Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/y31kGASp2zNH3cDWQizl3r6O43c.roa
File: y31kGASp2zNH3cDWQizl3r6O43c.roa (raw, json)
Hash identifier: 7ulkExljIxl1cpFUvjA7+r26bnE26w6f10AU3mMSeCo=
Subject key identifier: CB:7D:64:18:04:A9:DB:33:47:DD:C0:D6:42:2C:E5:DE:BE:8E:E3:77
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019FC6AE249D77DE0800FF2C91DE06B20B34
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/y31kGASp2zNH3cDWQizl3r6O43c.roa
Signing time: Mon 03 Aug 2026 08:12:09 +0000
ROA not before: Mon 03 Aug 2026 08:12:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 189.13.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:ae:24:9d:77:de:08:00:ff:2c:91:de:06:b2:0b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Aug 3 08:12:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb7d641804a9db3347ddc0d6422ce5debe8ee377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:94:9b:bb:39:30:a3:c3:01:f9:d5:53:d6:
3d:e6:7e:30:a5:be:82:9c:0e:57:a5:c6:5e:4d:46:
eb:bf:72:58:b1:52:48:5a:ec:c8:50:ea:92:44:4a:
6e:11:76:b6:df:7f:e7:17:4f:d7:6c:c2:31:7c:5c:
dc:70:6b:63:b7:0c:ad:07:c6:f2:d0:8d:96:98:8d:
2a:91:73:8c:62:5e:fb:de:36:e1:b3:3c:73:b7:57:
ad:a4:a0:71:79:94:a6:38:6f:e9:45:81:74:77:60:
99:f0:34:34:9f:f4:a6:5f:43:ea:e7:25:c2:c9:70:
07:81:3a:7d:e2:ff:6c:ce:d4:26:1c:e3:3b:92:0c:
e0:a0:a7:55:73:90:18:ef:6a:9c:94:17:31:8e:3f:
91:6c:56:75:5a:81:d9:78:ea:69:f5:06:f8:9b:f7:
a1:f3:39:bd:05:7a:5a:d9:40:c8:cf:24:9c:8b:0d:
4a:08:db:a5:70:1a:78:d2:62:a1:82:49:75:89:a4:
b4:a3:fd:47:a3:1d:6d:d5:2b:4c:c2:76:2e:0c:ef:
5b:f8:ea:09:a5:b1:d0:c2:c0:86:92:2e:4e:8e:c6:
33:50:58:81:df:e1:f8:e5:36:f4:a2:29:98:df:8c:
ea:9d:66:84:f9:e8:1b:60:de:cf:ea:88:28:7c:90:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:64:18:04:A9:DB:33:47:DD:C0:D6:42:2C:E5:DE:BE:8E:E3:77
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/y31kGASp2zNH3cDWQizl3r6O43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.147.0/24
Signature Algorithm: sha256WithRSAEncryption
60:07:2f:0e:60:ac:37:71:99:7e:87:3f:56:0b:67:3c:50:5c:
0d:36:af:36:7f:03:ca:8f:ce:bc:87:0c:44:3c:b4:b4:36:d8:
35:aa:71:bc:f8:6d:1e:45:2d:04:42:97:46:40:ad:f2:50:9a:
52:88:ec:97:52:ee:66:ed:79:a0:90:37:a8:fb:18:2a:b7:e3:
f8:76:72:ae:b1:c8:e6:16:36:cb:6b:70:cf:5a:8b:d2:ab:28:
2e:fb:69:8b:17:51:48:6b:7f:70:44:41:74:75:e5:79:81:71:
24:cb:16:2f:c4:28:85:ad:53:8d:d0:96:7a:a7:d6:ec:d2:ac:
7b:68:0f:16:a3:32:2b:58:5b:52:dd:ae:47:ed:bc:12:d3:a8:
31:75:1f:34:59:40:13:69:de:a5:73:a1:e7:b9:d9:cc:f0:d1:
75:60:0e:e1:86:29:f1:e4:2d:43:53:a7:73:c9:06:bd:4e:aa:
a0:db:c8:d6:76:4d:9f:10:d1:43:2f:6c:3b:ae:54:96:d4:20:
6c:17:49:f5:9a:aa:6d:b0:73:f1:2d:d2:7e:01:8d:dc:ce:ed:
79:ea:46:3c:2b:ce:71:88:2f:c5:8a:ee:3e:11:be:ef:d8:d7:
42:92:1b:0a:e7:bd:0e:ce:76:8c:ac:4c:85:fd:c0:c5:0e:87:
9a:35:a3:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/GriSdd94IAP8skd4Gsgs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYwODAzMDgxMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjdkNjQxODA0YTlkYjMzNDdkZGMwZDY0MjJjZTVkZWJlOGVlMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozSUm7s5MKPDAfnVU9Y95n4wpb6C
nA5XpcZeTUbrv3JYsVJIWuzIUOqSREpuEXa233/nF0/XbMIxfFzccGtjtwytB8by
0I2WmI0qkXOMYl773jbhszxzt1etpKBxeZSmOG/pRYF0d2CZ8DQ0n/SmX0Pq5yXC
yXAHgTp94v9sztQmHOM7kgzgoKdVc5AY72qclBcxjj+RbFZ1WoHZeOpp9Qb4m/eh
8zm9BXpa2UDIzySciw1KCNulcBp40mKhgkl1iaS0o/1Hox1t1StMwnYuDO9b+OoJ
pbHQwsCGki5OjsYzUFiB3+H45Tb0oimY34zqnWaE+egbYN7P6ogofJBauQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMt9ZBgEqdszR93A1kIs5d6+juN3MB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEveTMxa0dBU3Ayek5IM2NEV1FpemwzcjZPNDNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvQ2TMA0G
CSqGSIb3DQEBCwUAA4IBAQBgBy8OYKw3cZl+hz9WC2c8UFwNNq82fwPKj868hwxE
PLS0Ntg1qnG8+G0eRS0EQpdGQK3yUJpSiOyXUu5m7XmgkDeo+xgqt+P4dnKuscjm
FjbLa3DPWovSqygu+2mLF1FIa39wREF0deV5gXEkyxYvxCiFrVON0JZ6p9bs0qx7
aA8WozIrWFtS3a5H7bwS06gxdR80WUATad6lc6HnudnM8NF1YA7hhinx5C1DU6dz
yQa9Tqqg28jWdk2fENFDL2w7rlSW1CBsF0n1mqptsHPxLdJ+AY3czu156kY8K85x
iC/Fiu4+Eb7v2NdCkhsK570OznaMrEyF/cDFDoeaNaO3
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:45 2026 by rpki-client