Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yVu0i_xvq---2kocaB2IB3q7ZRM.roa
File: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (raw, json)
Hash identifier: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=
Subject key identifier: C9:5B:B4:8B:FC:6F:AB:EF:BE:DA:4A:1C:68:1D:88:07:7A:BB:65:13
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 019F23686CA56AEB616D93F1FE0E89760D50
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yVu0i_xvq---2kocaB2IB3q7ZRM.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31349
IP address blocks: 62.201.16.0/20 maxlen: 24
185.185.128.0/22 maxlen: 24
2a06:8080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:a5:6a:eb:61:6d:93:f1:fe:0e:89:76:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c95bb48bfc6fabefbeda4a1c681d88077abb6513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:e3:3d:bd:88:48:df:d8:3f:7b:80:da:cd:
ac:69:47:16:26:6b:60:9f:e7:1d:45:3b:43:3f:e3:
4a:46:9a:48:93:c0:bb:c9:69:41:9b:7f:7f:e5:8f:
72:d1:71:5d:68:44:98:56:bb:46:0f:b5:48:ca:95:
52:f7:67:97:6a:3f:b3:11:10:30:9f:25:b7:b1:90:
63:07:85:e0:c1:90:33:a4:3f:92:1e:f2:10:eb:7a:
3a:0e:55:c6:93:a0:aa:6a:9b:fb:38:8b:d3:1c:14:
29:30:a0:e4:13:06:8c:38:d3:f1:87:43:5f:5c:f6:
6f:66:5f:7d:3a:9d:8f:46:7f:c8:a2:47:6b:ab:71:
47:b7:63:e9:ce:e3:d1:b9:7b:93:f1:3d:4e:bc:f4:
37:97:45:fc:e9:2e:f6:68:9d:72:ab:1e:64:03:3f:
6c:15:50:8a:32:7f:5a:57:cd:aa:60:63:b7:d5:9f:
ad:fe:c0:55:a7:4f:98:30:58:91:94:47:26:72:9c:
f8:68:1d:3b:4a:1c:56:2b:e9:6f:d4:e1:c4:4b:65:
c6:3b:96:96:dc:57:1b:4c:69:88:fc:5c:03:34:61:
55:fd:39:55:31:b3:b1:f5:fe:92:c6:39:fd:c5:26:
cd:d1:02:0b:6d:aa:53:69:43:f5:51:a3:86:98:c6:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:B4:8B:FC:6F:AB:EF:BE:DA:4A:1C:68:1D:88:07:7A:BB:65:13
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yVu0i_xvq---2kocaB2IB3q7ZRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
185.185.128.0/22
IPv6:
2a06:8080::/29
Signature Algorithm: sha256WithRSAEncryption
61:ee:45:11:a3:d9:39:20:2a:a2:38:2e:55:1d:c4:47:99:d3:
21:15:7f:83:93:f4:df:7f:3c:d7:c3:62:11:4b:b8:7b:f5:c2:
b4:60:e3:bd:05:8d:9a:e4:e9:5a:20:0c:2c:2c:56:b5:cf:81:
a1:d9:31:1d:4c:f3:4a:74:fa:9e:89:14:a2:0f:78:22:72:f4:
82:ab:c0:16:c7:17:c0:ae:27:1b:95:a8:81:fd:60:a9:48:15:
86:ff:bd:40:8a:1e:ab:66:b6:8a:de:c3:8f:20:4d:13:3e:ae:
2d:31:39:bd:44:90:ef:59:3d:93:00:cd:c3:20:8f:4e:ee:cd:
30:8a:57:a7:b2:bb:14:d9:38:6b:62:48:6c:45:d4:55:99:f4:
fd:9e:36:24:29:6d:28:09:ee:78:77:0a:1f:ca:ba:9e:7d:00:
fa:2f:31:43:1a:3c:81:21:a6:0a:18:7a:d8:cf:3c:c7:2b:69:
4e:6e:31:c9:66:3c:d2:24:bc:d9:6e:cf:4a:8b:82:33:21:52:
66:e5:6f:3e:ea:9c:86:06:71:7b:24:09:96:74:c5:56:b8:50:
48:9e:8d:ea:30:08:d1:3c:a1:34:f1:a2:94:eb:4e:6b:14:d3:
fb:8a:84:c5:05:ad:ce:d8:e9:28:6a:a8:a5:98:40:da:c7:ea:
65:93:be:cb
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaGylauthbZPx/g6Jdg1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGM0NjEwZmQ4NzI5YWY3N2RlMDNiMDU5OWU3YTY1OGQ4
ZGEyY2QwHhcNMjYwNzAyMTUxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTViYjQ4YmZjNmZhYmVmYmVkYTRhMWM2ODFkODgwNzdhYmI2NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjXjPb2ISN/YP3uA2s2saUcWJmtg
n+cdRTtDP+NKRppIk8C7yWlBm39/5Y9y0XFdaESYVrtGD7VIypVS92eXaj+zERAw
nyW3sZBjB4XgwZAzpD+SHvIQ63o6DlXGk6Cqapv7OIvTHBQpMKDkEwaMONPxh0Nf
XPZvZl99Op2PRn/Iokdrq3FHt2PpzuPRuXuT8T1OvPQ3l0X86S72aJ1yqx5kAz9s
FVCKMn9aV82qYGO31Z+t/sBVp0+YMFiRlEcmcpz4aB07ShxWK+lv1OHES2XGO5aW
3FcbTGmI/FwDNGFV/TlVMbOx9f6Sxjn9xSbN0QILbapTaUP1UaOGmMYoEQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMlbtIv8b6vvvtpKHGgdiAd6u2UTMB8GA1UdIwQY
MBaAFEZMRhD9hymvd94DsFmeemWNjaLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmt4R0VQMkhLYTkzM2dPd1daNTZaWTJOb3MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt
MWIwZjI1NGRlNjE5LzEveVZ1MGlfeHZxLS0tMmtvY2FCMklCM3E3WlJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5
LzEvUmt4R0VQMkhLYTkzM2dPd1daNTZaWTJOb3MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEPskQAwQC
ubmAMA0EAgACMAcDBQMqBoCAMA0GCSqGSIb3DQEBCwUAA4IBAQBh7kURo9k5ICqi
OC5VHcRHmdMhFX+Dk/TffzzXw2IRS7h79cK0YOO9BY2a5OlaIAwsLFa1z4Gh2TEd
TPNKdPqeiRSiD3gicvSCq8AWxxfAricblaiB/WCpSBWG/71Aih6rZraK3sOPIE0T
Pq4tMTm9RJDvWT2TAM3DII9O7s0wilensrsU2ThrYkhsRdRVmfT9njYkKW0oCe54
dwofyrqefQD6LzFDGjyBIaYKGHrYzzzHK2lObjHJZjzSJLzZbs9Ki4IzIVJm5W8+
6pyGBnF7JAmWdMVWuFBIno3qMAjRPKE08aKU605rFNP7ioTFBa3O2OkoaqilmEDa
x+plk77L
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:58 2026 by rpki-client