Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/2YgTGECo6wn95QwxxdGFJBDZOyU.roa
File: 2YgTGECo6wn95QwxxdGFJBDZOyU.roa (raw, json)
Hash identifier: L/pDCvWOvisadnm1C86WQAXCfl9Dw5gAjvhv8njOm04=
Subject key identifier: D9:88:13:18:40:A8:EB:09:FD:E5:0C:31:C5:D1:85:24:10:D9:3B:25
Certificate issuer: /CN=579f227b02600e602efc512605e9ec665ad1f82e
Certificate serial: 019ED1D4FAABB8C736BC69B6EB161300C524
Authority key identifier: 57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/2YgTGECo6wn95QwxxdGFJBDZOyU.roa
Signing time: Tue 16 Jun 2026 19:07:36 +0000
ROA not before: Tue 16 Jun 2026 19:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 193.93.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:d4:fa:ab:b8:c7:36:bc:69:b6:eb:16:13:00:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579f227b02600e602efc512605e9ec665ad1f82e
Validity
Not Before: Jun 16 19:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d988131840a8eb09fde50c31c5d1852410d93b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:96:9f:5a:cc:30:7a:7f:43:5c:6f:af:d4:
5f:ff:54:33:23:17:bf:cf:6e:eb:b1:a1:a9:e5:6c:
4d:9f:79:e9:5d:0a:c0:94:e6:66:7b:fa:bf:3e:b9:
78:bd:a9:45:e5:b7:5f:61:d3:ff:6b:c6:82:e3:14:
da:53:04:f8:f9:f0:d6:ff:81:d6:cc:c7:f7:71:12:
b0:84:77:b4:5c:2a:9c:0a:4b:f2:0a:e1:d3:c9:0d:
2c:67:3f:6f:5c:bb:65:21:f5:f4:a4:9b:ca:b7:fd:
41:09:05:32:c4:ca:9b:95:74:fb:d6:b1:82:4b:a5:
f5:c0:51:03:5d:31:01:12:74:9c:a0:c2:47:16:59:
3d:5c:74:d4:9f:af:03:10:32:91:a1:bc:4e:15:e4:
d6:3e:d7:bc:f6:39:cf:6a:4b:3b:fb:a6:53:ac:43:
33:0a:a7:96:28:7f:b0:5d:c2:90:21:7a:c8:3a:b9:
a7:13:84:f4:14:7c:f1:0b:2e:91:ed:d7:1f:6d:47:
d3:0f:75:00:6f:cd:ff:37:5a:23:85:3a:56:7e:30:
f1:3e:f8:be:61:a1:9f:f3:fc:78:a5:94:c5:4e:68:
86:bc:e8:f0:ce:73:e8:a2:b6:06:ed:ba:93:9c:c4:
bd:57:b1:bd:dd:65:9b:74:fc:04:0b:7a:0a:5f:c7:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:13:18:40:A8:EB:09:FD:E5:0C:31:C5:D1:85:24:10:D9:3B:25
X509v3 Authority Key Identifier:
keyid:57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/2YgTGECo6wn95QwxxdGFJBDZOyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7e:55:ce:23:31:99:b9:9f:ba:08:04:79:88:57:29:e2:cb:
6c:17:39:f2:99:28:1a:1d:dc:49:70:c2:ae:b9:9a:1a:de:c6:
79:ff:f0:cb:f4:5d:2a:18:bf:07:5e:85:c5:69:36:80:6a:48:
ae:32:07:b5:6c:a8:99:ff:06:b6:34:de:2a:61:b7:1b:78:60:
4a:96:3c:fd:88:7a:ff:31:bd:69:4a:58:fd:ee:fb:15:e8:71:
bf:33:7a:bb:0d:09:c2:f5:73:e6:60:72:36:61:d8:2c:bc:86:
c8:f7:19:ad:b3:db:3c:b6:b7:64:58:45:44:7c:c6:d7:16:83:
c7:35:00:d5:1d:74:66:21:ba:e0:33:8d:21:6e:94:45:d0:6c:
c8:c9:af:b6:62:59:8b:05:16:df:38:82:df:38:85:cb:a8:bf:
ab:14:67:f5:1a:a9:64:9d:81:98:12:6c:d6:32:67:6a:46:a3:
6f:8c:e4:97:bc:2b:00:2b:9d:25:bd:6b:9e:08:30:5c:3a:7f:
1e:00:5e:80:02:89:f6:0e:7a:bb:fb:5a:70:c2:be:39:fd:21:
f7:c3:ea:e0:eb:cf:ac:2b:43:d5:92:17:66:23:53:8a:10:d5:
d8:46:bf:68:0c:13:a4:de:ea:d3:51:50:f6:af:04:42:38:50:
88:a7:00:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7R1PqruMc2vGm26xYTAMUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWYyMjdiMDI2MDBlNjAyZWZjNTEyNjA1ZTllYzY2NWFk
MWY4MmUwHhcNMjYwNjE2MTkwNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTg4MTMxODQwYThlYjA5ZmRlNTBjMzFjNWQxODUyNDEwZDkzYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2Wn1rMMHp/Q1xvr9Rf/1QzIxe/
z27rsaGp5WxNn3npXQrAlOZme/q/Prl4valF5bdfYdP/a8aC4xTaUwT4+fDW/4HW
zMf3cRKwhHe0XCqcCkvyCuHTyQ0sZz9vXLtlIfX0pJvKt/1BCQUyxMqblXT71rGC
S6X1wFEDXTEBEnScoMJHFlk9XHTUn68DEDKRobxOFeTWPte89jnPaks7+6ZTrEMz
CqeWKH+wXcKQIXrIOrmnE4T0FHzxCy6R7dcfbUfTD3UAb83/N1ojhTpWfjDxPvi+
YaGf8/x4pZTFTmiGvOjwznPoorYG7bqTnMS9V7G93WWbdPwEC3oKX8fX5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmIExhAqOsJ/eUMMcXRhSQQ2TslMB8GA1UdIwQY
MBaAFFefInsCYA5gLvxRJgXp7GZa0fguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjU4aWV3SmdEbUF1X0ZFbUJlbnNabHJSLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hNjk2ZjEtYzM3Yy00YzZhLWExYTAt
ZWI4ZTlhYTk1NDg0LzEvMllnVEdFQ282d245NVF3eHhkR0ZKQkRaT3lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hNjk2ZjEtYzM3Yy00YzZhLWExYTAtZWI4ZTlhYTk1NDg0
LzEvVjU4aWV3SmdEbUF1X0ZFbUJlbnNabHJSLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV2oMA0G
CSqGSIb3DQEBCwUAA4IBAQALflXOIzGZuZ+6CAR5iFcp4stsFznymSgaHdxJcMKu
uZoa3sZ5//DL9F0qGL8HXoXFaTaAakiuMge1bKiZ/wa2NN4qYbcbeGBKljz9iHr/
Mb1pSlj97vsV6HG/M3q7DQnC9XPmYHI2YdgsvIbI9xmts9s8trdkWEVEfMbXFoPH
NQDVHXRmIbrgM40hbpRF0GzIya+2YlmLBRbfOILfOIXLqL+rFGf1GqlknYGYEmzW
MmdqRqNvjOSXvCsAK50lvWueCDBcOn8eAF6AAon2Dnq7+1pwwr45/SH3w+rg68+s
K0PVkhdmI1OKENXYRr9oDBOk3urTUVD2rwRCOFCIpwBD
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:48 2026 by rpki-client