Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yXQlTu0RhELSgwZIpHup_qUVjqw.roa
File: yXQlTu0RhELSgwZIpHup_qUVjqw.roa (raw, json)
Hash identifier: Oee2a+IpVKzmmsTaApdJTSXcoAn505950avoEaQmc30=
Subject key identifier: C9:74:25:4E:ED:11:84:42:D2:83:06:48:A4:7B:A9:FE:A5:15:8E:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A04EAFB5AEB7C951CC40B72D2169CF471D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yXQlTu0RhELSgwZIpHup_qUVjqw.roa
Signing time: Sat 29 Aug 2026 18:02:13 +0000
ROA not before: Sat 29 Aug 2026 18:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213948
IP address blocks: 89.106.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:af:b5:ae:b7:c9:51:cc:40:b7:2d:21:69:cf:47:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 29 18:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c974254eed118442d2830648a47ba9fea5158eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:b1:dc:40:5c:e5:d7:3d:e1:f8:e1:1a:df:
20:db:9b:fb:95:a2:fc:d5:89:2b:14:7e:ee:7b:73:
ba:a3:f3:0c:8b:c4:86:79:0f:15:80:b9:be:3f:37:
45:74:7e:a3:32:71:26:93:37:a4:bc:30:c5:c2:79:
a2:9d:9f:0e:67:5f:9a:d5:ad:a1:55:09:bc:7a:dc:
0d:d1:d2:17:0a:15:1b:cd:b2:6c:4c:dd:fa:6f:b5:
7c:47:d1:bf:40:0a:92:93:d3:60:7d:ac:c9:70:83:
cc:d4:db:a8:ac:b4:82:3e:b7:5c:d1:db:2e:18:97:
19:f4:50:90:24:56:93:bf:bf:0c:5b:30:d0:f1:e4:
e4:25:75:15:15:c5:b1:15:b6:54:d4:37:29:85:31:
bc:79:38:52:bb:86:57:00:8f:de:ae:7b:31:47:23:
a8:2d:f7:15:f3:54:4c:b3:ef:be:83:7f:05:44:b4:
e6:fc:63:a4:93:52:95:d6:28:e3:a9:d4:20:59:7f:
14:06:c6:5c:8a:d8:a2:48:2b:d6:5c:d3:f1:37:81:
9d:ad:29:95:2f:ea:fc:65:23:36:ba:7f:c2:7b:7b:
c3:dc:b5:7b:4f:bc:49:e9:e5:51:3f:95:1b:62:b9:
c3:8a:8e:10:3a:93:47:55:97:cf:cc:f6:b3:14:18:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:25:4E:ED:11:84:42:D2:83:06:48:A4:7B:A9:FE:A5:15:8E:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yXQlTu0RhELSgwZIpHup_qUVjqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.91.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1e:78:af:71:f8:9a:9c:ed:91:27:56:7b:32:31:dc:a8:ab:
56:e6:1d:5d:ce:35:bf:e5:20:f4:36:23:61:57:03:6a:a9:b1:
f5:ab:a2:32:6b:f2:ab:11:e0:d6:a9:bd:97:1d:8d:ba:97:cb:
e1:d0:d9:05:85:14:0f:69:c1:81:b4:12:39:45:8d:61:6d:50:
46:77:cf:cc:60:fa:bb:f9:49:25:e8:60:ab:b8:f8:21:ef:8e:
cd:07:6a:a8:ee:0a:54:4f:94:89:69:f8:99:4d:18:cf:d7:26:
5f:51:4a:a5:08:64:27:d0:b3:00:b1:f0:66:6d:de:fa:4d:5e:
a5:fb:ee:7a:7a:0b:e0:4f:39:de:5a:4b:e1:3f:c7:a9:cb:ca:
05:75:98:ec:c4:f6:6c:f2:af:e6:89:82:25:f5:c7:74:18:24:
4a:94:f8:3c:3d:5e:81:f0:89:29:d3:14:19:17:29:bb:92:ad:
ee:f0:6a:75:aa:6e:db:d6:18:2e:6b:4e:68:78:24:24:24:ca:
cb:58:b3:aa:07:50:81:05:11:3b:31:b1:b8:e5:ac:35:0f:66:
31:b3:14:17:a6:a1:07:f2:d5:0b:ee:d3:b6:0d:d8:de:02:0c:
a3:90:7c:f1:0e:d6:f7:f9:27:c6:78:14:8e:c9:04:0c:35:5d:
04:15:1b:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBOr7Wut8lRzEC3LSFpz0cdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODI5MTgwMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTc0MjU0ZWVkMTE4NDQyZDI4MzA2NDhhNDdiYTlmZWE1MTU4ZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll+x3EBc5dc94fjhGt8g25v7laL8
1YkrFH7ue3O6o/MMi8SGeQ8VgLm+PzdFdH6jMnEmkzekvDDFwnminZ8OZ1+a1a2h
VQm8etwN0dIXChUbzbJsTN36b7V8R9G/QAqSk9NgfazJcIPM1NuorLSCPrdc0dsu
GJcZ9FCQJFaTv78MWzDQ8eTkJXUVFcWxFbZU1DcphTG8eThSu4ZXAI/ernsxRyOo
LfcV81RMs+++g38FRLTm/GOkk1KV1ijjqdQgWX8UBsZcitiiSCvWXNPxN4GdrSmV
L+r8ZSM2un/Ce3vD3LV7T7xJ6eVRP5UbYrnDio4QOpNHVZfPzPazFBicKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMl0JU7tEYRC0oMGSKR7qf6lFY6sMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveVhRbFR1MFJoRUxTZ3daSXBIdXBfcVVWanF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpbMA0G
CSqGSIb3DQEBCwUAA4IBAQBQHnivcfianO2RJ1Z7MjHcqKtW5h1dzjW/5SD0NiNh
VwNqqbH1q6Iya/KrEeDWqb2XHY26l8vh0NkFhRQPacGBtBI5RY1hbVBGd8/MYPq7
+Ukl6GCruPgh747NB2qo7gpUT5SJafiZTRjP1yZfUUqlCGQn0LMAsfBmbd76TV6l
++56egvgTzneWkvhP8epy8oFdZjsxPZs8q/miYIl9cd0GCRKlPg8PV6B8Ikp0xQZ
Fym7kq3u8Gp1qm7b1hgua05oeCQkJMrLWLOqB1CBBRE7MbG45aw1D2YxsxQXpqEH
8tUL7tO2DdjeAgyjkHzxDtb3+SfGeBSOyQQMNV0EFRu1
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:55 2026 by rpki-client