Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yTNnjWD0pKLDRc_3q3FveJtojrE.roa
File: yTNnjWD0pKLDRc_3q3FveJtojrE.roa (raw, json)
Hash identifier: nJHLaZW+pIJHF0wpeRLuB6sLe6fB85+hO3+Jj/6XGow=
Subject key identifier: C9:33:67:8D:60:F4:A4:A2:C3:45:CF:F7:AB:71:6F:78:9B:68:8E:B1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A134F14CCBC073CA0BE0B980CED4E007FD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yTNnjWD0pKLDRc_3q3FveJtojrE.roa
Signing time: Tue 13 Oct 2026 11:06:31 +0000
ROA not before: Tue 13 Oct 2026 11:06:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218421
IP address blocks: 185.47.142.0/24 maxlen: 24
2a02:2fc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:f1:4c:cb:c0:73:ca:0b:e0:b9:80:ce:d4:e0:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 11:06:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c933678d60f4a4a2c345cff7ab716f789b688eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:2b:27:7e:12:d6:23:48:c9:ad:21:00:a0:
4d:6d:44:2b:1f:cd:ec:58:0b:25:fc:eb:c9:c2:9b:
b5:76:f4:9a:d1:6c:ba:3e:ac:be:52:43:0f:e0:07:
7b:62:26:04:bb:42:da:8c:a1:6a:43:69:80:ea:a7:
50:4f:55:a9:77:7c:53:8e:46:ef:34:cc:d4:4d:13:
6a:8a:8d:47:0f:38:cb:76:92:08:7e:ae:a7:31:2e:
0d:3e:3a:21:5d:d1:44:df:e2:89:a5:9a:14:0e:67:
a1:d6:c6:77:64:39:3c:cf:80:6d:4a:8c:1d:07:34:
e5:46:b1:59:2c:e4:a1:1e:5b:92:7e:51:0f:76:7b:
73:ca:a6:36:07:1e:e6:50:8c:e4:4d:0b:c8:ce:c3:
21:f2:46:c7:c6:d6:bc:af:64:8c:53:c2:4c:a9:1c:
93:50:c6:a4:52:24:1f:f0:06:ed:05:2d:e1:23:10:
a2:c7:26:7d:64:d0:fa:24:13:bb:a3:48:e8:e7:aa:
a2:72:22:d6:a3:cf:14:da:51:cd:8e:66:8f:6a:4c:
fe:85:ac:b8:9d:62:22:6b:36:44:e0:b3:9a:9b:db:
6f:d0:c2:d7:c8:84:32:59:1b:35:2e:ba:88:45:1e:
3c:9e:9f:54:2b:79:90:10:d4:c3:5a:09:8f:44:3b:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:33:67:8D:60:F4:A4:A2:C3:45:CF:F7:AB:71:6F:78:9B:68:8E:B1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yTNnjWD0pKLDRc_3q3FveJtojrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.142.0/24
IPv6:
2a02:2fc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
7c:24:df:9a:2e:43:13:f4:41:2b:03:f1:25:8b:cc:6d:ea:e7:
24:5e:cb:3d:69:e2:50:e7:44:ed:8f:98:3c:28:ea:a5:0f:ff:
35:29:7b:6e:f4:0b:07:c7:6a:d5:d1:5a:14:ee:54:9e:08:49:
ef:bb:a7:ca:bd:f8:46:69:c3:35:82:23:09:6a:4d:1a:dd:cb:
57:72:a6:76:25:61:76:51:d0:96:7a:c5:4f:c9:0b:69:03:2b:
5b:54:4b:1d:7a:81:d5:4c:97:c7:8e:e6:38:d2:88:00:d6:f2:
a1:21:c1:e2:2c:2d:59:ba:27:36:cb:72:53:17:59:27:fa:d2:
8f:86:50:0b:30:29:98:33:af:ed:bc:5c:e1:4d:0c:1d:fd:04:
97:48:00:55:dd:24:98:e8:46:22:da:ac:dd:44:13:28:60:37:
83:01:14:50:3a:dc:09:95:46:f8:c5:58:33:6a:72:0b:c2:34:
8f:a5:79:22:ef:1c:74:d9:b8:5e:fb:b5:2e:a9:1c:c5:de:e2:
22:4f:87:d0:a1:e6:33:98:b4:09:e8:f0:59:d9:39:bb:2e:95:
93:47:87:cd:03:b8:56:92:8c:04:78:07:d6:5c:e8:73:37:71:
04:37:18:fe:e7:0c:bc:17:4b:ba:ed:3f:7b:48:e4:ee:8d:96:
99:32:55:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaE08UzLwHPKC+C5gM7U4Af9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDEzMTEwNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTMzNjc4ZDYwZjRhNGEyYzM0NWNmZjdhYjcxNmY3ODliNjg4ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgwrJ34S1iNIya0hAKBNbUQrH83s
WAsl/OvJwpu1dvSa0Wy6Pqy+UkMP4Ad7YiYEu0LajKFqQ2mA6qdQT1Wpd3xTjkbv
NMzUTRNqio1HDzjLdpIIfq6nMS4NPjohXdFE3+KJpZoUDmeh1sZ3ZDk8z4BtSowd
BzTlRrFZLOShHluSflEPdntzyqY2Bx7mUIzkTQvIzsMh8kbHxta8r2SMU8JMqRyT
UMakUiQf8AbtBS3hIxCixyZ9ZND6JBO7o0jo56qiciLWo88U2lHNjmaPakz+hay4
nWIiazZE4LOam9tv0MLXyIQyWRs1LrqIRR48np9UK3mQENTDWgmPRDvCfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMkzZ41g9KSiw0XP96txb3ibaI6xMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveVRObmpXRDBwS0xEUmNfM3EzRnZlSnRvanJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuS+OMA8E
AgACMAkDBwAqAi/AAB4wDQYJKoZIhvcNAQELBQADggEBAHwk35ouQxP0QSsD8SWL
zG3q5yReyz1p4lDnRO2PmDwo6qUP/zUpe270CwfHatXRWhTuVJ4ISe+7p8q9+EZp
wzWCIwlqTRrdy1dypnYlYXZR0JZ6xU/JC2kDK1tUSx16gdVMl8eO5jjSiADW8qEh
weIsLVm6JzbLclMXWSf60o+GUAswKZgzr+28XOFNDB39BJdIAFXdJJjoRiLarN1E
EyhgN4MBFFA63AmVRvjFWDNqcgvCNI+leSLvHHTZuF77tS6pHMXe4iJPh9Ch5jOY
tAno8FnZObsulZNHh80DuFaSjAR4B9Zc6HM3cQQ3GP7nDLwXS7rtP3tI5O6Nlpky
VcU=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:23 2026 by rpki-client