Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa
File: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (raw, json)
Hash identifier: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=
Subject key identifier: 9D:89:43:0E:F8:4B:F5:92:A8:77:81:71:46:80:09:37:CC:05:3F:2F
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F236848D0BC27420D4D38F3952B8FA79F
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55701
IP address blocks: 86.110.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:48:d0:bc:27:42:0d:4d:38:f3:95:2b:8f:a7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d89430ef84bf592a877817146800937cc053f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:f9:7f:b9:44:28:99:ce:b1:88:a8:2a:e4:
4b:42:f5:30:77:15:1a:8b:df:2d:fa:56:eb:c3:01:
2d:26:ea:1f:f0:9d:24:1b:dd:d6:14:ad:a6:bf:c2:
20:07:5c:17:9b:e1:f2:4a:8d:53:fc:84:3c:47:64:
37:76:03:27:4a:a3:df:35:9f:f0:e4:8b:1f:3e:cb:
12:04:ed:50:fe:e9:df:19:72:0c:1d:3c:be:d0:44:
4b:42:dc:ec:e7:31:68:bf:59:74:e0:f8:07:7f:98:
9c:71:b2:2b:a8:85:7a:32:4b:f0:13:0a:96:c0:71:
52:de:25:3f:ec:8c:29:59:0e:4d:4f:c9:c6:f2:0b:
99:df:c0:a1:a2:00:3f:cd:d9:cd:66:5e:48:01:0b:
25:64:d0:2a:7b:59:c1:4c:21:5a:55:99:11:65:1e:
83:d5:42:c5:c5:07:68:25:b0:ae:b7:cf:06:7e:93:
ff:0c:d6:85:dd:04:a4:c9:d7:c9:64:d5:03:a9:c6:
2c:09:f7:67:7c:91:00:1d:b6:a4:35:f7:b4:75:42:
9c:86:aa:3f:0d:8a:62:85:79:d3:98:0d:1d:f6:29:
ca:3e:35:40:52:5a:f1:b3:0d:51:c7:ff:21:fd:b3:
f7:12:d1:03:46:c0:5a:e6:17:0b:c6:cb:96:cf:90:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:43:0E:F8:4B:F5:92:A8:77:81:71:46:80:09:37:CC:05:3F:2F
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:aa:d4:40:37:86:e8:ba:de:6f:c1:95:0f:77:a0:45:a8:32:
27:ba:81:d8:d7:03:ba:bd:88:95:ee:ac:cb:1a:b5:f2:20:61:
b3:f1:bd:ef:18:d9:0a:51:0c:e6:8c:16:e4:fd:41:19:eb:b0:
34:73:4d:df:b5:61:89:6c:58:6e:e8:ce:18:bc:98:a7:28:88:
34:05:a7:8d:d9:da:14:21:d9:ac:41:3d:fb:c4:91:29:24:3d:
d7:c8:28:34:09:9e:51:46:89:11:6b:20:c9:08:4b:91:13:35:
da:e4:fc:4b:a3:04:e0:45:d8:c5:c1:66:49:2a:c0:3a:57:5a:
13:4f:c9:37:24:ad:f7:11:c1:30:70:43:88:2b:d2:cc:ba:65:
94:69:dc:6d:dd:09:0f:b7:1e:9f:b2:5f:22:e2:f2:55:d1:00:
99:98:73:a8:ee:93:ae:e7:7e:9b:d2:b1:0b:fd:2f:cc:ac:c6:
ad:f6:bc:f4:4c:5b:75:75:1c:aa:d4:f3:a3:60:7e:91:f5:4c:
0f:b5:02:88:94:8a:ae:49:19:89:66:75:11:86:fe:c6:0b:a0:
46:20:36:a6:38:b1:54:56:31:8d:07:67:9d:38:f6:45:6b:2c:
72:13:8a:84:ef:db:71:22:b5:88:b3:7b:73:e6:19:ff:06:9d:
30:bc:1b:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaEjQvCdCDU0485Urj6efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3
NTgyYjAwHhcNMjYwNzAyMTUxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg5NDMwZWY4NGJmNTkyYTg3NzgxNzE0NjgwMDkzN2NjMDUzZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDn5f7lEKJnOsYioKuRLQvUwdxUa
i98t+lbrwwEtJuof8J0kG93WFK2mv8IgB1wXm+HySo1T/IQ8R2Q3dgMnSqPfNZ/w
5IsfPssSBO1Q/unfGXIMHTy+0ERLQtzs5zFov1l04PgHf5iccbIrqIV6MkvwEwqW
wHFS3iU/7IwpWQ5NT8nG8guZ38ChogA/zdnNZl5IAQslZNAqe1nBTCFaVZkRZR6D
1ULFxQdoJbCut88GfpP/DNaF3QSkydfJZNUDqcYsCfdnfJEAHbakNfe0dUKchqo/
DYpihXnTmA0d9inKPjVAUlrxsw1Rx/8h/bP3EtEDRsBa5hcLxsuWz5APlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2JQw74S/WSqHeBcUaACTfMBT8vMB8GA1UdIwQY
MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvbllsRER2aEw5WktvZDRGeFJvQUpOOHdGUHk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4lMA0G
CSqGSIb3DQEBCwUAA4IBAQBrqtRAN4bout5vwZUPd6BFqDInuoHY1wO6vYiV7qzL
GrXyIGGz8b3vGNkKUQzmjBbk/UEZ67A0c03ftWGJbFhu6M4YvJinKIg0BaeN2doU
IdmsQT37xJEpJD3XyCg0CZ5RRokRayDJCEuREzXa5PxLowTgRdjFwWZJKsA6V1oT
T8k3JK33EcEwcEOIK9LMumWUadxt3QkPtx6fsl8i4vJV0QCZmHOo7pOu536b0rEL
/S/MrMat9rz0TFt1dRyq1POjYH6R9UwPtQKIlIquSRmJZnURhv7GC6BGIDamOLFU
VjGNB2edOPZFayxyE4qE79txIrWIs3tz5hn/Bp0wvBvl
-----END CERTIFICATE-----
Generated at Sat Jul 4 07:18:57 2026 by rpki-client