Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/yhSXUlVamR-zZ5m_SN46dT0IkMI.roa
File: yhSXUlVamR-zZ5m_SN46dT0IkMI.roa (raw, json)
Hash identifier: MIQXE7BooxPG7h5Z2Qw2PG5T0/LuMdp6jCasMFaOQ7o=
Subject key identifier: CA:14:97:52:55:5A:99:1F:B3:67:99:BF:48:DE:3A:75:3D:08:90:C2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019F32FD3881F21B4157637B8E3594F1A291
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/yhSXUlVamR-zZ5m_SN46dT0IkMI.roa
Signing time: Sun 05 Jul 2026 15:54:43 +0000
ROA not before: Sun 05 Jul 2026 15:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50472
IP address blocks: 185.106.84.0/22 maxlen: 24
195.54.164.0/23 maxlen: 23
2001:67c:20a0::/48 maxlen: 48
2a02:8000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:fd:38:81:f2:1b:41:57:63:7b:8e:35:94:f1:a2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jul 5 15:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca149752555a991fb36799bf48de3a753d0890c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:ef:f3:6f:4c:65:a1:d9:2d:a6:50:4f:25:
b0:64:97:30:62:4f:63:4a:31:90:67:8e:24:eb:83:
71:9d:cc:a7:b7:fb:b8:2f:31:40:1a:e9:9b:93:20:
cd:12:01:c9:9b:ab:2c:89:a7:03:0a:1a:d3:f8:1b:
41:ae:21:69:bc:8e:f2:7e:dc:0d:9b:a0:c8:ff:ce:
53:07:d0:e9:62:93:6b:b1:01:b4:b7:cb:f6:e7:5f:
3c:21:60:14:79:24:91:62:5e:d1:54:9b:50:8f:48:
2e:4a:1f:2e:34:f2:2a:06:89:06:bc:93:29:1c:e1:
a8:ed:7b:3b:95:8a:33:57:1e:42:2d:94:54:2f:ca:
d5:97:45:0c:c8:c4:85:cd:3b:b1:6d:61:bf:e9:b4:
4a:69:11:38:29:85:86:26:16:67:27:04:24:8e:2d:
89:ef:e1:5b:d2:9c:4c:f9:5b:98:57:9b:1f:7a:04:
9b:c6:39:09:90:03:9c:9a:23:8c:fc:72:18:f3:f1:
a8:55:73:08:53:44:46:62:d2:49:20:c7:22:b6:a3:
4e:40:29:9c:15:dd:9b:17:69:01:30:b8:ca:e9:49:
3d:c6:b4:1b:09:11:54:f9:2f:19:ee:3a:ce:34:f9:
67:98:32:31:52:86:9d:56:88:4f:a4:db:a5:5d:09:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:97:52:55:5A:99:1F:B3:67:99:BF:48:DE:3A:75:3D:08:90:C2
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/yhSXUlVamR-zZ5m_SN46dT0IkMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.84.0/22
195.54.164.0/23
IPv6:
2001:67c:20a0::/48
2a02:8000::/32
Signature Algorithm: sha256WithRSAEncryption
53:e5:46:8d:62:d9:0a:b6:d0:e7:62:dc:1f:70:f3:39:de:52:
b0:f6:0b:92:a8:dc:3e:90:92:03:34:cf:85:38:2c:09:e1:c1:
0f:06:7a:7d:5d:6a:35:1b:c6:cc:9f:08:ab:ec:3b:09:fa:0a:
11:64:57:4a:e4:07:80:07:42:49:a7:6d:49:3b:08:27:63:10:
04:a8:08:27:cc:4f:6a:e2:c2:03:37:fc:02:37:1a:45:84:75:
5a:72:07:53:76:24:8d:f1:32:d2:49:d5:37:12:b9:2e:23:7a:
b0:3e:d7:8b:b6:68:34:b0:6e:f6:8f:64:7d:b4:ef:48:cf:d5:
f3:cc:c5:6b:d3:e5:f2:b2:73:cf:bd:d5:1f:c7:96:da:cb:5f:
6f:20:a5:57:5a:e5:51:aa:73:da:02:e9:d8:95:69:2c:41:c6:
57:08:61:69:d8:b8:79:1b:ac:f6:6a:8a:79:ca:28:b9:fd:80:
b2:6a:29:4f:3a:26:50:86:23:44:aa:e1:a2:26:d1:81:f1:c4:
5c:5a:51:db:c7:7c:6e:8c:57:e8:91:ee:50:c3:c5:b5:fc:89:
78:df:bc:ee:01:25:fc:37:9e:3f:b1:a5:45:34:1c:77:4a:51:
2d:8e:56:c5:73:3c:7a:ec:41:b1:38:18:71:47:ec:23:7b:69:
b9:5c:97:a3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8y/TiB8htBV2N7jjWU8aKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MGQ5ZjAxYTk4YjUxNGViZDNjMjcyM2Q3ZjdlYjQ0ODMy
NmY1ZTIwHhcNMjYwNzA1MTU1NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTE0OTc1MjU1NWE5OTFmYjM2Nzk5YmY0OGRlM2E3NTNkMDg5MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JLv829MZaHZLaZQTyWwZJcwYk9j
SjGQZ44k64Nxncynt/u4LzFAGumbkyDNEgHJm6ssiacDChrT+BtBriFpvI7yftwN
m6DI/85TB9DpYpNrsQG0t8v25188IWAUeSSRYl7RVJtQj0guSh8uNPIqBokGvJMp
HOGo7Xs7lYozVx5CLZRUL8rVl0UMyMSFzTuxbWG/6bRKaRE4KYWGJhZnJwQkji2J
7+Fb0pxM+VuYV5sfegSbxjkJkAOcmiOM/HIY8/GoVXMIU0RGYtJJIMcitqNOQCmc
Fd2bF2kBMLjK6Uk9xrQbCRFU+S8Z7jrONPlnmDIxUoadVohPpNulXQlOHQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMoUl1JVWpkfs2eZv0jeOnU9CJDCMB8GA1UdIwQY
MBaAFIYNnwGpi1FOvTwnI9f360SDJvXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQt
NjFjYjQzYzJkYjg1LzEveWhTWFVsVmFtUi16WjVtX1NONDZkVDBJa01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQtNjFjYjQzYzJkYjg1
LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuWpUAwQB
wzakMBYEAgACMBADBwAgAQZ8IKADBQAqAoAAMA0GCSqGSIb3DQEBCwUAA4IBAQBT
5UaNYtkKttDnYtwfcPM53lKw9guSqNw+kJIDNM+FOCwJ4cEPBnp9XWo1G8bMnwir
7DsJ+goRZFdK5AeAB0JJp21JOwgnYxAEqAgnzE9q4sIDN/wCNxpFhHVacgdTdiSN
8TLSSdU3ErkuI3qwPteLtmg0sG72j2R9tO9Iz9XzzMVr0+XysnPPvdUfx5bay19v
IKVXWuVRqnPaAunYlWksQcZXCGFp2Lh5G6z2aop5yii5/YCyailPOiZQhiNEquGi
JtGB8cRcWlHbx3xujFfoke5Qw8W1/Il437zuASX8N54/saVFNBx3SlEtjlbFczx6
7EGxOBhxR+wje2m5XJej
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:34 2026 by rpki-client