Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ye6WXDCUjspKnsMEhy9UicZYb9s.roa
File: Ye6WXDCUjspKnsMEhy9UicZYb9s.roa (raw, json)
Hash identifier: 7sfNchyDshl04pQfX07dtOxPlgpqYhbPPW5F/EOzOtc=
Subject key identifier: 61:EE:96:5C:30:94:8E:CA:4A:9E:C3:04:87:2F:54:89:C6:58:6F:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0417391C633AE47811E945639464A15EE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ye6WXDCUjspKnsMEhy9UicZYb9s.roa
Signing time: Thu 27 Aug 2026 04:21:27 +0000
ROA not before: Thu 27 Aug 2026 04:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 194.87.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:73:91:c6:33:ae:47:81:1e:94:56:39:46:4a:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 27 04:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61ee965c30948eca4a9ec304872f5489c6586fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:c4:ff:9d:cd:1a:77:3e:0c:dd:15:d0:c8:
de:8a:ab:00:84:c5:f1:19:49:41:35:63:10:cf:db:
91:4f:f1:c1:45:14:70:e4:b0:dc:d4:27:da:54:66:
04:df:13:c3:03:33:5a:a5:39:da:d0:e1:51:9e:a0:
56:17:e4:8c:fe:0f:75:5a:6c:df:d9:58:51:01:78:
7c:bd:51:c3:81:55:af:bf:30:e9:6d:bf:9e:ee:30:
3f:19:62:60:68:1e:2a:70:cb:d4:5b:89:45:76:3a:
b6:ff:ab:04:87:e7:93:d6:20:39:cc:e1:7d:65:39:
5b:94:21:17:22:44:ae:22:ed:55:7f:a0:3c:b7:fe:
52:f2:72:bb:6e:82:71:22:45:90:3f:c1:85:d0:be:
48:f1:16:20:ad:e6:58:b0:8d:26:47:6e:3c:3e:90:
41:26:9e:28:86:25:37:c3:19:20:97:64:43:fa:9e:
25:ab:39:6b:7e:be:b5:68:61:9f:25:c1:27:99:cb:
0c:82:e5:bc:5a:18:37:7d:90:d6:f7:05:ff:b5:d7:
3c:11:0a:00:15:ab:e0:7c:49:52:03:34:2f:50:ae:
1b:5d:f4:55:09:18:60:45:73:3c:1a:71:4d:9d:e8:
ca:a4:d5:db:08:7d:48:36:12:f0:66:63:d5:d3:9f:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:96:5C:30:94:8E:CA:4A:9E:C3:04:87:2F:54:89:C6:58:6F:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ye6WXDCUjspKnsMEhy9UicZYb9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.90.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1c:67:00:19:6b:cb:a1:3a:28:bf:6f:0f:87:cb:3e:10:60:
60:c3:a7:5f:08:98:b3:02:8f:af:cf:5b:db:ce:13:62:1d:6a:
e7:fb:07:30:26:d0:c1:63:bb:41:4d:55:a1:3a:54:19:d7:5c:
95:22:43:aa:dc:3d:8f:d2:8e:6c:0c:2a:c5:3e:f5:71:ad:fb:
05:8f:d8:f5:c9:e6:96:4c:f5:90:d3:c7:02:85:76:d9:77:4c:
3e:a6:07:b2:f5:be:c2:f2:1b:ea:0a:57:57:5d:64:16:21:60:
05:34:b2:e8:46:0a:66:e4:cd:af:ec:23:8b:33:95:91:31:70:
0e:f9:d8:1a:5e:3e:33:9e:fc:43:92:ad:54:c1:ba:c7:9c:4c:
a8:67:e2:37:1f:c3:1b:52:8c:e0:c0:d4:8c:f3:08:d2:75:25:
0b:f3:72:e1:34:62:e6:7e:0f:24:60:50:af:d8:9d:20:73:b7:
41:d8:06:b4:75:1b:24:e7:5e:ee:b9:3a:5a:71:0a:75:22:fc:
37:b1:2a:71:7f:ee:a3:5e:8b:dd:3f:36:60:95:6b:13:bf:bd:
6a:41:c8:27:a7:3b:e6:c7:33:04:7a:83:25:99:03:bb:23:27:
6f:a1:74:51:de:65:ec:e0:f4:0b:f0:60:23:5d:d0:8c:5e:36:
5f:8b:b0:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBBc5HGM65HgR6UVjlGShXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwODI3MDQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWVlOTY1YzMwOTQ4ZWNhNGE5ZWMzMDQ4NzJmNTQ4OWM2NTg2ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTvE/53NGnc+DN0V0MjeiqsAhMXx
GUlBNWMQz9uRT/HBRRRw5LDc1CfaVGYE3xPDAzNapTna0OFRnqBWF+SM/g91Wmzf
2VhRAXh8vVHDgVWvvzDpbb+e7jA/GWJgaB4qcMvUW4lFdjq2/6sEh+eT1iA5zOF9
ZTlblCEXIkSuIu1Vf6A8t/5S8nK7boJxIkWQP8GF0L5I8RYgreZYsI0mR248PpBB
Jp4ohiU3wxkgl2RD+p4lqzlrfr61aGGfJcEnmcsMguW8Whg3fZDW9wX/tdc8EQoA
FavgfElSAzQvUK4bXfRVCRhgRXM8GnFNnejKpNXbCH1INhLwZmPV059I/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGHullwwlI7KSp7DBIcvVInGWG/bMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWWU2V1hEQ1Vqc3BLbnNNRWh5OVVpY1pZYjlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwldaMA0G
CSqGSIb3DQEBCwUAA4IBAQAQHGcAGWvLoToov28Ph8s+EGBgw6dfCJizAo+vz1vb
zhNiHWrn+wcwJtDBY7tBTVWhOlQZ11yVIkOq3D2P0o5sDCrFPvVxrfsFj9j1yeaW
TPWQ08cChXbZd0w+pgey9b7C8hvqCldXXWQWIWAFNLLoRgpm5M2v7COLM5WRMXAO
+dgaXj4znvxDkq1UwbrHnEyoZ+I3H8MbUozgwNSM8wjSdSUL83LhNGLmfg8kYFCv
2J0gc7dB2Aa0dRsk517uuTpacQp1Ivw3sSpxf+6jXovdPzZglWsTv71qQcgnpzvm
xzMEeoMlmQO7IydvoXRR3mXs4PQL8GAjXdCMXjZfi7Cx
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:00 2026 by rpki-client