Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YTLW0ambwBvJfDAUD0jP3m8MPw0.roa
File: YTLW0ambwBvJfDAUD0jP3m8MPw0.roa (raw, json)
Hash identifier: rR86Cr6a+NTRnqh5NqS7elDauzUJOHv68lwNNP9/030=
Subject key identifier: 61:32:D6:D1:A9:9B:C0:1B:C9:7C:30:14:0F:48:CF:DE:6F:0C:3F:0D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F312B390C56E4C788A5E6BFDFF02D16AE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YTLW0ambwBvJfDAUD0jP3m8MPw0.roa
Signing time: Sun 05 Jul 2026 07:25:44 +0000
ROA not before: Sun 05 Jul 2026 07:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 191.217.167.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:2b:39:0c:56:e4:c7:88:a5:e6:bf:df:f0:2d:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 07:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6132d6d1a99bc01bc97c30140f48cfde6f0c3f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:ef:17:ff:15:6b:a3:cd:1c:0b:63:d1:01:
7b:71:6f:6f:cb:e0:00:68:8f:e7:fc:2c:72:23:1d:
ca:3c:e9:89:85:ee:8f:c1:88:1e:34:6f:07:5f:97:
74:6d:58:cc:40:b7:32:57:87:27:47:1a:ea:22:9b:
3f:13:99:d5:71:30:27:e5:7f:fc:8b:5e:93:6e:a6:
7a:a4:4a:54:aa:cd:f1:da:4c:5f:85:d6:8e:7e:7f:
44:33:d2:1d:cd:b7:ba:ca:d4:2d:7b:81:bb:43:c2:
51:57:b8:28:e1:da:c4:7c:ab:ce:56:d9:b0:60:90:
bf:0c:10:c1:65:f7:a4:e3:58:83:2a:20:35:20:24:
d2:c5:c9:62:26:b9:e7:08:60:3e:46:33:0e:65:28:
d0:17:01:61:fc:a7:2d:18:43:7c:fd:2f:ce:9f:97:
43:4c:d4:c1:2d:8d:09:9d:4c:e4:9c:ac:3b:57:d6:
fc:86:60:34:e9:2a:62:4c:7c:75:d1:1c:bd:47:af:
66:50:46:19:b0:1c:f2:c4:52:a0:df:0f:60:06:27:
b0:77:a4:4b:9c:50:98:d8:c4:d0:00:45:7a:23:ce:
a8:d9:13:02:a4:c8:00:73:30:c7:a8:89:ec:d4:c6:
56:12:66:98:a1:3e:4c:28:70:05:52:ed:6f:1e:72:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:D6:D1:A9:9B:C0:1B:C9:7C:30:14:0F:48:CF:DE:6F:0C:3F:0D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YTLW0ambwBvJfDAUD0jP3m8MPw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.167.0/24
191.217.172.0/24
200.181.86.0/24
201.11.225.0/24
201.11.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cf:63:f9:30:2c:60:dc:03:a5:3a:ea:64:b9:b6:e4:44:d4:
2c:29:d4:0b:dd:58:4d:d7:16:f6:76:8d:fa:ba:ea:f2:5a:cb:
32:9c:38:f3:0d:aa:1b:01:c8:20:56:9f:0e:79:38:03:a9:19:
e7:ec:1f:b4:92:f9:77:08:06:0b:23:09:01:0a:5d:8b:21:2d:
69:96:9e:cc:82:08:41:b6:f2:3d:07:c1:bb:ec:d0:34:89:fe:
da:d1:6c:86:eb:1a:10:99:f5:ef:1b:4e:b4:46:e8:30:98:1b:
62:f2:bd:7f:ca:ba:be:aa:9e:be:38:68:97:a4:56:81:4b:b3:
e1:bc:58:d1:bf:3e:87:92:9d:c1:4d:f3:a0:57:ac:ed:72:e3:
16:2d:2f:83:d0:fc:ef:65:73:c4:91:77:45:e8:aa:96:7a:e8:
83:45:81:c0:ea:7c:9e:aa:13:fc:c0:87:d0:56:22:73:62:15:
74:94:bc:38:ee:3f:e5:63:a6:d5:de:0d:13:99:1c:46:9f:68:
4a:57:a2:12:a8:b3:2a:59:12:23:75:6a:d3:f5:7a:2c:cd:96:
a9:1c:99:ac:c5:3f:e7:29:e8:b2:6d:38:8e:75:e1:d1:70:f2:
cc:19:b3:14:91:6b:69:78:d3:0f:12:81:f0:af:0f:16:d0:bf:
24:0f:d7:3d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8xKzkMVuTHiKXmv9/wLRauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzA1MDcyNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTMyZDZkMWE5OWJjMDFiYzk3YzMwMTQwZjQ4Y2ZkZTZmMGMzZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjnvF/8Va6PNHAtj0QF7cW9vy+AA
aI/n/CxyIx3KPOmJhe6PwYgeNG8HX5d0bVjMQLcyV4cnRxrqIps/E5nVcTAn5X/8
i16TbqZ6pEpUqs3x2kxfhdaOfn9EM9Idzbe6ytQte4G7Q8JRV7go4drEfKvOVtmw
YJC/DBDBZfek41iDKiA1ICTSxcliJrnnCGA+RjMOZSjQFwFh/KctGEN8/S/On5dD
TNTBLY0JnUzknKw7V9b8hmA06SpiTHx10Ry9R69mUEYZsBzyxFKg3w9gBiewd6RL
nFCY2MTQAEV6I86o2RMCpMgAczDHqIns1MZWEmaYoT5MKHAFUu1vHnIjJQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGEy1tGpm8AbyXwwFA9Iz95vDD8NMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWVRMVzBhbWJ3QnZKZkRBVUQwalAzbThNUHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAv9mnAwQA
v9msAwQAyLVWAwQAyQvhAwQAyQvnMA0GCSqGSIb3DQEBCwUAA4IBAQBsz2P5MCxg
3AOlOupkubbkRNQsKdQL3VhN1xb2do36uuryWssynDjzDaobAcggVp8OeTgDqRnn
7B+0kvl3CAYLIwkBCl2LIS1plp7MgghBtvI9B8G77NA0if7a0WyG6xoQmfXvG060
RugwmBti8r1/yrq+qp6+OGiXpFaBS7PhvFjRvz6Hkp3BTfOgV6ztcuMWLS+D0Pzv
ZXPEkXdF6KqWeuiDRYHA6nyeqhP8wIfQViJzYhV0lLw47j/lY6bV3g0TmRxGn2hK
V6ISqLMqWRIjdWrT9XoszZapHJmsxT/nKeiybTiOdeHRcPLMGbMUkWtpeNMPEoHw
rw8W0L8kD9c9
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:40 2026 by rpki-client