Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yDHywWsdIhBQgVuHLGKPzw5EM7U.roa
File: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (raw, json)
Hash identifier: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=
Subject key identifier: C8:31:F2:C1:6B:1D:22:10:50:81:5B:87:2C:62:8F:CF:0E:44:33:B5
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019F37593FCD770A54A8872E021F8B7150E5
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yDHywWsdIhBQgVuHLGKPzw5EM7U.roa
Signing time: Mon 06 Jul 2026 12:13:43 +0000
ROA not before: Mon 06 Jul 2026 12:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59574
IP address blocks: 89.188.168.0/22 maxlen: 24
89.188.174.0/23 maxlen: 24
89.188.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:59:3f:cd:77:0a:54:a8:87:2e:02:1f:8b:71:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jul 6 12:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c831f2c16b1d221050815b872c628fcf0e4433b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:2d:5a:70:58:41:78:3a:4b:43:55:6f:81:
a5:04:1a:ff:8d:a0:ab:fe:e4:d7:ac:5b:5b:0c:1b:
cc:e3:43:64:20:85:68:0e:a6:6c:d9:00:65:63:9f:
3f:85:14:2e:e2:bf:c3:32:42:e0:9c:14:57:44:2b:
bb:30:80:4b:ea:ba:18:1d:41:99:96:c2:51:16:9d:
4b:4c:cd:38:4d:5f:26:64:9e:1d:e0:f9:45:99:b1:
31:6f:ad:fc:d7:74:29:47:52:ff:0f:2a:2d:6b:d8:
c7:04:ae:50:e8:4b:a4:c6:12:2d:35:ff:65:7b:4d:
a9:3a:6c:22:47:51:5d:dd:b8:78:60:b6:f3:ee:6f:
0d:d5:af:d8:c2:f4:2e:be:af:a4:b2:0e:9f:ed:23:
16:b8:ef:13:4d:23:55:7b:52:39:cd:5c:2a:2b:ba:
72:c6:c0:82:60:2a:0f:9f:c2:47:65:45:0c:ce:e1:
65:e8:ee:f7:88:8d:e0:29:59:0b:38:90:dd:ae:b2:
e7:27:9b:6b:ae:6a:66:94:6e:5c:f0:dd:45:b4:09:
8b:00:f5:88:a7:b9:e5:b2:55:2e:84:15:9d:b4:dd:
f7:cd:9c:95:3b:8a:70:9b:5b:80:07:a7:de:fb:0b:
7f:b9:a9:17:f3:7e:b8:1c:6a:31:d2:fc:3d:88:78:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:F2:C1:6B:1D:22:10:50:81:5B:87:2C:62:8F:CF:0E:44:33:B5
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yDHywWsdIhBQgVuHLGKPzw5EM7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.168.0/22
89.188.174.0/23
89.188.182.0/23
Signature Algorithm: sha256WithRSAEncryption
19:49:11:50:84:31:e3:70:64:2c:d4:a4:dd:2a:62:56:6c:3b:
6e:e5:80:ef:e1:2c:8a:24:e2:8d:3f:73:6b:4a:24:71:f8:6d:
c0:be:49:a7:5a:f9:d8:72:ef:78:99:af:d5:3b:57:95:cf:a3:
21:ab:3d:fa:ed:ea:cf:6b:b9:05:15:7b:a9:c2:71:9c:b6:59:
03:d6:4b:f5:db:7a:10:a3:99:50:a4:7e:d7:12:bd:a7:4b:7f:
d6:15:4b:ae:28:d8:64:93:2b:9a:30:ca:e3:89:e0:d7:4f:c0:
80:31:cb:45:02:c3:bd:b4:b6:b3:a5:22:d2:a1:0f:0b:7b:a3:
e5:1e:ac:1c:1f:f5:ac:61:0f:a6:d9:a4:4d:21:db:08:5e:3e:
ac:3a:15:54:86:3c:96:e3:4b:aa:96:c5:67:c2:c1:37:b5:e0:
34:c3:31:8a:39:56:fd:49:33:f3:86:4f:7b:0b:d8:b3:11:cf:
58:fa:29:cd:cd:4b:6f:3d:e3:77:65:c7:c3:b5:3c:ea:5f:01:
b5:d6:36:c1:c4:87:dc:08:f8:1a:1c:39:c6:90:ea:33:79:ac:
93:cb:3e:03:92:e1:25:62:5a:6a:69:d2:20:7d:f5:5c:f8:38:
da:a0:d6:38:70:57:af:00:76:a5:8f:e7:89:b4:be:33:9f:47:
39:b1:30:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ83WT/NdwpUqIcuAh+LcVDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjYwNzA2MTIxMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODMxZjJjMTZiMWQyMjEwNTA4MTViODcyYzYyOGZjZjBlNDQzM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxUtWnBYQXg6S0NVb4GlBBr/jaCr
/uTXrFtbDBvM40NkIIVoDqZs2QBlY58/hRQu4r/DMkLgnBRXRCu7MIBL6roYHUGZ
lsJRFp1LTM04TV8mZJ4d4PlFmbExb63813QpR1L/Dyota9jHBK5Q6EukxhItNf9l
e02pOmwiR1Fd3bh4YLbz7m8N1a/YwvQuvq+ksg6f7SMWuO8TTSNVe1I5zVwqK7py
xsCCYCoPn8JHZUUMzuFl6O73iI3gKVkLOJDdrrLnJ5trrmpmlG5c8N1FtAmLAPWI
p7nlslUuhBWdtN33zZyVO4pwm1uAB6fe+wt/uakX8364HGox0vw9iHigmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMgx8sFrHSIQUIFbhyxij88ORDO1MB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEveURIeXdXc2RJaEJRZ1Z1SExHS1B6dzVFTTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWbyoAwQB
WbyuAwQBWby2MA0GCSqGSIb3DQEBCwUAA4IBAQAZSRFQhDHjcGQs1KTdKmJWbDtu
5YDv4SyKJOKNP3NrSiRx+G3AvkmnWvnYcu94ma/VO1eVz6Mhqz367erPa7kFFXup
wnGctlkD1kv123oQo5lQpH7XEr2nS3/WFUuuKNhkkyuaMMrjieDXT8CAMctFAsO9
tLazpSLSoQ8Le6PlHqwcH/WsYQ+m2aRNIdsIXj6sOhVUhjyW40uqlsVnwsE3teA0
wzGKOVb9STPzhk97C9izEc9Y+inNzUtvPeN3ZcfDtTzqXwG11jbBxIfcCPgaHDnG
kOozeayTyz4DkuElYlpqadIgffVc+DjaoNY4cFevAHalj+eJtL4zn0c5sTCJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:13 2026 by rpki-client