Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_YpGcBkP_KoPPnoXqcXss9P_cyY.roa
File: _YpGcBkP_KoPPnoXqcXss9P_cyY.roa (raw, json)
Hash identifier: nPGVn8E01QK+mjZE0ewQ8dI4xMvCFrCNa4pa9pKb0sQ=
Subject key identifier: FD:8A:46:70:19:0F:FC:AA:0F:3E:7A:17:A9:C5:EC:B3:D3:FF:73:26
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A0F2F46C477E86F71EADB43264EA7A37FD
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_YpGcBkP_KoPPnoXqcXss9P_cyY.roa
Signing time: Wed 30 Sep 2026 15:34:59 +0000
ROA not before: Wed 30 Sep 2026 15:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 85.92.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:f4:6c:47:7e:86:f7:1e:ad:b4:32:64:ea:7a:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 30 15:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd8a4670190ffcaa0f3e7a17a9c5ecb3d3ff7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:b9:bb:a9:d2:9e:6b:b2:df:95:06:60:76:
99:02:31:96:34:61:f2:7d:5c:1a:fb:9a:3e:9d:d3:
b9:30:f8:7c:55:9d:65:3d:85:2f:a6:94:42:13:ee:
5d:ab:51:bf:bc:e8:c7:ac:ae:5a:23:4c:2a:cd:4c:
2c:84:7d:ce:9c:91:87:38:49:59:9a:75:36:89:af:
e4:8b:49:0c:e4:a4:b9:a0:0b:ad:ee:e8:f9:06:44:
c6:2b:ae:f1:25:4e:97:65:ce:be:67:e7:a7:9b:91:
60:67:e5:f0:c2:3c:d8:ab:90:76:24:0b:c5:f6:0e:
d3:33:6d:4b:e9:a3:5a:ab:1c:f1:1c:f8:c7:a5:0c:
d5:7d:90:bd:e4:f0:57:3c:a6:3b:8a:62:03:47:d6:
71:08:f4:85:64:fd:41:14:70:6c:f1:e4:6e:86:17:
fa:ec:0b:66:13:c5:ac:49:69:7d:7e:51:d8:77:64:
7c:14:7a:9d:98:fa:ef:06:f6:2f:c2:db:0c:ca:38:
50:6c:f5:a7:04:ac:ee:5b:9b:98:78:ca:3e:7b:96:
3b:7e:40:9a:ad:07:b1:da:49:fd:ba:d6:0b:26:b1:
f8:e9:46:0f:c4:c4:91:c8:e3:7c:84:39:ab:9f:9b:
f8:46:15:c3:18:e8:c5:53:9f:1b:d2:f3:48:32:49:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:46:70:19:0F:FC:AA:0F:3E:7A:17:A9:C5:EC:B3:D3:FF:73:26
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_YpGcBkP_KoPPnoXqcXss9P_cyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:da:77:74:8b:f4:93:fc:8f:17:83:0f:59:08:9f:cb:4e:94:
2e:ef:ef:b3:85:b2:53:e8:a7:37:fd:c7:b0:90:4f:11:a9:7c:
a3:ae:35:9f:4b:57:4a:a4:8e:44:7d:8c:8c:9c:ce:4d:9c:53:
7a:11:95:88:0d:b8:31:e9:8b:4d:37:01:8e:29:b9:9e:01:3a:
d5:66:39:1e:31:48:45:38:37:3e:55:a4:93:fe:cf:f9:6c:6f:
57:d4:49:aa:9a:fe:2f:d7:c5:d3:f5:92:89:ba:df:9d:64:13:
cd:4e:65:7f:77:fd:51:44:96:38:ca:ff:f4:3e:2b:c7:7a:22:
cf:8e:ca:ac:a9:98:84:a1:2b:42:08:3a:60:6b:e6:13:5b:3d:
3c:44:af:ec:7a:bd:df:37:cc:12:f9:1c:54:fb:8a:67:97:9d:
04:29:6d:99:2b:a7:02:d1:de:ad:b3:39:a7:9c:b5:c0:76:56:
9b:b4:4d:fb:60:c1:4a:25:f2:2c:c8:47:99:bb:1f:16:cb:9a:
ab:a8:7b:98:83:0d:40:42:5f:27:5f:39:2e:9b:2f:a1:93:17:
1e:f3:72:db:ce:22:e1:c2:ad:0b:54:04:b6:e2:f3:02:37:84:
7c:5d:7f:ff:56:83:e6:50:eb:43:d9:e4:c8:62:c8:74:eb:05:
be:9b:dd:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDy9GxHfob3Hq20MmTqejf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjYwOTMwMTUzNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDhhNDY3MDE5MGZmY2FhMGYzZTdhMTdhOWM1ZWNiM2QzZmY3MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G65u6nSnmuy35UGYHaZAjGWNGHy
fVwa+5o+ndO5MPh8VZ1lPYUvppRCE+5dq1G/vOjHrK5aI0wqzUwshH3OnJGHOElZ
mnU2ia/ki0kM5KS5oAut7uj5BkTGK67xJU6XZc6+Z+enm5FgZ+XwwjzYq5B2JAvF
9g7TM21L6aNaqxzxHPjHpQzVfZC95PBXPKY7imIDR9ZxCPSFZP1BFHBs8eRuhhf6
7AtmE8WsSWl9flHYd2R8FHqdmPrvBvYvwtsMyjhQbPWnBKzuW5uYeMo+e5Y7fkCa
rQex2kn9utYLJrH46UYPxMSRyON8hDmrn5v4RhXDGOjFU58b0vNIMkmpzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2KRnAZD/yqDz56F6nF7LPT/3MmMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvX1lwR2NCa1BfS29QUG5vWHFjWHNzOVBfY3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxzMA0G
CSqGSIb3DQEBCwUAA4IBAQBv2nd0i/ST/I8Xgw9ZCJ/LTpQu7++zhbJT6Kc3/cew
kE8RqXyjrjWfS1dKpI5EfYyMnM5NnFN6EZWIDbgx6YtNNwGOKbmeATrVZjkeMUhF
ODc+VaST/s/5bG9X1Emqmv4v18XT9ZKJut+dZBPNTmV/d/1RRJY4yv/0PivHeiLP
jsqsqZiEoStCCDpga+YTWz08RK/ser3fN8wS+RxU+4pnl50EKW2ZK6cC0d6tszmn
nLXAdlabtE37YMFKJfIsyEeZux8Wy5qrqHuYgw1AQl8nXzkumy+hkxce83LbziLh
wq0LVAS24vMCN4R8XX//VoPmUOtD2eTIYsh06wW+m93Y
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:19 2026 by rpki-client