Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/yh54kqFVQkBUGD2L64gmg0WiwgQ.roa
File: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (raw, json)
Hash identifier: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=
Subject key identifier: CA:1E:78:92:A1:55:42:40:54:18:3D:8B:EB:88:26:83:45:A2:C2:04
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019D52517EB96C3791BA1A8918F9B8A116A1
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/yh54kqFVQkBUGD2L64gmg0WiwgQ.roa
Signing time: Fri 03 Apr 2026 07:49:25 +0000
ROA not before: Fri 03 Apr 2026 07:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41557
IP address blocks: 46.217.240.0/21 maxlen: 21
46.217.248.0/22 maxlen: 22
62.162.164.0/22 maxlen: 22
62.162.176.0/21 maxlen: 21
62.162.184.0/21 maxlen: 21
62.162.212.0/24 maxlen: 24
79.125.176.0/21 maxlen: 21
79.125.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:51:7e:b9:6c:37:91:ba:1a:89:18:f9:b8:a1:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 3 07:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca1e7892a155424054183d8beb88268345a2c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:56:1e:40:c1:68:e0:da:c2:0b:d0:1c:9a:
82:9a:9e:8e:1c:cc:cd:26:12:a5:69:a8:5f:51:77:
53:4c:d1:e5:51:17:a6:4e:d9:4c:19:4b:36:2e:96:
81:26:84:3e:7e:24:f5:6e:ad:17:cd:35:21:21:a1:
34:60:75:6b:ed:43:bf:72:1f:d1:48:c8:0d:9b:95:
0b:1e:3a:9b:b0:8d:61:b1:5d:6d:ca:d1:e8:3f:50:
00:b1:1c:a0:c3:3e:89:39:3d:64:37:a5:e9:1d:36:
c9:71:b2:98:a5:ac:c4:72:3d:b1:45:7d:d6:a5:40:
67:7e:65:92:9c:ae:cb:2a:b7:3b:8a:e6:9a:98:9f:
c7:a3:8a:b0:78:d5:44:9b:18:ed:82:25:9f:0d:d7:
c5:0a:8a:80:39:a8:d2:92:ab:74:91:58:bd:5e:f0:
d2:cc:64:b3:3b:48:61:6f:81:ff:19:7c:99:fd:e8:
e8:79:bb:ea:e5:90:a5:aa:e5:d8:14:ad:2e:6b:d7:
d3:62:f8:e9:d5:e8:1f:f4:50:67:e5:f7:aa:f2:c3:
3f:11:c0:0e:b4:54:c8:ea:3e:08:db:ca:28:1c:0a:
80:1a:e2:f5:5e:1b:39:0d:41:3e:b4:c6:81:0f:4a:
fc:71:44:e9:ae:74:13:1a:e8:cb:7b:5a:5e:84:34:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:78:92:A1:55:42:40:54:18:3D:8B:EB:88:26:83:45:A2:C2:04
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/yh54kqFVQkBUGD2L64gmg0WiwgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.217.240.0-46.217.251.255
62.162.164.0/22
62.162.176.0/20
62.162.212.0/24
79.125.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:b8:a1:cf:3c:c8:a6:05:9b:d6:06:91:e5:53:06:e2:40:b3:
e8:e5:48:3f:09:14:cf:34:81:fe:93:30:e9:26:3a:d6:9b:ab:
29:f9:83:db:1d:e8:e6:de:46:30:60:05:bf:a0:7b:4c:53:00:
4c:a7:36:59:92:95:eb:e9:5b:96:2e:ee:44:3f:ef:05:72:e5:
0a:9e:9c:46:7e:07:9c:54:09:c6:81:d8:e9:1b:dc:27:7b:81:
53:05:9c:24:35:eb:b1:af:2f:26:e6:8f:2c:03:b6:6c:75:93:
36:09:18:1f:fa:83:8c:a7:bc:02:6f:dd:32:ef:77:64:bd:4d:
6e:1d:d1:9e:74:cd:af:65:d5:7d:73:de:2a:1c:70:3d:37:42:
04:56:68:81:52:a5:7c:c4:ba:34:41:5b:d0:0a:d2:bf:72:58:
83:9e:34:67:aa:e0:a4:98:ca:91:23:a1:a3:2f:97:3f:6f:cb:
e4:a1:fc:9a:59:46:00:7a:3b:72:69:9a:a4:e0:9c:fd:4e:f6:
31:a4:f4:87:8f:53:42:15:b7:52:e8:a7:28:20:16:69:b4:f8:
6f:f1:2d:21:1e:a3:d0:07:4d:91:43:00:a2:a8:d2:ff:a0:40:
ea:a2:f7:a0:06:80:ca:1e:eb:ad:a3:fe:b7:1a:85:b5:35:50:
5f:1c:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:55 2026 by rpki-client