Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/yiz6-WJRMbXF2zq6ByEESyDPw_4.roa
File: yiz6-WJRMbXF2zq6ByEESyDPw_4.roa (raw, json)
Hash identifier: uCYjSVJo64GsUsNv+KsUIAxJzB3GxkrbRLoeM/2TXsk=
Subject key identifier: CA:2C:FA:F9:62:51:31:B5:C5:DB:3A:BA:07:21:04:4B:20:CF:C3:FE
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1C756CC30C0B8F6DFA84CC9B7886D508D
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/yiz6-WJRMbXF2zq6ByEESyDPw_4.roa
Signing time: Tue 10 Nov 2026 21:21:56 +0000
ROA not before: Tue 10 Nov 2026 21:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 187.54.15.0/24 maxlen: 24
187.55.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:56:cc:30:c0:b8:f6:df:a8:4c:c9:b7:88:6d:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Nov 10 21:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca2cfaf9625131b5c5db3aba0721044b20cfc3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:42:64:de:e9:39:34:f2:18:a0:03:a3:cf:
0c:4a:28:22:55:20:a8:59:bc:d6:02:60:c2:fe:85:
a1:17:db:17:ca:63:09:3e:90:4b:af:62:8e:64:fe:
2e:11:26:39:96:64:97:f5:8b:ec:fd:4a:13:fa:70:
99:a2:30:11:3a:dd:7c:1b:10:e9:0b:db:14:a5:4e:
80:c1:83:49:72:c0:e1:f3:d3:e2:54:ed:7f:56:b0:
a9:ab:7b:28:61:67:60:7e:8b:f6:54:f9:ac:79:8b:
5c:b1:d0:e1:31:c5:f5:bc:77:46:18:12:15:39:1d:
cd:a6:d1:3f:63:d2:63:53:1d:8e:56:23:a9:af:36:
cb:e8:43:b9:a7:91:25:57:a0:b9:94:8e:94:96:99:
11:e2:30:fa:71:00:c7:41:b7:71:26:5c:01:65:85:
29:5e:8c:e6:1c:63:33:b3:bc:15:01:38:8c:03:c0:
ef:85:82:17:96:25:86:a5:ed:cb:d2:d0:91:d4:54:
32:85:a4:93:94:1a:3e:94:85:f9:8c:3e:7b:02:6c:
a0:52:c1:64:04:15:81:10:2a:84:f6:65:ed:f2:d0:
60:f0:cb:a4:ab:f1:e0:3e:95:23:ad:8f:6e:0d:ec:
b0:0d:0b:79:46:f4:91:e8:64:c6:af:0a:77:73:02:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:FA:F9:62:51:31:B5:C5:DB:3A:BA:07:21:04:4B:20:CF:C3:FE
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/yiz6-WJRMbXF2zq6ByEESyDPw_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.54.15.0/24
187.55.164.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:84:6e:4a:7a:f7:42:12:f2:87:ad:68:d1:b0:9f:d8:68:
2d:4b:8b:df:cb:b5:63:29:9a:4d:10:5b:12:8e:c1:46:a7:60:
04:c6:a4:5c:f6:3e:04:97:0e:7a:eb:9d:0e:00:10:7c:14:ad:
c4:8f:3b:58:84:5e:54:1f:ea:8a:9d:b8:f3:f5:23:30:3f:6d:
be:5c:31:88:7f:05:1d:26:fb:0f:2e:b9:e8:2e:78:eb:31:f3:
37:8b:f2:4e:f1:4d:f5:58:cb:f6:d7:a3:ad:39:e1:00:0b:df:
9d:6a:05:08:0a:96:3e:74:25:17:2a:17:f0:08:5a:cf:91:ad:
34:5c:74:5e:af:be:e3:13:56:e4:47:fd:be:51:01:ae:3f:45:
09:c9:fb:37:90:28:1d:33:b1:ed:97:db:da:e2:49:af:bd:b2:
d9:81:86:23:d3:ce:07:76:16:34:de:ef:a5:53:e0:81:ea:03:
81:6b:23:4e:3d:b1:2d:8b:b2:f6:e4:be:87:96:43:1d:8f:b7:
b2:ea:2a:b7:d1:84:0e:1e:0a:b2:9e:45:59:e0:e1:76:17:09:
53:51:b5:c9:91:bd:65:c1:73:db:ad:62:40:f1:ca:7c:c4:ff:
98:13:df:16:fc:5f:99:75:45:ed:7a:63:ad:ae:5c:84:74:5d:
c0:d4:5e:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHHVswwwLj236hMybeIbVCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYxMTEwMjEyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTJjZmFmOTYyNTEzMWI1YzVkYjNhYmEwNzIxMDQ0YjIwY2ZjM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38dCZN7pOTTyGKADo88MSigiVSCo
WbzWAmDC/oWhF9sXymMJPpBLr2KOZP4uESY5lmSX9Yvs/UoT+nCZojAROt18GxDp
C9sUpU6AwYNJcsDh89PiVO1/VrCpq3soYWdgfov2VPmseYtcsdDhMcX1vHdGGBIV
OR3NptE/Y9JjUx2OViOprzbL6EO5p5ElV6C5lI6UlpkR4jD6cQDHQbdxJlwBZYUp
XozmHGMzs7wVATiMA8DvhYIXliWGpe3L0tCR1FQyhaSTlBo+lIX5jD57AmygUsFk
BBWBECqE9mXt8tBg8Mukq/HgPpUjrY9uDeywDQt5RvSR6GTGrwp3cwImxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMos+vliUTG1xds6ugchBEsgz8P+MB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEveWl6Ni1XSlJNYlhGMnpxNkJ5RUVTeURQd180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuzYPAwQA
uzekMA0GCSqGSIb3DQEBCwUAA4IBAQBCkIRuSnr3QhLyh61o0bCf2GgtS4vfy7Vj
KZpNEFsSjsFGp2AExqRc9j4Elw56650OABB8FK3EjztYhF5UH+qKnbjz9SMwP22+
XDGIfwUdJvsPLrnoLnjrMfM3i/JO8U31WMv216OtOeEAC9+dagUICpY+dCUXKhfw
CFrPka00XHRer77jE1bkR/2+UQGuP0UJyfs3kCgdM7Htl9va4kmvvbLZgYYj084H
dhY03u+lU+CB6gOBayNOPbEti7L25L6HlkMdj7ey6iq30YQOHgqynkVZ4OF2FwlT
UbXJkb1lwXPbrWJA8cp8xP+YE98W/F+ZdUXtemOtrlyEdF3A1F6/
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:36 2026 by rpki-client