Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YOBsnyOr0Yc-_VkOGfF9wW1r-wc.roa
File: YOBsnyOr0Yc-_VkOGfF9wW1r-wc.roa (raw, json)
Hash identifier: l0RTZm93pBP2IExFufQt6XPC0+ep2M3uMhKoEB0mtjc=
Subject key identifier: 60:E0:6C:9F:23:AB:D1:87:3E:FD:59:0E:19:F1:7D:C1:6D:6B:FB:07
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0EE94BD7856DCD9FD456488096024CE78
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YOBsnyOr0Yc-_VkOGfF9wW1r-wc.roa
Signing time: Tue 29 Sep 2026 19:12:00 +0000
ROA not before: Tue 29 Sep 2026 19:12:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 194.231.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:94:bd:78:56:dc:d9:fd:45:64:88:09:60:24:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 19:12:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60e06c9f23abd1873efd590e19f17dc16d6bfb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:9f:6d:e2:98:51:d3:8e:98:37:d2:d1:63:
53:e0:54:c0:06:a4:7b:20:21:18:88:86:a6:08:06:
4b:3b:5c:e8:91:e0:2e:54:f5:db:ea:f3:ee:6b:80:
84:ad:c6:cd:1d:13:0f:c5:9b:39:ba:1d:2b:99:bc:
22:5d:96:0c:e1:82:da:c7:7a:58:72:90:7f:ef:af:
42:eb:4a:b8:cc:e0:e0:69:33:c8:86:51:c5:80:5b:
2e:d1:b5:7b:00:87:77:bc:87:61:3e:b3:8a:67:73:
ce:58:af:1a:a2:9b:58:a4:75:af:a0:99:d5:13:21:
52:4c:75:dc:73:c4:e3:99:bb:bf:22:6f:55:e0:1d:
96:67:46:b7:2f:39:d3:ad:eb:76:4e:10:90:19:78:
ab:3a:ce:db:33:a0:c9:40:06:a1:23:d8:1f:df:88:
a3:32:a6:81:eb:79:da:d6:60:29:d7:a6:1d:3a:a4:
13:51:3c:ce:1e:a9:9d:f8:b7:97:fa:1b:4a:60:15:
35:f6:f3:70:bb:27:f5:d5:fa:06:ef:45:2d:87:1b:
49:fc:b4:80:8d:1f:f4:c4:52:e6:77:fa:08:ba:d9:
0e:5e:23:2c:2f:b3:7e:86:e3:87:b4:6b:43:7e:7e:
5d:ea:78:d1:8e:bd:e1:2e:56:09:88:19:17:a4:ca:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:6C:9F:23:AB:D1:87:3E:FD:59:0E:19:F1:7D:C1:6D:6B:FB:07
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YOBsnyOr0Yc-_VkOGfF9wW1r-wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.151.0/24
Signature Algorithm: sha256WithRSAEncryption
37:92:aa:40:ca:9b:9c:03:94:52:ef:9a:5c:d9:ab:01:75:7e:
9d:af:dc:3d:cc:b4:50:51:b0:24:ae:a1:74:11:28:86:ea:5d:
c7:b3:f4:e7:ee:2b:cc:d5:c7:a7:d9:1e:3e:8f:78:32:8d:73:
12:09:75:b7:da:c9:71:f1:ee:ba:ca:83:b6:11:01:c1:a9:99:
4b:3f:88:42:43:fb:e0:dd:3a:c2:f9:0c:1b:8e:61:90:8e:60:
5d:22:61:85:8c:2c:97:5e:99:fa:d2:7f:c2:93:fb:c1:f7:b8:
48:31:38:92:a1:48:91:7d:41:80:81:af:5f:eb:60:2a:d2:34:
56:73:98:bc:ff:b7:fc:b6:55:0a:a2:df:ba:7c:d6:72:67:ff:
1f:5d:50:60:24:db:6f:9e:0b:f4:00:8c:67:27:d6:71:95:ea:
76:75:5d:f6:5f:42:8e:56:6b:0c:ad:48:de:87:ff:0e:5a:40:
0d:e8:f8:21:24:8e:09:53:d9:6d:a5:69:80:b5:d8:ca:79:a7:
c7:78:15:e6:94:64:1e:1c:95:b5:6a:88:9f:b0:89:e0:e6:92:
52:b6:b8:f3:01:19:85:11:59:59:a3:f8:e8:78:0d:80:3f:05:
64:09:e9:81:bb:81:3d:42:0e:14:89:0c:bf:cd:9b:1f:0e:98:
84:62:0c:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDulL14VtzZ/UVkiAlgJM54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTI5MTkxMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGUwNmM5ZjIzYWJkMTg3M2VmZDU5MGUxOWYxN2RjMTZkNmJmYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWfbeKYUdOOmDfS0WNT4FTABqR7
ICEYiIamCAZLO1zokeAuVPXb6vPua4CErcbNHRMPxZs5uh0rmbwiXZYM4YLax3pY
cpB/769C60q4zODgaTPIhlHFgFsu0bV7AId3vIdhPrOKZ3POWK8aoptYpHWvoJnV
EyFSTHXcc8Tjmbu/Im9V4B2WZ0a3LznTret2ThCQGXirOs7bM6DJQAahI9gf34ij
MqaB63na1mAp16YdOqQTUTzOHqmd+LeX+htKYBU19vNwuyf11foG70UthxtJ/LSA
jR/0xFLmd/oIutkOXiMsL7N+huOHtGtDfn5d6njRjr3hLlYJiBkXpMp/lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDgbJ8jq9GHPv1ZDhnxfcFta/sHMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvWU9Cc255T3IwWWMtX1ZrT0dmRjl3VzFyLXdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwueXMA0G
CSqGSIb3DQEBCwUAA4IBAQA3kqpAypucA5RS75pc2asBdX6dr9w9zLRQUbAkrqF0
ESiG6l3Hs/Tn7ivM1cen2R4+j3gyjXMSCXW32slx8e66yoO2EQHBqZlLP4hCQ/vg
3TrC+QwbjmGQjmBdImGFjCyXXpn60n/Ck/vB97hIMTiSoUiRfUGAga9f62Aq0jRW
c5i8/7f8tlUKot+6fNZyZ/8fXVBgJNtvngv0AIxnJ9Zxlep2dV32X0KOVmsMrUje
h/8OWkAN6PghJI4JU9ltpWmAtdjKeafHeBXmlGQeHJW1aoifsIng5pJStrjzARmF
EVlZo/joeA2APwVkCemBu4E9Qg4UiQy/zZsfDpiEYgzQ
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:50 2026 by rpki-client