Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Y-8wSSC2qwBNrjz_k6R_unopQh0.roa
File: Y-8wSSC2qwBNrjz_k6R_unopQh0.roa (raw, json)
Hash identifier: J5RiMHLKReJzZBj2iCfOky82KbJ9Kf5ES1oVIIEEkV4=
Subject key identifier: 63:EF:30:49:20:B6:AB:00:4D:AE:3C:FF:93:A4:7F:BA:7A:29:42:1D
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01A0FB34242CA78567E189DB61C71B3D6A8F
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Y-8wSSC2qwBNrjz_k6R_unopQh0.roa
Signing time: Fri 02 Oct 2026 06:01:33 +0000
ROA not before: Fri 02 Oct 2026 06:01:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394192
IP address blocks: 185.31.19.0/24 maxlen: 24
2a04:4e41:18::/48 maxlen: 48
2a04:4e41:1c::/48 maxlen: 48
2a04:4e41:24::/48 maxlen: 48
2a04:4e41:30::/48 maxlen: 48
2a04:4e41:34::/48 maxlen: 48
2a04:4e41:38::/48 maxlen: 48
2a04:4e41:44::/48 maxlen: 48
2a04:4e41:4c::/48 maxlen: 48
2a04:4e41:50::/48 maxlen: 48
2a04:4e41:64::/48 maxlen: 48
2a04:4e41:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:34:24:2c:a7:85:67:e1:89:db:61:c7:1b:3d:6a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Oct 2 06:01:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63ef304920b6ab004dae3cff93a47fba7a29421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:5d:df:cd:be:56:c7:4b:88:b1:f9:85:ac:
68:10:34:8a:09:b3:d2:12:3e:25:51:b5:a2:b2:c2:
98:ab:c4:fc:36:5e:5d:7d:6e:41:48:6c:0b:19:4d:
62:10:4d:03:29:4d:8c:4a:1f:8e:34:77:d4:67:f0:
eb:9a:d1:4a:c8:44:27:c3:d9:67:70:26:21:6f:a6:
a3:5e:41:0d:68:ef:6d:61:e1:e4:34:c6:a4:4b:d9:
34:b6:88:a7:e2:e7:e4:66:26:e1:f0:fb:5d:c2:1a:
67:67:6a:dc:80:10:d2:32:76:20:08:b7:c8:22:b0:
8e:43:5c:df:69:0f:8a:c3:0e:75:43:7c:5f:5d:de:
e8:96:e0:fc:ca:dc:9b:fc:64:38:a3:2a:81:cd:9b:
d3:e1:fb:58:e7:55:da:ce:d8:34:db:2f:46:61:4e:
49:5b:ed:20:22:d4:6d:11:22:9f:c4:b4:7f:c0:ab:
c7:9a:53:7a:e4:cf:5b:3f:44:2e:f4:ad:3c:d3:58:
51:b2:4b:5c:5a:0a:c3:39:12:22:6f:cb:bc:5c:32:
9b:1b:fe:8d:56:f8:01:21:74:5b:71:b1:4f:09:02:
2f:72:d6:ce:9e:7f:83:3d:13:29:9d:11:01:9b:f1:
55:2e:98:e9:f7:b0:e9:15:de:f8:22:e6:10:df:ff:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:30:49:20:B6:AB:00:4D:AE:3C:FF:93:A4:7F:BA:7A:29:42:1D
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Y-8wSSC2qwBNrjz_k6R_unopQh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.19.0/24
IPv6:
2a04:4e41:18::/48
2a04:4e41:1c::/48
2a04:4e41:24::/48
2a04:4e41:30::/48
2a04:4e41:34::/48
2a04:4e41:38::/48
2a04:4e41:44::/48
2a04:4e41:4c::/48
2a04:4e41:50::/48
2a04:4e41:64::/48
2a04:4e41:90::/48
Signature Algorithm: sha256WithRSAEncryption
9b:44:c9:29:27:90:28:6d:67:19:e6:c9:cb:8a:05:11:c5:0f:
62:a0:8c:de:f6:de:4d:1c:cd:9c:b9:27:a6:21:6d:be:23:0f:
84:9b:82:5f:78:9d:53:37:00:01:ec:31:c7:8b:f8:01:b4:f8:
06:f3:a4:fd:2d:d4:4a:88:b6:a7:bd:a7:68:17:8f:02:b1:9e:
9a:09:d3:08:58:3a:47:34:0b:b4:b6:0a:ee:bd:69:45:b4:50:
87:b2:94:a9:e1:73:2b:d5:a0:5c:e0:92:7b:56:f6:e8:81:82:
e7:40:cb:2e:8e:bf:30:78:77:df:06:dc:fd:11:b7:31:5e:6b:
b5:06:77:49:01:01:00:3a:1d:bd:a9:c4:f7:ba:3d:67:45:d4:
16:29:e2:da:f4:50:2e:51:13:48:79:ae:6f:e5:ca:56:fa:c7:
28:1d:ea:68:f1:39:2d:96:26:e9:29:c1:85:fb:97:74:f7:74:
f4:6a:32:74:74:dc:5c:d4:2a:34:18:27:58:47:a0:e4:bf:4a:
41:29:b2:3d:32:7b:db:23:54:a3:db:f5:c5:dc:3c:aa:7c:03:
ef:f8:02:2b:06:13:fd:87:27:94:9a:2e:b5:48:cd:b3:1a:7b:
27:16:c2:c7:06:32:01:6d:4a:94:b1:2e:5f:3c:1f:7b:bd:31:
e0:fb:5a:dc
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISAaD7NCQsp4Vn4YnbYccbPWqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWRlZDBiODNmYTRlMzFjZTBhMDg0MGViNDI5YmE4YTlm
MThlMzkwHhcNMjYxMDAyMDYwMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2VmMzA0OTIwYjZhYjAwNGRhZTNjZmY5M2E0N2ZiYTdhMjk0MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliBd382+VsdLiLH5haxoEDSKCbPS
Ej4lUbWissKYq8T8Nl5dfW5BSGwLGU1iEE0DKU2MSh+ONHfUZ/DrmtFKyEQnw9ln
cCYhb6ajXkENaO9tYeHkNMakS9k0toin4ufkZibh8PtdwhpnZ2rcgBDSMnYgCLfI
IrCOQ1zfaQ+Kww51Q3xfXd7oluD8ytyb/GQ4oyqBzZvT4ftY51Xaztg02y9GYU5J
W+0gItRtESKfxLR/wKvHmlN65M9bP0Qu9K0801hRsktcWgrDORIib8u8XDKbG/6N
VvgBIXRbcbFPCQIvctbOnn+DPRMpnREBm/FVLpjp97DpFd74IuYQ3/+w7wIDAQAB
o4ICdTCCAnEwHQYDVR0OBBYEFGPvMEkgtqsATa48/5Okf7p6KUIdMB8GA1UdIwQY
MBaAFI6t7QuD+k4xzgoIQOtCm6ip8Y45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUt
ODc3ZGRhMTkyMzc5LzEvWS04d1NTQzJxd0JOcmp6X2s2Ul91bm9wUWgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUtODc3ZGRhMTkyMzc5
LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwDAQCAAEwBgMEALkfEzBp
BAIAAjBjAwcAKgROQQAYAwcAKgROQQAcAwcAKgROQQAkAwcAKgROQQAwAwcAKgRO
QQA0AwcAKgROQQA4AwcAKgROQQBEAwcAKgROQQBMAwcAKgROQQBQAwcAKgROQQBk
AwcAKgROQQCQMA0GCSqGSIb3DQEBCwUAA4IBAQCbRMkpJ5AobWcZ5snLigURxQ9i
oIze9t5NHM2cuSemIW2+Iw+Em4JfeJ1TNwAB7DHHi/gBtPgG86T9LdRKiLanvado
F48CsZ6aCdMIWDpHNAu0tgruvWlFtFCHspSp4XMr1aBc4JJ7VvbogYLnQMsujr8w
eHffBtz9EbcxXmu1BndJAQEAOh29qcT3uj1nRdQWKeLa9FAuURNIea5v5cpW+sco
Hepo8TktlibpKcGF+5d093T0ajJ0dNxc1Co0GCdYR6Dkv0pBKbI9MnvbI1Sj2/XF
3DyqfAPv+AIrBhP9hyeUmi61SM2zGnsnFsLHBjIBbUqUsS5fPB97vTHg+1rc
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:59:13 2026 by rpki-client