Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/yWSxVMHaA7K49CJJasfPgxf0K9U.roa
File: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (raw, json)
Hash identifier: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=
Subject key identifier: C9:64:B1:54:C1:DA:03:B2:B8:F4:22:49:6A:C7:CF:83:17:F4:2B:D5
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 019F2368C77E00C098C630B400F168C2FCD6
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/yWSxVMHaA7K49CJJasfPgxf0K9U.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8455
IP address blocks: 217.194.18.0/24 maxlen: 24
217.194.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:7e:00:c0:98:c6:30:b4:00:f1:68:c2:fc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c964b154c1da03b2b8f422496ac7cf8317f42bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:90:c3:7e:cb:d6:ba:f0:48:26:30:1f:87:
6c:ca:8c:c3:1f:90:b8:98:fc:b2:77:69:7e:f7:77:
70:87:1f:cb:91:95:f7:ef:8e:31:70:88:36:77:47:
e4:4c:8a:34:15:43:a1:fe:84:d0:15:9f:a0:4a:04:
2f:0b:65:56:ca:fc:e1:b7:7b:fa:74:4c:1c:7e:7b:
a9:4a:ae:24:f9:95:ef:75:d0:dc:1b:96:30:1c:11:
cc:ee:a2:c2:fc:76:f2:1f:94:8b:e0:56:f8:35:ab:
fe:82:07:3a:b3:59:ad:38:53:88:a7:b2:9d:d6:0b:
16:cc:06:c0:3e:c1:33:c4:b5:0a:da:16:b8:6c:a7:
8e:c9:4e:32:90:38:b7:02:4d:7b:3e:a2:8e:66:2e:
4d:ee:29:76:58:6b:65:dc:e7:2e:5e:7a:2c:26:48:
6c:d4:95:59:bb:df:48:9c:5a:70:2c:13:8a:7b:f9:
1b:35:26:29:dc:7a:35:dd:b9:23:8e:b5:98:45:61:
4c:b9:38:72:7c:ba:4f:81:29:90:30:31:be:d4:07:
b0:6e:2a:56:35:05:d4:0f:45:50:77:0b:a3:66:37:
12:b8:59:63:b6:2e:f5:70:f6:8b:c7:b6:c6:2f:86:
84:64:f7:9b:93:a8:3a:d7:fe:c7:4a:79:cd:df:40:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:B1:54:C1:DA:03:B2:B8:F4:22:49:6A:C7:CF:83:17:F4:2B:D5
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/yWSxVMHaA7K49CJJasfPgxf0K9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.18.0/24
217.194.21.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d3:88:ae:04:70:82:12:77:9b:05:f8:fa:e1:c5:2d:66:4c:
57:54:9b:d8:2a:db:72:a0:00:c3:a9:0f:2c:87:a8:a2:9c:11:
83:45:be:29:02:20:9e:72:4a:51:d7:a9:06:ae:91:a9:6d:9c:
7c:e1:23:b3:39:a2:6f:50:49:89:33:d5:45:1c:3d:89:2c:c2:
5f:f4:12:16:44:53:19:07:76:cb:26:b0:ac:11:ad:92:8a:96:
1e:df:c3:f8:67:47:8f:00:3b:09:c7:6e:f8:52:07:fa:42:d5:
4d:c5:5c:c9:45:c8:c6:b4:2f:d3:5c:39:eb:5c:4e:9c:2b:a4:
99:d4:c9:f0:98:d9:84:b0:0d:44:70:9b:fc:33:b5:74:a5:a7:
58:fe:5d:52:07:bf:e1:9d:9a:62:21:66:d9:15:f2:2c:3b:74:
f0:b0:06:55:ae:09:d2:69:2b:3d:13:e4:a1:d7:a5:76:50:c4:
f5:77:9c:ec:0b:d8:11:2b:8c:51:cc:f4:55:c4:34:1b:ea:ab:
ea:ff:f5:9c:a3:34:c5:07:0f:5a:c0:89:b0:d3:38:6e:e8:28:
51:5d:bf:92:5e:e7:ec:62:fd:d2:86:3b:6d:a7:d2:ac:fa:c2:
ff:47:6e:54:8f:61:7f:2b:99:5d:8d:af:0d:c0:22:10:44:ea:
f9:7a:08:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaMd+AMCYxjC0APFowvzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYWI5ZTkyZmRkODFmNDE0MTQ3OTc5ZDA1MzFlMjZkZWRk
MjYyYWMwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTY0YjE1NGMxZGEwM2IyYjhmNDIyNDk2YWM3Y2Y4MzE3ZjQyYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1mQw37L1rrwSCYwH4dsyozDH5C4
mPyyd2l+93dwhx/LkZX3744xcIg2d0fkTIo0FUOh/oTQFZ+gSgQvC2VWyvzht3v6
dEwcfnupSq4k+ZXvddDcG5YwHBHM7qLC/HbyH5SL4Fb4Nav+ggc6s1mtOFOIp7Kd
1gsWzAbAPsEzxLUK2ha4bKeOyU4ykDi3Ak17PqKOZi5N7il2WGtl3OcuXnosJkhs
1JVZu99InFpwLBOKe/kbNSYp3Ho13bkjjrWYRWFMuThyfLpPgSmQMDG+1AewbipW
NQXUD0VQdwujZjcSuFljti71cPaLx7bGL4aEZPebk6g61/7HSnnN30Cg3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMlksVTB2gOyuPQiSWrHz4MX9CvVMB8GA1UdIwQY
MBaAFF6rnpL92B9BQUeXnQUx4m3t0mKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHF1ZWt2M1lIMEZCUjVlZEJUSGliZTNTWXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEveVdTeFZNSGFBN0s0OUNKSmFzZlBneGYwSzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEvWHF1ZWt2M1lIMEZCUjVlZEJUSGliZTNTWXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2cISAwQA
2cIVMA0GCSqGSIb3DQEBCwUAA4IBAQBB04iuBHCCEnebBfj64cUtZkxXVJvYKtty
oADDqQ8sh6iinBGDRb4pAiCeckpR16kGrpGpbZx84SOzOaJvUEmJM9VFHD2JLMJf
9BIWRFMZB3bLJrCsEa2SipYe38P4Z0ePADsJx274Ugf6QtVNxVzJRcjGtC/TXDnr
XE6cK6SZ1MnwmNmEsA1EcJv8M7V0padY/l1SB7/hnZpiIWbZFfIsO3TwsAZVrgnS
aSs9E+Sh16V2UMT1d5zsC9gRK4xRzPRVxDQb6qvq//WcozTFBw9awImw0zhu6ChR
Xb+SXufsYv3Shjttp9Ks+sL/R25Uj2F/K5ldja8NwCIQROr5egi0
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:20 2026 by rpki-client