Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YWWNapvVTD7yWG-fH0yXDDCNRmU.roa
File: YWWNapvVTD7yWG-fH0yXDDCNRmU.roa (raw, json)
Hash identifier: uSljxmj8J8uwdna2nmQZsmPVnmeshCdJ1E05yg8uIJA=
Subject key identifier: 61:65:8D:6A:9B:D5:4C:3E:F2:58:6F:9F:1F:4C:97:0C:30:8D:46:65
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F37AE657274198EBFFCF18A8C044F966A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YWWNapvVTD7yWG-fH0yXDDCNRmU.roa
Signing time: Mon 06 Jul 2026 13:46:43 +0000
ROA not before: Mon 06 Jul 2026 13:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 147.45.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:ae:65:72:74:19:8e:bf:fc:f1:8a:8c:04:4f:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 6 13:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61658d6a9bd54c3ef2586f9f1f4c970c308d4665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:f2:11:36:6e:57:4d:4b:e6:63:ff:06:ae:
df:62:d8:aa:1e:8c:c8:8a:d2:a3:9a:80:44:a6:97:
7b:b9:03:b2:8b:84:a6:0a:dd:b3:8e:90:ae:f5:a7:
77:4c:61:28:3f:b6:16:af:36:3c:40:8f:2d:30:84:
06:1d:3a:34:89:ac:9d:c9:95:75:ce:63:58:cb:44:
ce:85:33:9c:ca:0d:69:8e:b3:60:c3:51:d6:3d:8f:
82:4f:fc:6e:4f:83:40:1a:6d:3b:8e:87:32:63:b0:
33:28:f6:f1:6b:a5:de:43:86:0b:a0:35:2c:b9:0e:
9b:8f:5d:cc:e0:0e:8f:c4:8e:ee:a4:fa:9f:04:6f:
a2:36:4d:94:b1:59:55:1b:2a:7e:90:25:ac:43:92:
e5:c6:6d:4d:40:0f:48:5f:fc:d0:88:11:f8:47:cc:
af:a0:88:0d:11:61:85:c4:82:d1:28:ac:18:b5:eb:
60:93:30:32:e9:2c:f7:91:9a:eb:e0:f5:66:65:22:
c8:a8:e2:42:77:5f:9f:a3:9c:8d:89:b7:ef:2c:af:
bc:c3:b5:04:a2:c1:55:3a:bd:34:fb:72:b5:51:95:
75:06:72:d7:24:ff:d5:8e:ed:59:16:35:30:b3:b5:
16:b1:ed:84:b6:04:1d:20:0f:e2:ab:4e:ff:fc:67:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:8D:6A:9B:D5:4C:3E:F2:58:6F:9F:1F:4C:97:0C:30:8D:46:65
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YWWNapvVTD7yWG-fH0yXDDCNRmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2b:10:bf:3b:cf:a9:4c:47:e9:e1:41:30:9c:83:b1:91:cf:
72:7d:2c:d9:7d:b4:ed:bb:e3:1a:7f:4c:46:a1:2a:6e:74:26:
f1:da:63:13:c0:0e:8a:88:7f:a5:24:31:20:3d:1a:88:36:8d:
f4:c6:a0:eb:1b:b5:94:d6:1a:01:97:7a:aa:87:ab:4d:e0:80:
d8:8a:80:bf:ce:f7:3a:27:3c:3a:ce:8a:82:82:0d:0b:72:0a:
c7:dd:42:36:a5:da:c4:7d:a4:70:aa:4a:d2:c1:99:d0:75:19:
b0:1e:24:bf:b1:7c:e0:e7:40:d0:b1:20:d0:4b:1a:45:8a:6c:
53:71:9c:7b:fa:db:5d:48:dc:8b:b2:b5:54:40:b8:ce:20:4a:
71:b7:6c:35:52:69:af:5b:2f:73:6a:10:42:51:a9:02:1b:ad:
1d:0f:dc:41:01:58:4e:30:69:00:32:a5:64:38:2d:5b:26:94:
b1:39:52:74:6b:10:2f:15:71:19:09:27:a5:91:49:2f:ad:c1:
b3:94:d0:7e:cf:ba:ac:bb:12:c4:8c:8f:99:8a:3c:75:6c:02:
da:18:9b:9c:08:ef:4c:5e:26:13:9a:77:ea:d7:d4:5f:3d:d9:
a2:03:c5:c0:e5:bf:da:e9:e6:5b:e0:df:35:a6:02:cf:bb:9c:
c0:a2:2e:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ83rmVydBmOv/zxiowET5ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwNzA2MTM0NjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTY1OGQ2YTliZDU0YzNlZjI1ODZmOWYxZjRjOTcwYzMwOGQ0NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLHyETZuV01L5mP/Bq7fYtiqHozI
itKjmoBEppd7uQOyi4SmCt2zjpCu9ad3TGEoP7YWrzY8QI8tMIQGHTo0iaydyZV1
zmNYy0TOhTOcyg1pjrNgw1HWPY+CT/xuT4NAGm07jocyY7AzKPbxa6XeQ4YLoDUs
uQ6bj13M4A6PxI7upPqfBG+iNk2UsVlVGyp+kCWsQ5Llxm1NQA9IX/zQiBH4R8yv
oIgNEWGFxILRKKwYtetgkzAy6Sz3kZrr4PVmZSLIqOJCd1+fo5yNibfvLK+8w7UE
osFVOr00+3K1UZV1BnLXJP/Vju1ZFjUws7UWse2EtgQdIA/iq07//Gd8gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFljWqb1Uw+8lhvnx9MlwwwjUZlMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvWVdXTmFwdlZURDd5V0ctZkgweVhERENOUm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky0vMA0G
CSqGSIb3DQEBCwUAA4IBAQAMKxC/O8+pTEfp4UEwnIOxkc9yfSzZfbTtu+Maf0xG
oSpudCbx2mMTwA6KiH+lJDEgPRqINo30xqDrG7WU1hoBl3qqh6tN4IDYioC/zvc6
Jzw6zoqCgg0LcgrH3UI2pdrEfaRwqkrSwZnQdRmwHiS/sXzg50DQsSDQSxpFimxT
cZx7+ttdSNyLsrVUQLjOIEpxt2w1UmmvWy9zahBCUakCG60dD9xBAVhOMGkAMqVk
OC1bJpSxOVJ0axAvFXEZCSelkUkvrcGzlNB+z7qsuxLEjI+Zijx1bALaGJucCO9M
XiYTmnfq19RfPdmiA8XA5b/a6eZb4N81pgLPu5zAoi6N
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:31 2026 by rpki-client