Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/Yi_rAwC_OsZoU1r6Bjpi8jpkknY.roa
File: Yi_rAwC_OsZoU1r6Bjpi8jpkknY.roa (raw, json)
Hash identifier: EpKDeL1gYQOjPzo30y9hGttLKm52dWKCuXxmNqbHjNw=
Subject key identifier: 62:2F:EB:03:00:BF:3A:C6:68:53:5A:FA:06:3A:62:F2:3A:64:92:76
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 01A1CEFBA42054D9A3138ABB07E487ECCFCE
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/Yi_rAwC_OsZoU1r6Bjpi8jpkknY.roa
Signing time: Thu 12 Nov 2026 08:59:20 +0000
ROA not before: Thu 12 Nov 2026 08:59:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218107
IP address blocks: 84.252.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:fb:a4:20:54:d9:a3:13:8a:bb:07:e4:87:ec:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Nov 12 08:59:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=622feb0300bf3ac668535afa063a62f23a649276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:13:94:07:5d:be:32:2d:0d:63:ee:fb:64:
31:43:ae:e5:ec:98:a1:b0:8b:84:39:a0:77:d9:61:
53:2f:e6:b6:27:63:70:1f:a7:fd:19:b3:4c:e6:23:
0c:db:5f:53:d0:c4:8f:81:bb:29:c9:0b:4b:da:58:
a1:ba:32:00:a0:e4:c4:71:8a:30:d9:18:e0:04:15:
8a:52:2b:aa:bf:6f:7b:47:c7:0c:90:22:c2:f6:4d:
7f:b3:ee:ba:91:d8:35:f0:03:48:07:8e:df:8e:4d:
ad:7d:b0:ec:a2:f0:e2:7a:8a:af:9d:55:8a:1e:33:
76:06:cb:69:88:11:59:f2:3c:90:0b:14:5d:bf:aa:
1f:9a:4d:fb:76:e3:23:72:55:eb:c9:04:5d:5c:3d:
8d:0a:4f:17:d8:23:ef:c7:1e:be:4c:bb:85:07:0e:
a7:bf:1f:31:de:ba:b2:92:74:02:93:d4:46:68:6e:
c7:2f:58:08:ca:17:4f:e6:e0:0f:b5:4e:0d:a8:d8:
7b:1e:fe:97:da:a4:d0:1d:7e:94:3f:b0:d9:6f:2e:
29:28:95:b6:c0:b0:38:2a:27:33:34:b7:6f:3a:a5:
ea:69:76:a5:1b:02:40:4b:36:5b:37:13:b6:89:99:
98:2a:22:bd:54:f5:54:b7:8d:e7:eb:48:4a:10:88:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:EB:03:00:BF:3A:C6:68:53:5A:FA:06:3A:62:F2:3A:64:92:76
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/Yi_rAwC_OsZoU1r6Bjpi8jpkknY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.83.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f3:2d:7a:77:08:31:35:38:99:32:7c:9d:29:95:b8:94:5f:
67:b6:48:54:17:ae:1a:a1:87:20:0e:76:21:cf:84:1a:cc:01:
a6:ca:97:c1:f4:e4:f9:40:71:4a:e6:ee:53:00:1d:21:55:14:
f1:7a:94:2d:c4:83:4e:66:bd:70:9f:ee:16:1c:db:39:04:4e:
4c:2f:9b:68:c4:1c:30:c3:f1:5a:90:6f:f4:3a:52:1c:a5:ee:
05:6e:db:62:a6:96:8d:c0:83:c7:54:5e:ef:13:ae:07:ad:8e:
4d:89:4f:49:3a:b3:fb:7e:e4:0a:f7:73:2b:76:40:df:b2:eb:
e4:3d:d6:30:0d:ca:52:07:ab:e3:41:1b:f4:ad:40:f8:c0:be:
1d:70:8e:75:5b:8b:88:7e:6c:be:5b:31:56:e1:81:3b:d5:4d:
ad:bc:94:38:1b:11:5e:ea:f5:b9:ae:c2:25:76:56:89:38:e9:
08:b6:65:6a:55:34:a9:db:fe:17:7b:71:c4:d4:98:da:f3:fa:
64:ec:81:9a:00:12:74:c3:90:58:15:0b:06:01:87:05:8a:c3:
b0:1a:12:da:e2:13:e8:00:87:d1:83:b0:27:3d:57:b7:0a:5d:
d0:10:5b:ea:9f:91:ba:57:a0:57:45:7f:7c:69:fb:7a:5b:f5:
56:81:fd:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHO+6QgVNmjE4q7B+SH7M/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjYxMTEyMDg1OTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjJmZWIwMzAwYmYzYWM2Njg1MzVhZmEwNjNhNjJmMjNhNjQ5Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlUTlAddvjItDWPu+2QxQ67l7Jih
sIuEOaB32WFTL+a2J2NwH6f9GbNM5iMM219T0MSPgbspyQtL2lihujIAoOTEcYow
2RjgBBWKUiuqv297R8cMkCLC9k1/s+66kdg18ANIB47fjk2tfbDsovDieoqvnVWK
HjN2BstpiBFZ8jyQCxRdv6ofmk37duMjclXryQRdXD2NCk8X2CPvxx6+TLuFBw6n
vx8x3rqyknQCk9RGaG7HL1gIyhdP5uAPtU4NqNh7Hv6X2qTQHX6UP7DZby4pKJW2
wLA4KiczNLdvOqXqaXalGwJASzZbNxO2iZmYKiK9VPVUt43n60hKEIiLRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIv6wMAvzrGaFNa+gY6YvI6ZJJ2MB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvWWlfckF3Q19Pc1pvVTFyNkJqcGk4anBra25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPxTMA0G
CSqGSIb3DQEBCwUAA4IBAQBw8y16dwgxNTiZMnydKZW4lF9ntkhUF64aoYcgDnYh
z4QazAGmypfB9OT5QHFK5u5TAB0hVRTxepQtxINOZr1wn+4WHNs5BE5ML5toxBww
w/FakG/0OlIcpe4FbttippaNwIPHVF7vE64HrY5NiU9JOrP7fuQK93MrdkDfsuvk
PdYwDcpSB6vjQRv0rUD4wL4dcI51W4uIfmy+WzFW4YE71U2tvJQ4GxFe6vW5rsIl
dlaJOOkItmVqVTSp2/4Xe3HE1Jja8/pk7IGaABJ0w5BYFQsGAYcFisOwGhLa4hPo
AIfRg7AnPVe3Cl3QEFvqn5G6V6BXRX98aft6W/VWgf0A
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:07 2026 by rpki-client