Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/YQtK_UbMJvf8WTAebuKqCCkMMQ0.roa
File: YQtK_UbMJvf8WTAebuKqCCkMMQ0.roa (raw, json)
Hash identifier: hL7uRQGtZz8ZmJYpUdPRsGAire3WIBms3Thye2fEwqM=
Subject key identifier: 61:0B:4A:FD:46:CC:26:F7:FC:59:30:1E:6E:E2:AA:08:29:0C:31:0D
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A0F6B9121B2C52433C42F9BB0C1118233C
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/YQtK_UbMJvf8WTAebuKqCCkMMQ0.roa
Signing time: Thu 01 Oct 2026 09:08:39 +0000
ROA not before: Thu 01 Oct 2026 09:08:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12926
IP address blocks: 84.232.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b9:12:1b:2c:52:43:3c:42:f9:bb:0c:11:18:23:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Oct 1 09:08:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=610b4afd46cc26f7fc59301e6ee2aa08290c310d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:bf:a0:55:2d:67:6c:e0:92:04:8a:ba:5a:
ad:fc:47:43:d0:c2:eb:c0:93:2e:91:b3:e1:ab:4b:
64:c6:7d:77:bf:2f:3e:65:00:fe:29:4f:25:87:37:
72:19:d2:0b:ef:22:c6:6e:38:e7:5e:c6:5a:cd:15:
b7:e9:bb:12:0e:9f:47:ff:68:73:2f:71:80:1c:9a:
2f:6a:cd:9c:6e:29:2c:20:f8:a0:64:e5:3d:ba:aa:
98:5b:ab:23:0b:2d:26:0e:d0:ca:59:a5:ed:78:5a:
3c:60:d2:2a:07:fa:54:39:1c:48:39:5a:02:54:c1:
cf:e5:36:dd:36:62:d7:ef:cf:c4:72:7a:6c:de:1e:
62:68:05:e4:5c:51:a8:33:b5:15:4c:92:03:de:31:
81:75:4c:38:36:04:e2:07:61:21:a8:2b:08:87:a7:
ca:50:13:6d:69:f3:c3:7c:66:3e:83:b8:c8:00:c0:
92:1e:ad:ae:ea:6f:74:43:33:c4:1c:5d:8a:08:d6:
be:9f:f4:06:b1:10:76:4a:ea:80:d3:f9:c4:e4:d5:
89:34:df:f8:89:38:59:7f:62:8a:07:40:08:d5:3f:
af:fb:23:db:91:2e:fd:a1:a6:02:79:2b:85:d3:a1:
9a:6b:46:47:aa:13:e5:08:0b:5a:b3:1d:21:83:26:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:4A:FD:46:CC:26:F7:FC:59:30:1E:6E:E2:AA:08:29:0C:31:0D
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/YQtK_UbMJvf8WTAebuKqCCkMMQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:85:08:ff:0f:5b:60:ec:54:6f:14:6a:10:3c:07:9b:6a:c9:
56:39:c8:a2:d8:cf:43:b2:3b:36:96:08:93:dc:68:a2:3a:85:
e6:e7:78:02:bc:5d:cd:da:62:b7:3e:f4:2f:59:99:64:17:63:
0e:62:76:4a:45:3a:10:2a:b2:d8:ac:a7:bc:7c:47:e7:74:39:
6f:26:e0:4b:ce:36:41:f8:ae:46:e8:e4:ad:dd:02:17:33:7f:
0c:38:de:e8:c7:71:9e:27:9a:f0:50:ae:fa:8d:6a:0f:a1:33:
61:cd:1d:3e:27:e0:60:59:67:37:40:7f:30:30:73:05:85:4c:
5b:f9:b5:c1:dc:e4:9e:d0:bc:fd:80:73:ee:22:d1:49:ed:4e:
cf:c9:a5:93:b7:62:8f:ac:b9:d8:96:61:69:a2:21:34:e7:52:
dd:82:53:d4:ba:f1:e2:a9:13:09:78:a2:b6:c7:d8:00:7a:ac:
39:29:c9:45:38:0f:23:74:6a:28:c2:9f:68:a8:ae:8e:85:5f:
4a:f9:7a:42:ba:78:80:fc:c6:44:ed:8f:a1:10:db:e6:51:ae:
9b:e0:1d:5b:22:7c:f7:e0:4e:30:69:8d:93:69:df:32:22:32:
b9:72:03:a1:6c:bf:ce:f8:31:e1:71:92:d4:58:58:ae:50:b4:
09:56:ef:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD2uRIbLFJDPEL5uwwRGCM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjYxMDAxMDkwODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTBiNGFmZDQ2Y2MyNmY3ZmM1OTMwMWU2ZWUyYWEwODI5MGMzMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtau/oFUtZ2zgkgSKulqt/EdD0MLr
wJMukbPhq0tkxn13vy8+ZQD+KU8lhzdyGdIL7yLGbjjnXsZazRW36bsSDp9H/2hz
L3GAHJovas2cbiksIPigZOU9uqqYW6sjCy0mDtDKWaXteFo8YNIqB/pUORxIOVoC
VMHP5TbdNmLX78/Ecnps3h5iaAXkXFGoM7UVTJID3jGBdUw4NgTiB2EhqCsIh6fK
UBNtafPDfGY+g7jIAMCSHq2u6m90QzPEHF2KCNa+n/QGsRB2SuqA0/nE5NWJNN/4
iThZf2KKB0AI1T+v+yPbkS79oaYCeSuF06Gaa0ZHqhPlCAtasx0hgyYo2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGELSv1GzCb3/FkwHm7iqggpDDENMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvWVF0S19VYk1KdmY4V1RBZWJ1S3FDQ2tNTVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOhdMA0G
CSqGSIb3DQEBCwUAA4IBAQDNhQj/D1tg7FRvFGoQPAebaslWOcii2M9Dsjs2lgiT
3GiiOoXm53gCvF3N2mK3PvQvWZlkF2MOYnZKRToQKrLYrKe8fEfndDlvJuBLzjZB
+K5G6OSt3QIXM38MON7ox3GeJ5rwUK76jWoPoTNhzR0+J+BgWWc3QH8wMHMFhUxb
+bXB3OSe0Lz9gHPuItFJ7U7PyaWTt2KPrLnYlmFpoiE051LdglPUuvHiqRMJeKK2
x9gAeqw5KclFOA8jdGoowp9oqK6OhV9K+XpCuniA/MZE7Y+hENvmUa6b4B1bInz3
4E4waY2Tad8yIjK5cgOhbL/O+DHhcZLUWFiuULQJVu9W
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:55 2026 by rpki-client