Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Yb9vCcyQmQMFL5-scd9hVRKRUuk.roa
File: Yb9vCcyQmQMFL5-scd9hVRKRUuk.roa (raw, json)
Hash identifier: vaem7vSa0EXihJOMuPrl+fivQ7RqxRTgfRhViumpdEc=
Subject key identifier: 61:BF:6F:09:CC:90:99:03:05:2F:9F:AC:71:DF:61:55:12:91:52:E9
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019EE0568ECF1716E425C2154A90C979DEEB
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Yb9vCcyQmQMFL5-scd9hVRKRUuk.roa
Signing time: Fri 19 Jun 2026 14:43:49 +0000
ROA not before: Fri 19 Jun 2026 14:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206216
IP address blocks: 185.147.157.0/24 maxlen: 24
185.147.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:56:8e:cf:17:16:e4:25:c2:15:4a:90:c9:79:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 19 14:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61bf6f09cc909903052f9fac71df6155129152e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:db:42:3d:2e:d6:fd:c5:c0:9a:6f:74:6e:
77:f1:14:6c:58:95:8f:39:0f:a2:06:d1:d2:01:6c:
a0:da:5c:22:bf:cf:e7:6d:bb:f4:22:e0:ae:06:6b:
07:ad:0a:54:7d:22:fe:a1:2f:b3:22:dd:7b:ea:5f:
3b:ff:cc:47:09:ee:9d:b1:b8:af:ea:cb:d0:b7:73:
a2:11:b8:94:e2:8f:2f:c0:b9:c8:2f:3e:82:68:2f:
73:24:20:4a:64:4a:10:09:e9:13:95:43:e6:da:f8:
99:40:11:66:d2:1b:09:5a:d9:eb:78:0d:cf:fa:09:
1e:82:9d:19:64:a7:4c:8e:d1:4b:33:db:0b:ac:4d:
b7:80:df:e1:0f:89:0f:4b:85:27:5e:8d:85:bb:c4:
1f:56:45:51:8a:b4:e5:53:b3:e7:72:76:76:9d:50:
a9:ba:00:18:d5:3a:13:1f:0a:7f:8d:37:32:d8:4e:
f0:85:94:03:d9:d7:ea:1f:45:fd:fd:1c:18:ad:68:
5e:85:d5:c3:8a:0e:ef:80:c8:7b:09:ef:50:8b:02:
9f:cd:e4:17:f7:2d:46:45:02:0c:e2:0b:de:0f:64:
4e:78:e2:b9:cf:c6:4e:11:b5:a1:77:a9:42:cb:69:
61:a8:d5:89:b5:71:48:2e:b9:8f:6e:f2:11:08:bb:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:6F:09:CC:90:99:03:05:2F:9F:AC:71:DF:61:55:12:91:52:E9
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Yb9vCcyQmQMFL5-scd9hVRKRUuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.157.0/24
185.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
39:46:3d:bb:ba:1b:a5:1e:5c:45:3c:4d:f6:a4:26:0c:8a:1c:
42:89:f0:44:fd:ce:d0:b1:fa:82:1d:48:cf:f8:cb:b9:d3:4f:
f2:14:4d:18:1c:36:85:0b:5d:e2:81:c5:02:48:29:fc:8b:c6:
af:0b:1c:9d:0c:61:ad:ab:c8:c2:56:d6:d8:00:46:9a:74:c0:
f6:ec:b9:5e:e9:39:28:6d:60:3d:eb:2e:51:ba:f6:be:b5:5d:
0d:34:7a:15:4b:9f:df:26:5c:52:d3:23:57:37:1b:d0:50:65:
65:86:53:15:f9:bc:29:5d:ff:64:15:ad:a5:ef:2f:96:11:ba:
d2:f1:be:f9:0f:0d:cf:d7:f8:75:3e:8a:24:7f:64:f4:7e:3e:
70:ee:09:33:f0:1f:51:a4:de:b8:d2:cb:1d:b5:d0:1f:1c:c4:
84:86:18:43:14:09:fa:75:79:2e:6e:2a:09:a6:73:42:11:01:
e2:87:d6:90:03:34:b0:02:fc:d8:13:98:9c:2f:fc:ef:4e:f5:
3a:cb:d5:03:cb:c2:8f:14:e0:a3:8c:6d:5f:a6:97:ab:31:51:
5f:de:57:61:4d:43:d3:d2:e2:ad:c7:58:9c:0b:51:52:89:35:
be:b4:a5:60:b1:f1:f0:e4:c5:63:35:20:04:bc:bf:ab:a9:09:
ed:84:e4:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7gVo7PFxbkJcIVSpDJed7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNjE5MTQ0MzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWJmNmYwOWNjOTA5OTAzMDUyZjlmYWM3MWRmNjE1NTEyOTE1MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIjbQj0u1v3FwJpvdG538RRsWJWP
OQ+iBtHSAWyg2lwiv8/nbbv0IuCuBmsHrQpUfSL+oS+zIt176l87/8xHCe6dsbiv
6svQt3OiEbiU4o8vwLnILz6CaC9zJCBKZEoQCekTlUPm2viZQBFm0hsJWtnreA3P
+gkegp0ZZKdMjtFLM9sLrE23gN/hD4kPS4UnXo2Fu8QfVkVRirTlU7PncnZ2nVCp
ugAY1ToTHwp/jTcy2E7whZQD2dfqH0X9/RwYrWhehdXDig7vgMh7Ce9QiwKfzeQX
9y1GRQIM4gveD2ROeOK5z8ZOEbWhd6lCy2lhqNWJtXFILrmPbvIRCLt8RwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGG/bwnMkJkDBS+frHHfYVUSkVLpMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvWWI5dkNjeVFtUU1GTDUtc2NkOWhWUktSVXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZOdAwQA
uZOfMA0GCSqGSIb3DQEBCwUAA4IBAQA5Rj27uhulHlxFPE32pCYMihxCifBE/c7Q
sfqCHUjP+Mu500/yFE0YHDaFC13igcUCSCn8i8avCxydDGGtq8jCVtbYAEaadMD2
7Lle6TkobWA96y5Ruva+tV0NNHoVS5/fJlxS0yNXNxvQUGVlhlMV+bwpXf9kFa2l
7y+WEbrS8b75Dw3P1/h1Pookf2T0fj5w7gkz8B9RpN640ssdtdAfHMSEhhhDFAn6
dXkubioJpnNCEQHih9aQAzSwAvzYE5icL/zvTvU6y9UDy8KPFOCjjG1fpperMVFf
3ldhTUPT0uKtx1icC1FSiTW+tKVgsfHw5MVjNSAEvL+rqQnthORe
-----END CERTIFICATE-----
Generated at Sun Jun 28 17:23:44 2026 by rpki-client