Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/yvMzPdRbVYmbJvMWc2zXq74usuI.roa
File: yvMzPdRbVYmbJvMWc2zXq74usuI.roa (raw, json)
Hash identifier: etf/eWqAazEnJN6yxm72oD5OZcNfw7xVjQijbiFJx4k=
Subject key identifier: CA:F3:33:3D:D4:5B:55:89:9B:26:F3:16:73:6C:D7:AB:BE:2E:B2:E2
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019FB1CA9FFCA6A080C8EB327645286D87D3
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/yvMzPdRbVYmbJvMWc2zXq74usuI.roa
Signing time: Thu 30 Jul 2026 06:51:14 +0000
ROA not before: Thu 30 Jul 2026 06:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 45.11.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:ca:9f:fc:a6:a0:80:c8:eb:32:76:45:28:6d:87:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jul 30 06:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caf3333dd45b55899b26f316736cd7abbe2eb2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:9d:01:9f:08:1d:b2:db:c0:5f:09:8f:c6:
5e:58:b2:c3:ae:c5:94:3f:63:59:50:d4:fb:b6:4f:
c6:0f:4c:5f:ea:f0:7a:94:97:2c:ca:40:c6:58:3f:
37:15:f5:43:87:25:b2:38:8d:5b:0a:f1:24:0c:98:
65:79:c5:a0:2f:9c:cf:d7:05:27:7f:41:d0:01:f1:
a5:95:f2:46:d9:dc:07:58:36:b1:90:77:d2:62:bd:
db:42:72:20:d6:1e:d6:1d:1f:50:a0:27:8b:11:04:
22:62:69:2b:db:e9:f3:7b:cb:d9:7f:f3:71:59:34:
a0:6c:12:82:f4:30:25:1a:d6:12:4b:e6:f2:d8:55:
96:52:ca:d1:61:d8:0b:e8:9f:76:11:17:d8:fa:29:
b2:12:77:9e:0d:6c:6c:fe:d4:fd:87:a9:cf:e6:7b:
55:55:e0:d0:f4:c7:f0:2b:40:4f:78:a3:36:a8:e5:
5e:89:a8:5b:d1:b0:e6:62:46:f0:2e:1d:a0:e6:94:
fa:18:a2:f2:f4:74:c5:f4:0d:bc:bc:c2:67:50:77:
b3:63:77:f0:95:62:5f:b7:b4:b5:b5:ba:2b:17:14:
d1:b4:81:79:6a:89:e1:26:05:28:8e:97:69:d8:1b:
67:e9:5b:b7:0d:9e:99:07:d5:ab:8d:77:a9:50:94:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:33:3D:D4:5B:55:89:9B:26:F3:16:73:6C:D7:AB:BE:2E:B2:E2
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/yvMzPdRbVYmbJvMWc2zXq74usuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.42.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b6:18:dd:d0:f1:0b:45:58:ab:dd:86:d1:a8:da:c3:b1:c3:
3d:67:28:97:b5:7e:84:2c:b0:d7:f5:42:26:30:5e:1c:5f:58:
36:35:0c:96:e4:db:12:ac:ef:29:30:0e:3f:6f:25:37:92:ec:
38:4e:e3:ec:a9:cd:04:60:db:e3:31:ea:7d:5d:75:a2:83:d2:
20:c1:18:65:b2:54:6c:71:f6:7f:a8:2f:fe:3b:a2:d8:f4:d6:
87:38:ac:16:ae:47:a4:ee:9e:9d:c1:4f:5a:8c:5d:e9:b3:e8:
0a:66:0c:3e:96:a6:e4:92:21:a1:14:04:65:89:0f:cb:fb:ab:
80:b1:59:c2:a4:6b:95:e6:79:c9:ca:6a:ca:08:bb:df:3a:5e:
d1:7b:8f:50:da:36:28:29:8b:ea:82:1e:c1:bf:71:00:56:72:
60:a1:67:e8:eb:0a:8a:77:2f:4c:30:dd:e8:c7:9e:cb:a4:3e:
bc:42:a0:d1:bf:15:cb:fd:19:cb:82:68:c9:f9:d0:18:41:3f:
6e:2b:f5:9f:8b:a4:2a:54:b0:86:89:66:73:22:54:82:fd:26:
44:11:c2:6b:0c:9c:ee:98:87:39:46:d6:b8:3b:50:c8:53:81:
ca:6d:76:bd:b7:84:30:a2:f9:d4:90:f4:6e:1b:c8:e4:40:76:
a1:2c:57:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+xyp/8pqCAyOsydkUobYfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNzMwMDY1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWYzMzMzZGQ0NWI1NTg5OWIyNmYzMTY3MzZjZDdhYmJlMmViMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLKdAZ8IHbLbwF8Jj8ZeWLLDrsWU
P2NZUNT7tk/GD0xf6vB6lJcsykDGWD83FfVDhyWyOI1bCvEkDJhlecWgL5zP1wUn
f0HQAfGllfJG2dwHWDaxkHfSYr3bQnIg1h7WHR9QoCeLEQQiYmkr2+nze8vZf/Nx
WTSgbBKC9DAlGtYSS+by2FWWUsrRYdgL6J92ERfY+imyEneeDWxs/tT9h6nP5ntV
VeDQ9MfwK0BPeKM2qOVeiahb0bDmYkbwLh2g5pT6GKLy9HTF9A28vMJnUHezY3fw
lWJft7S1tborFxTRtIF5aonhJgUojpdp2Btn6Vu3DZ6ZB9WrjXepUJSwgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrzMz3UW1WJmybzFnNs16u+LrLiMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveXZNelBkUmJWWW1iSnZNV2MyelhxNzR1c3VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQsqMA0G
CSqGSIb3DQEBCwUAA4IBAQBWthjd0PELRVir3YbRqNrDscM9ZyiXtX6ELLDX9UIm
MF4cX1g2NQyW5NsSrO8pMA4/byU3kuw4TuPsqc0EYNvjMep9XXWig9IgwRhlslRs
cfZ/qC/+O6LY9NaHOKwWrkek7p6dwU9ajF3ps+gKZgw+lqbkkiGhFARliQ/L+6uA
sVnCpGuV5nnJymrKCLvfOl7Re49Q2jYoKYvqgh7Bv3EAVnJgoWfo6wqKdy9MMN3o
x57LpD68QqDRvxXL/RnLgmjJ+dAYQT9uK/Wfi6QqVLCGiWZzIlSC/SZEEcJrDJzu
mIc5Rta4O1DIU4HKbXa9t4QwovnUkPRuG8jkQHahLFcb
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:47:59 2026 by rpki-client