Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/CMj-58s7HjFJfPYnqyY_H8iMras.roa
File: CMj-58s7HjFJfPYnqyY_H8iMras.roa (raw, json)
Hash identifier: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=
Subject key identifier: 08:C8:FE:E7:CB:3B:1E:31:49:7C:F6:27:AB:26:3F:1F:C8:8C:AD:AB
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019E4F1ACC1DDC2CCF1A22A9AC4F2CBE0D70
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/CMj-58s7HjFJfPYnqyY_H8iMras.roa
Signing time: Fri 22 May 2026 09:53:36 +0000
ROA not before: Fri 22 May 2026 09:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198361
IP address blocks: 89.126.234.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
2a0c:6ec0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:1a:cc:1d:dc:2c:cf:1a:22:a9:ac:4f:2c:be:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: May 22 09:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08c8fee7cb3b1e31497cf627ab263f1fc88cadab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:42:82:f8:0d:0e:e1:44:73:57:43:b2:d3:
84:8c:ed:33:6a:50:c7:7b:4a:85:2a:99:76:f5:f4:
10:49:35:37:0c:a6:46:52:c6:23:18:53:b1:aa:e1:
75:e5:62:f0:fd:20:36:39:8d:71:ca:3e:b5:0f:ba:
dc:cf:41:bc:82:69:87:03:d6:6a:cf:49:0e:8e:d2:
31:aa:58:e5:6b:30:9e:2d:1a:e5:63:50:32:21:46:
a1:f8:da:d6:63:85:cf:5e:cb:a6:ef:72:6b:55:9d:
4c:e4:3a:5d:24:ed:a9:b7:85:e2:70:80:7d:18:a9:
06:85:1e:dd:c0:cd:c5:1c:3c:1f:f6:3a:49:b8:82:
97:33:57:5b:a4:4c:02:65:30:af:76:a7:2f:6f:7d:
bb:00:b1:3d:03:e9:30:51:0b:fb:1d:ea:f3:75:d9:
ba:4b:1b:5b:e3:2f:74:c2:43:a4:60:c2:d5:d7:2c:
fc:00:5d:46:42:87:7f:7b:2a:aa:de:0f:81:ca:70:
47:00:90:2d:e1:6e:e2:0b:38:91:07:ea:ea:03:3a:
54:d2:fe:e0:68:32:b3:d1:59:61:b2:d7:90:49:f5:
18:64:53:1c:88:7f:37:ca:6c:1d:32:03:62:83:51:
bf:02:33:f0:7d:44:c5:79:72:f2:88:47:50:2c:dd:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:FE:E7:CB:3B:1E:31:49:7C:F6:27:AB:26:3F:1F:C8:8C:AD:AB
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/CMj-58s7HjFJfPYnqyY_H8iMras.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.234.0/24
91.188.249.0/24
IPv6:
2a0c:6ec0:2::/48
Signature Algorithm: sha256WithRSAEncryption
57:3f:98:3c:14:10:08:bb:7d:ff:c6:7b:2a:c8:49:ad:d1:6e:
2a:d4:0a:09:ee:c5:29:e0:e2:0c:9a:e0:c0:b9:35:fe:15:b1:
e5:3b:00:53:21:9a:89:6d:55:33:c3:99:f7:70:48:73:1a:b4:
6f:75:9b:48:0c:fa:4b:07:7e:f6:e8:72:1b:47:f0:63:19:28:
34:2e:df:70:56:17:65:37:a0:94:ed:81:43:4c:5b:90:9b:48:
77:37:9b:f8:2b:d0:b8:08:01:68:cd:ae:50:b1:cb:87:fb:5c:
a7:90:99:2f:02:42:60:0c:f7:9b:ed:0e:49:46:83:73:6b:8d:
b3:f5:7c:fc:a7:ed:46:2b:e2:85:85:f3:2c:3f:eb:9a:94:d9:
8b:36:8a:f4:94:78:a5:33:a6:7b:b5:70:4f:03:c0:b6:0c:8a:
c6:60:30:33:7c:2b:bf:80:c2:fb:35:10:71:18:76:b5:82:53:
3b:46:72:25:b3:da:9c:e6:ee:6b:3b:e1:3b:b1:98:5f:8b:4c:
12:e4:db:88:e4:2a:d0:6c:e7:db:ba:95:39:f0:a3:f1:4c:b2:
28:f6:3b:4d:97:4f:9d:85:24:b2:be:22:b2:b3:e5:95:cd:62:
f6:41:b2:bd:7b:c6:59:f0:ed:95:64:8f:28:04:ac:cb:db:83:
99:79:59:50
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ5PGswd3CzPGiKprE8svg1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjYwNTIyMDk1MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGM4ZmVlN2NiM2IxZTMxNDk3Y2Y2MjdhYjI2M2YxZmM4OGNhZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08RCgvgNDuFEc1dDstOEjO0zalDH
e0qFKpl29fQQSTU3DKZGUsYjGFOxquF15WLw/SA2OY1xyj61D7rcz0G8gmmHA9Zq
z0kOjtIxqljlazCeLRrlY1AyIUah+NrWY4XPXsum73JrVZ1M5DpdJO2pt4XicIB9
GKkGhR7dwM3FHDwf9jpJuIKXM1dbpEwCZTCvdqcvb327ALE9A+kwUQv7Herzddm6
Sxtb4y90wkOkYMLV1yz8AF1GQod/eyqq3g+BynBHAJAt4W7iCziRB+rqAzpU0v7g
aDKz0VlhsteQSfUYZFMciH83ymwdMgNig1G/AjPwfUTFeXLyiEdQLN1O9wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAjI/ufLOx4xSXz2J6smPx/IjK2rMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvQ01qLTU4czdIakZKZlBZbnF5WV9IOGlNcmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAWX7qAwQA
W7z5MA8EAgACMAkDBwAqDG7AAAIwDQYJKoZIhvcNAQELBQADggEBAFc/mDwUEAi7
ff/GeyrISa3RbirUCgnuxSng4gya4MC5Nf4VseU7AFMhmoltVTPDmfdwSHMatG91
m0gM+ksHfvbochtH8GMZKDQu33BWF2U3oJTtgUNMW5CbSHc3m/gr0LgIAWjNrlCx
y4f7XKeQmS8CQmAM95vtDklGg3NrjbP1fPyn7UYr4oWF8yw/65qU2Ys2ivSUeKUz
pnu1cE8DwLYMisZgMDN8K7+Awvs1EHEYdrWCUztGciWz2pzm7ms74TuxmF+LTBLk
24jkKtBs59u6lTnwo/FMsij2O02XT52FJLK+IrKz5ZXNYvZBsr17xlnw7ZVkjygE
rMvbg5l5WVA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:07 2026 by rpki-client