Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa
File: yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa (raw, json)
Hash identifier: 0urLdAxAXMiQAjxSg9VTaO6Zv/VpbeFMPkfaHibD4No=
Subject key identifier: C9:12:5B:11:3E:BE:EC:52:D3:6B:68:4F:4B:1D:C2:2E:07:FB:1A:7D
Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial: 019A7890A8562A443B399F8A6CBF8170B70B
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa
Signing time: Wed 12 Nov 2025 14:55:37 +0000
ROA not before: Wed 12 Nov 2025 14:55:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.236.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:78:90:a8:56:2a:44:3b:39:9f:8a:6c:bf:81:70:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Validity
Not Before: Nov 12 14:55:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9125b113ebeec52d36b684f4b1dc22e07fb1a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:64:1a:e8:ca:34:a8:ac:61:e4:86:47:8e:
aa:db:07:f6:7a:e2:22:a5:8f:e7:ba:2c:09:06:3f:
52:3d:2a:84:4f:d6:9f:40:7c:56:95:09:7a:23:58:
79:7b:7f:4e:34:c4:6a:b7:c5:c5:c1:f7:c9:68:d7:
4a:07:1b:0a:64:b3:40:db:72:0c:41:2f:21:0a:db:
a5:8f:a3:de:b8:69:3f:97:37:5c:4d:b2:6e:53:37:
49:d1:27:94:2d:e5:ff:53:39:a4:5e:52:ca:02:66:
e0:9c:90:50:dd:2a:1c:bf:cb:5f:fe:a0:52:84:c7:
05:2a:7a:57:f5:ed:f6:40:dc:83:43:d8:14:60:36:
e8:d4:8c:5d:4d:53:a6:6d:e8:1c:ce:28:35:cd:7d:
5f:cd:19:1b:9e:d2:22:bc:f1:90:06:47:84:e2:01:
ce:06:9a:92:12:7c:5a:74:03:37:55:79:72:03:9c:
25:79:38:14:bf:0c:3d:b5:60:fa:ad:ce:11:cc:77:
85:50:11:c2:72:25:dc:a7:d5:62:b9:1d:00:3a:81:
04:1f:6f:ba:46:6d:2a:e7:c0:7e:0e:d3:4e:fa:f9:
dc:8b:71:3b:d0:71:59:db:51:63:b4:13:21:57:cb:
19:ee:20:6b:ed:61:25:7e:c8:32:bf:85:45:be:71:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:5B:11:3E:BE:EC:52:D3:6B:68:4F:4B:1D:C2:2E:07:FB:1A:7D
X509v3 Authority Key Identifier:
keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.136.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:1b:1f:08:53:fd:9d:a5:e8:79:d3:53:2b:44:47:dc:5c:46:
a3:8b:92:b7:11:57:75:e7:b1:54:67:48:86:5b:42:1c:ac:a0:
cf:c7:b6:69:8f:f4:1a:41:1f:14:b9:8f:a7:a5:87:ba:f0:7d:
33:ba:fa:61:62:b3:3d:fb:b9:c4:ec:7a:a1:c6:1d:e4:d2:f1:
63:d4:31:33:19:e9:a8:29:6f:ce:32:bd:40:c7:b0:ec:09:cf:
79:4f:12:70:f0:00:f7:7e:38:4f:6c:5c:39:ba:1f:02:38:2c:
b0:b5:75:69:b5:e4:7e:64:57:e9:29:80:0f:da:41:10:dd:b4:
c2:4c:19:dc:3f:e7:ab:04:5b:49:ea:c9:f2:bd:8b:77:cf:53:
b5:dc:f2:6c:4b:6f:39:b7:1c:cd:06:4d:86:98:15:a8:17:b0:
4a:03:18:ba:f0:75:33:2a:c0:41:e4:dc:91:39:d6:fc:23:ea:
34:c1:b3:3e:e4:98:82:9c:59:89:47:6b:9c:9e:00:1a:7b:c1:
a4:c6:4c:70:f9:82:7b:c4:fa:3d:a7:4b:7d:58:e6:bf:ab:04:
82:61:bd:ca:c0:29:43:fd:f2:47:fd:bb:02:ee:12:eb:9e:12:
5b:cd:12:8a:af:2f:d7:bb:8e:0d:63:66:ca:e2:65:c9:b4:c7:
c6:24:c8:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZp4kKhWKkQ7OZ+KbL+BcLcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl
MDg1ZjUwHhcNMjUxMTEyMTQ1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTEyNWIxMTNlYmVlYzUyZDM2YjY4NGY0YjFkYzIyZTA3ZmIxYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxilkGujKNKisYeSGR46q2wf2euIi
pY/nuiwJBj9SPSqET9afQHxWlQl6I1h5e39ONMRqt8XFwffJaNdKBxsKZLNA23IM
QS8hCtulj6PeuGk/lzdcTbJuUzdJ0SeULeX/UzmkXlLKAmbgnJBQ3Socv8tf/qBS
hMcFKnpX9e32QNyDQ9gUYDbo1IxdTVOmbegczig1zX1fzRkbntIivPGQBkeE4gHO
BpqSEnxadAM3VXlyA5wleTgUvww9tWD6rc4RzHeFUBHCciXcp9ViuR0AOoEEH2+6
Rm0q58B+DtNO+vnci3E70HFZ21FjtBMhV8sZ7iBr7WElfsgyv4VFvnGb3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkSWxE+vuxS02toT0sdwi4H+xp9MB8GA1UdIwQY
MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt
MTQxZDMzYzc0M2RmLzEveVJKYkVUNi03RkxUYTJoUFN4M0NMZ2Y3R24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm
LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVeyIMA0G
CSqGSIb3DQEBCwUAA4IBAQA8Gx8IU/2dpeh501MrREfcXEaji5K3EVd157FUZ0iG
W0IcrKDPx7Zpj/QaQR8UuY+npYe68H0zuvphYrM9+7nE7Hqhxh3k0vFj1DEzGemo
KW/OMr1Ax7DsCc95TxJw8AD3fjhPbFw5uh8COCywtXVpteR+ZFfpKYAP2kEQ3bTC
TBncP+erBFtJ6snyvYt3z1O13PJsS285txzNBk2GmBWoF7BKAxi68HUzKsBB5NyR
Odb8I+o0wbM+5JiCnFmJR2ucngAae8Gkxkxw+YJ7xPo9p0t9WOa/qwSCYb3KwClD
/fJH/bsC7hLrnhJbzRKKry/Xu44NY2bK4mXJtMfGJMj6
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:45:27 2025 by rpki-client