Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/YX3c6AW5N8_1JIHkyaPZznDHltk.roa
File: YX3c6AW5N8_1JIHkyaPZznDHltk.roa (raw, json)
Hash identifier: 3r1UvDAubSkKwKvxzV7xHOO2pIO4ajxp8ZBIP+GibHo=
Subject key identifier: 61:7D:DC:E8:05:B9:37:CF:F5:24:81:E4:C9:A3:D9:CE:70:C7:96:D9
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A1586CFF1C9FBEC2F92E04F0CDBF702538
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/YX3c6AW5N8_1JIHkyaPZznDHltk.roa
Signing time: Tue 20 Oct 2026 08:28:20 +0000
ROA not before: Tue 20 Oct 2026 08:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207143
IP address blocks: 95.36.100.0/22 maxlen: 24
185.77.0.0/24 maxlen: 24
185.101.156.0/22 maxlen: 22
185.101.156.0/24 maxlen: 24
185.101.157.0/24 maxlen: 24
185.101.158.0/24 maxlen: 24
185.101.159.0/24 maxlen: 24
185.229.88.0/24 maxlen: 24
185.229.89.0/24 maxlen: 24
185.229.90.0/24 maxlen: 24
185.229.91.0/24 maxlen: 24
193.203.253.0/24 maxlen: 24
204.174.100.0/24 maxlen: 24
213.254.165.0/24 maxlen: 24
2a11:8b81::/32 maxlen: 32
2a11:8b82::/32 maxlen: 32
2a11:8b83:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:6c:ff:1c:9f:be:c2:f9:2e:04:f0:cd:bf:70:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Oct 20 08:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=617ddce805b937cff52481e4c9a3d9ce70c796d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:38:6a:44:12:18:74:60:6c:aa:25:35:39:
c3:fb:a8:05:3a:6b:39:75:f8:1e:92:9e:85:d0:07:
9d:9d:63:f0:77:f7:79:92:d3:10:0c:91:55:55:01:
3e:19:6e:c3:4b:80:7b:c1:2a:6c:5e:7f:3c:a3:31:
37:54:85:48:61:7a:09:df:18:fd:4b:94:40:a9:20:
a6:8f:80:0e:61:bc:e7:2c:09:f2:76:69:a2:18:ca:
5a:67:b7:5a:30:ab:f3:05:a9:3d:31:63:24:22:3e:
40:45:ea:8a:fe:ec:11:16:74:e9:c5:94:16:f1:99:
2b:35:38:b9:0f:09:ed:de:39:2d:1e:3f:92:1d:e3:
2d:d5:6f:1e:1e:70:1f:4a:8f:0b:39:e3:89:12:76:
78:ff:60:50:9e:4c:bf:10:55:7e:02:a6:cb:21:f7:
df:d0:cb:5a:61:44:cd:ee:2c:67:5f:de:2d:4d:0a:
95:c4:eb:fd:46:9a:cf:4a:db:30:46:60:2d:86:15:
14:38:70:e4:0e:42:4b:c6:50:cf:5d:18:2e:b9:ac:
d9:30:5b:f0:7f:c7:e5:1b:5a:68:d3:5f:bb:b8:01:
13:da:2f:79:da:1f:bd:fc:11:8d:39:91:b8:fc:76:
8f:ec:06:da:67:e0:29:f1:40:bc:08:0f:37:0d:42:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:DC:E8:05:B9:37:CF:F5:24:81:E4:C9:A3:D9:CE:70:C7:96:D9
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/YX3c6AW5N8_1JIHkyaPZznDHltk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.100.0/22
185.77.0.0/24
185.101.156.0/22
185.229.88.0/22
193.203.253.0/24
204.174.100.0/24
213.254.165.0/24
IPv6:
2a11:8b81::-2a11:8b82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8b83:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:fb:1a:7b:2b:95:61:7a:51:b6:60:36:0a:3a:db:45:e3:38:
e2:f0:5c:c7:5b:46:46:e4:15:79:06:03:21:f9:e1:cb:0d:49:
57:f7:c4:8d:f2:98:b0:fb:16:3d:b2:2e:37:75:21:62:a4:8e:
30:9b:85:a5:1d:9f:61:d5:83:65:1f:73:6f:04:1e:1f:46:48:
3c:fc:22:42:85:20:d9:fa:24:ac:cc:2f:7d:1d:f4:c7:32:18:
34:38:d6:03:94:fb:99:dc:0c:31:f0:ed:8e:55:c1:4c:73:9c:
23:49:5b:ee:a7:5d:c8:fc:f6:73:5b:e6:61:e6:11:3e:4b:11:
4a:bf:c5:f2:9e:05:f8:c4:9d:cc:61:ae:31:76:b7:69:24:81:
c9:ac:ba:5d:6e:43:62:dc:e9:a2:34:87:7d:5d:10:34:67:e8:
5d:99:00:5d:48:4c:f0:9f:e0:97:8e:8b:28:05:2f:e3:c0:1d:
df:a0:20:ea:1c:39:70:27:1e:69:fa:2d:ab:ca:4d:dd:70:40:
cc:90:f1:1c:05:26:03:f4:b7:bd:2a:e4:97:20:ec:fd:4f:08:
bb:d8:9e:28:c1:52:35:1d:83:b8:9d:49:21:b8:fd:9c:92:c4:
3b:93:c2:01:8d:43:66:0e:51:6d:42:4d:3e:cf:70:b3:ec:67:
fd:16:ac:25
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAaFYbP8cn77C+S4E8M2/cCU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjYxMDIwMDgyODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTdkZGNlODA1YjkzN2NmZjUyNDgxZTRjOWEzZDljZTcwYzc5NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PE4akQSGHRgbKolNTnD+6gFOms5
dfgekp6F0AednWPwd/d5ktMQDJFVVQE+GW7DS4B7wSpsXn88ozE3VIVIYXoJ3xj9
S5RAqSCmj4AOYbznLAnydmmiGMpaZ7daMKvzBak9MWMkIj5AReqK/uwRFnTpxZQW
8ZkrNTi5Dwnt3jktHj+SHeMt1W8eHnAfSo8LOeOJEnZ4/2BQnky/EFV+AqbLIfff
0MtaYUTN7ixnX94tTQqVxOv9RprPStswRmAthhUUOHDkDkJLxlDPXRguuazZMFvw
f8flG1po01+7uAET2i952h+9/BGNOZG4/HaP7AbaZ+Ap8UC8CA83DUKN2wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFGF93OgFuTfP9SSB5Mmj2c5wx5bZMB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEvWVgzYzZBVzVOOF8xSklIa3lhUFp6bkRIbHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzAwBAIAATAqAwQCXyRkAwQA
uU0AAwQCuWWcAwQCueVYAwQAwcv9AwQAzK5kAwQA1f6lMB8EAgACMBkwDgMFACoR
i4EDBQAqEYuCAwcAKhGLgwABMA0GCSqGSIb3DQEBCwUAA4IBAQBw+xp7K5VhelG2
YDYKOttF4zji8FzHW0ZG5BV5BgMh+eHLDUlX98SN8piw+xY9si43dSFipI4wm4Wl
HZ9h1YNlH3NvBB4fRkg8/CJChSDZ+iSszC99HfTHMhg0ONYDlPuZ3Awx8O2OVcFM
c5wjSVvup13I/PZzW+Zh5hE+SxFKv8XyngX4xJ3MYa4xdrdpJIHJrLpdbkNi3Omi
NId9XRA0Z+hdmQBdSEzwn+CXjosoBS/jwB3foCDqHDlwJx5p+i2ryk3dcEDMkPEc
BSYD9Le9KuSXIOz9Twi72J4owVI1HYO4nUkhuP2cksQ7k8IBjUNmDlFtQk0+z3Cz
7Gf9Fqwl
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:13:20 2026 by rpki-client