Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/YWaEdflZyU07xg1D4jsSX6doOgk.roa
File: YWaEdflZyU07xg1D4jsSX6doOgk.roa (raw, json)
Hash identifier: KS92hgGAVq2EThdUubMc1js5X3LJD5ypJmkPd79ZX6c=
Subject key identifier: 61:66:84:75:F9:59:C9:4D:3B:C6:0D:43:E2:3B:12:5F:A7:68:3A:09
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 019F1D5036661DEF006D1E216E0875850E43
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/YWaEdflZyU07xg1D4jsSX6doOgk.roa
Signing time: Wed 01 Jul 2026 10:53:43 +0000
ROA not before: Wed 01 Jul 2026 10:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212093
IP address blocks: 178.237.200.0/24 maxlen: 24
178.237.204.0/24 maxlen: 24
178.237.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:50:36:66:1d:ef:00:6d:1e:21:6e:08:75:85:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jul 1 10:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61668475f959c94d3bc60d43e23b125fa7683a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:0b:c3:2f:35:a2:45:3a:74:f1:da:9a:9d:
24:0f:62:f2:e2:d8:6c:f2:98:3a:6b:76:a8:fd:c4:
81:b7:60:9c:be:f5:e4:cb:e2:0f:64:3c:2b:09:b4:
d6:4a:77:56:cf:ac:5b:a0:0e:7c:73:55:15:30:09:
1f:1b:54:70:02:7e:b7:34:e7:47:76:de:e0:f1:31:
d0:ee:85:be:7c:cd:49:3c:d3:69:d9:3e:92:ac:dc:
c4:3d:03:5b:25:a2:60:97:b5:92:83:fa:ac:5e:74:
ef:0d:d6:c1:32:e8:63:32:77:fb:93:92:5b:fe:23:
b7:8a:14:09:9e:3f:66:09:6c:f0:b5:1d:e2:eb:0f:
c1:e6:67:4e:a6:38:ae:af:5c:3e:de:41:30:46:2c:
e9:78:19:f2:c7:73:c2:77:d3:37:91:a7:25:ce:68:
c7:f1:3d:8b:c8:d3:f1:4f:37:66:09:fa:90:55:fd:
38:e5:ac:f7:2f:b3:ad:b5:e7:fe:c4:b7:cf:5e:9a:
39:92:84:f7:d0:ea:31:63:cc:67:6d:d6:23:c1:c3:
9a:41:91:12:c2:45:f5:f9:26:79:28:3b:22:c5:ee:
7e:35:14:bb:62:e9:4c:42:38:5d:2e:98:5a:3c:b9:
0f:6d:7c:80:7c:57:2b:99:a2:87:dc:03:bf:bb:88:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:84:75:F9:59:C9:4D:3B:C6:0D:43:E2:3B:12:5F:A7:68:3A:09
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/YWaEdflZyU07xg1D4jsSX6doOgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.200.0/24
178.237.204.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ba:c9:d0:08:e9:95:80:a6:dd:2a:ca:ca:48:58:25:c7:77:
f9:71:1e:e6:cd:7d:90:56:00:fc:94:a8:c8:4c:e7:ba:dd:21:
dd:85:1f:8a:42:e0:85:02:b5:b2:b2:0f:39:bf:27:cb:0c:24:
de:2e:72:49:0c:a8:60:4f:25:e7:b9:c5:f2:53:d4:7d:04:c5:
ac:11:57:a2:4f:67:08:6a:e7:bd:d3:34:9b:b1:fa:dd:5e:29:
f3:9b:ee:57:62:ba:26:ef:84:dd:64:be:57:7f:57:d8:7e:eb:
3c:a5:d9:2c:71:02:55:b0:02:d8:5d:1a:d9:72:5e:c6:b7:e1:
9a:d4:39:57:6e:89:11:0e:ae:6a:e5:72:f6:77:ee:bc:c4:31:
32:ef:8b:68:d4:cc:47:91:b3:96:bd:3e:75:8e:ea:55:93:41:
1f:f8:c2:02:57:64:87:f3:67:4e:03:ea:70:3f:74:c6:fa:25:
51:f5:b6:99:27:1f:58:bc:35:31:c7:f6:aa:96:b9:82:ef:7b:
80:59:09:02:b2:4f:5c:69:a7:d5:10:bd:40:38:4f:72:7d:62:
83:7e:b3:20:3f:76:7d:f0:7b:da:5d:10:d7:4d:03:0c:08:3a:
84:c0:7d:ed:13:46:0b:d8:26:f9:18:9e:c7:a4:1c:5e:10:43:
b3:34:b9:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8dUDZmHe8AbR4hbgh1hQ5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm
ZWI5ZWMwHhcNMjYwNzAxMTA1MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTY2ODQ3NWY5NTljOTRkM2JjNjBkNDNlMjNiMTI1ZmE3NjgzYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLoLwy81okU6dPHamp0kD2Ly4ths
8pg6a3ao/cSBt2CcvvXky+IPZDwrCbTWSndWz6xboA58c1UVMAkfG1RwAn63NOdH
dt7g8THQ7oW+fM1JPNNp2T6SrNzEPQNbJaJgl7WSg/qsXnTvDdbBMuhjMnf7k5Jb
/iO3ihQJnj9mCWzwtR3i6w/B5mdOpjiur1w+3kEwRizpeBnyx3PCd9M3kaclzmjH
8T2LyNPxTzdmCfqQVf045az3L7Ottef+xLfPXpo5koT30OoxY8xnbdYjwcOaQZES
wkX1+SZ5KDsixe5+NRS7YulMQjhdLphaPLkPbXyAfFcrmaKH3AO/u4hnWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGFmhHX5WclNO8YNQ+I7El+naDoJMB8GA1UdIwQY
MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt
ZThiNjBhMmRkNmI0LzEvWVdhRWRmbFp5VTA3eGcxRDRqc1NYNmRvT2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0
LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu3IAwQB
su3MMA0GCSqGSIb3DQEBCwUAA4IBAQB5usnQCOmVgKbdKsrKSFglx3f5cR7mzX2Q
VgD8lKjITOe63SHdhR+KQuCFArWysg85vyfLDCTeLnJJDKhgTyXnucXyU9R9BMWs
EVeiT2cIaue90zSbsfrdXinzm+5XYrom74TdZL5Xf1fYfus8pdkscQJVsALYXRrZ
cl7Gt+Ga1DlXbokRDq5q5XL2d+68xDEy74to1MxHkbOWvT51jupVk0Ef+MICV2SH
82dOA+pwP3TG+iVR9baZJx9YvDUxx/aqlrmC73uAWQkCsk9caafVEL1AOE9yfWKD
frMgP3Z98HvaXRDXTQMMCDqEwH3tE0YL2Cb5GJ7HpBxeEEOzNLkW
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:58 2026 by rpki-client