.0/24 maxlen: 24
78.154.233.0/24 maxlen: 24
78.154.234.0/24 maxlen: 24
78.154.235.0/24 maxlen: 24
78.154.236.0/24 maxlen: 24
78.154.237.0/24 maxlen: 24
78.154.238.0/24 maxlen: 24
78.154.239.0/24 maxlen: 24
78.154.240.0/20 maxlen: 20
78.154.240.0/24 maxlen: 24
78.154.241.0/24 maxlen: 24
78.154.242.0/24 maxlen: 24
78.154.243.0/24 maxlen: 24
78.154.244.0/24 maxlen: 24
78.154.245.0/24 maxlen: 24
78.154.246.0/24 maxlen: 24
78.154.247.0/24 maxlen: 24
78.154.248.0/24 maxlen: 24
78.154.249.0/24 maxlen: 24
78.154.250.0/24 maxlen: 24
78.154.251.0/24 maxlen: 24
78.154.252.0/24 maxlen: 24
78.154.253.0/24 maxlen: 24
78.154.254.0/24 maxlen: 24
78.154.255.0/24 maxlen: 24
195.39.161.0/24 maxlen: 24
195.39.180.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
195.39.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:40:87:c8:0b:58:24:24:5e:80:fb:36:1e:29:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Nov 15 08:08:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f0440a6df0b0efd5faa4ed6044acdb94545fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:89:ee:f6:51:28:8a:8b:b1:2f:d6:98:af:
cb:1b:c3:ca:23:65:6a:75:45:9f:7b:52:09:79:26:
95:81:ef:ed:a8:7d:ee:0c:a7:62:87:f1:db:ac:96:
7a:0c:80:b9:6a:a0:fd:1b:73:1c:22:d2:e8:e8:63:
5b:7e:72:b7:4f:1a:47:8d:80:16:ca:30:cc:72:15:
96:3f:e6:a4:bc:0f:51:b1:5a:b3:b6:f9:13:33:4a:
c3:fa:74:a3:37:1a:54:d2:28:6b:f5:fa:f9:01:4e:
72:2f:ac:b6:fa:a5:23:84:71:97:4a:65:14:fe:b0:
24:d1:83:d7:71:3d:00:82:03:99:a0:ed:fc:f8:85:
33:cd:da:e8:8a:b2:cf:08:40:61:c2:55:d9:eb:0f:
92:e1:5a:0a:9c:72:da:17:b0:21:29:38:e1:ea:16:
fb:66:bc:83:c9:6c:c5:f6:60:3d:07:8c:d2:6f:ad:
54:91:f1:5d:d8:b3:c3:a0:82:b5:e6:7e:6d:21:39:
f6:31:96:a6:c7:3a:05:b4:66:b6:a4:0d:97:ab:2a:
6c:94:65:3b:30:1b:f8:d5:fc:c0:79:de:5c:ba:c7:
8a:15:4a:e5:dc:d5:6e:82:25:00:fb:bd:17:03:0f:
4c:4e:eb:ea:e2:21:00:1f:75:3b:89:d4:3b:0f:47:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:44:0A:6D:F0:B0:EF:D5:FA:A4:ED:60:44:AC:DB:94:54:5F:EA
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Y_BECm3wsO_V-qTtYESs25RUX-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.10.0/24
62.150.57.0/24
62.150.110.0/23
62.150.142.0/24
62.150.155.0/24
62.150.175.0/24
62.150.181.0-62.150.182.255
78.154.192.0/18
195.39.161.0/24
195.39.180.0-195.39.182.255
Signature Algorithm: sha256WithRSAEncryption
4b:a2:02:b9:34:70:c0:03:f3:b4:e3:5b:0b:d3:a6:3b:63:a2:
80:11:08:f5:be:b0:f3:39:d5:c8:6a:b6:57:e3:39:86:76:27:
5c:fc:76:11:5b:f0:f7:fc:fe:90:cf:21:7d:c1:85:35:60:ac:
5c:fb:c5:47:7f:c3:4e:b9:9f:91:5b:d6:17:f6:fc:8e:e8:6d:
43:a1:c9:bf:28:fd:3f:3d:f3:2d:eb:3b:5d:e3:4b:bd:d9:f6:
79:e7:ba:46:ba:7e:26:36:b3:69:28:58:ce:af:09:b6:a7:8e:
e8:cf:a1:f3:a8:37:54:a0:e1:3a:fa:41:7e:49:49:d3:95:66:
1d:97:24:3e:b6:00:fb:bc:94:c6:61:c3:f5:00:4b:03:86:f9:
49:e3:d3:20:ad:74:49:3c:d6:36:6c:53:03:fc:99:e3:60:0a:
20:8f:47:90:4a:4f:35:99:9c:e3:7c:93:82:de:ae:60:31:66:
67:01:b6:74:a9:52:69:be:25:94:1e:ab:f9:e0:b8:a9:a9:31:
01:7b:ba:29:b7:c6:6f:c0:ec:9f:e8:7d:8f:5d:39:f3:b0:7b:
16:ed:67:0d:2f:81:a1:7c:8d:7f:29:7d:85:42:6a:50:ae:fc:
34:59:ab:8c:e6:a4:f7:98:c3:6d:1b:ac:8c:95:c5:30:3f:bf:
67:70:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:27 2026 by rpki-client