Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ygw0avQsrrQ1WzJl2ooWEnEgqaE.roa
File: ygw0avQsrrQ1WzJl2ooWEnEgqaE.roa (raw, json)
Hash identifier: RrRHzGLNsUnYr9JyyAHI4qIjDnZ3DEinjGhZIBy7PgE=
Subject key identifier: CA:0C:34:6A:F4:2C:AE:B4:35:5B:32:65:DA:8A:16:12:71:20:A9:A1
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01A00CFA246E170E90C0F802A0AD51E26430
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ygw0avQsrrQ1WzJl2ooWEnEgqaE.roa
Signing time: Sun 16 Aug 2026 23:48:34 +0000
ROA not before: Sun 16 Aug 2026 23:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57797
IP address blocks: 81.27.84.0/24 maxlen: 24
209.131.64.0/21 maxlen: 24
2a12:8ac0::/29 maxlen: 48
2a12:8ac0::/40 maxlen: 48
2a12:8ac1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:fa:24:6e:17:0e:90:c0:f8:02:a0:ad:51:e2:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Aug 16 23:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca0c346af42caeb4355b3265da8a16127120a9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:2a:8c:d4:de:b8:d5:10:57:3c:a4:d1:af:
bd:c7:2f:69:05:af:3d:79:f5:54:ec:a5:74:b0:7c:
ca:0e:6a:bb:d0:5b:6a:76:88:11:13:95:c6:84:9a:
f3:4e:7d:1c:35:9f:87:85:04:64:df:da:4e:78:db:
d0:f8:c5:12:77:f9:02:c6:1f:3d:64:b5:7f:50:ba:
fd:c8:2a:cc:5a:60:82:a6:ee:a0:fc:ad:77:b8:7e:
d9:8f:87:e4:d2:85:75:15:17:95:3d:8a:86:0d:a4:
bc:91:22:bb:12:a2:37:61:49:6d:92:e8:9c:03:d5:
3e:6a:05:a7:d0:3a:21:ec:91:f3:8b:a7:59:2e:0f:
34:ab:00:bf:78:1b:33:5a:cf:48:6b:b7:9f:75:37:
d5:cd:32:c4:74:62:6e:1f:f4:5f:7f:6c:ea:34:3a:
21:4c:73:24:a2:ba:2a:7d:91:2c:99:45:4a:2b:b3:
82:8b:ac:9b:52:ed:e6:4e:f0:1a:f6:8a:a5:35:56:
1f:e1:21:8b:63:69:b9:94:bf:cc:3c:e7:38:84:c5:
67:af:6b:5f:7d:bd:ce:2d:fa:a1:4a:58:f6:36:e2:
e4:52:69:90:c9:86:41:76:ff:45:2a:ae:f6:c4:d5:
f9:85:44:59:6c:bc:e4:2e:81:e7:b1:c0:e6:a1:84:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:34:6A:F4:2C:AE:B4:35:5B:32:65:DA:8A:16:12:71:20:A9:A1
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ygw0avQsrrQ1WzJl2ooWEnEgqaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.84.0/24
209.131.64.0/21
IPv6:
2a12:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
58:3e:70:a2:24:d9:ba:2a:cb:52:6d:d0:49:90:34:30:a6:96:
11:df:cf:43:8f:a8:cd:95:2c:83:24:0d:d6:50:19:ae:9f:66:
84:af:37:7f:c6:95:9e:3e:53:36:52:5e:8d:d4:1c:3b:68:2b:
8f:ac:3f:7b:88:76:8c:c7:cc:03:46:ba:42:ac:fc:47:83:e9:
c4:11:e4:ae:c5:b4:8b:1e:bd:ad:a3:bd:34:ef:39:8a:0f:9d:
ec:e8:bf:68:82:f0:ff:7f:d9:36:6d:8f:fe:0e:d0:0e:dc:20:
12:37:26:9d:8d:1e:06:b3:de:08:36:81:68:b3:9d:e1:5e:a1:
b2:d2:5a:63:24:0a:49:66:b1:dd:20:66:f8:19:65:fe:7b:57:
38:53:a9:ab:e2:13:fe:e7:c1:36:15:41:57:1c:6f:84:13:9e:
c0:7c:d0:78:8b:e2:c4:c5:d6:4a:8f:94:13:01:43:1c:93:8a:
ff:51:cb:45:55:14:b0:14:c3:cc:91:d7:c1:de:07:cf:b8:fe:
f9:85:36:50:91:20:58:de:60:3d:d5:95:1d:d4:39:73:0a:a2:
09:0e:56:48:3f:7a:74:4f:27:88:08:b9:82:53:09:3f:b8:3c:
d8:0f:3d:9b:15:5a:30:68:d1:b1:f2:fb:84:1d:09:cc:c1:eb:
3e:5d:a7:eb
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaAM+iRuFw6QwPgCoK1R4mQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjYwODE2MjM0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTBjMzQ2YWY0MmNhZWI0MzU1YjMyNjVkYThhMTYxMjcxMjBhOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7IqjNTeuNUQVzyk0a+9xy9pBa89
efVU7KV0sHzKDmq70FtqdogRE5XGhJrzTn0cNZ+HhQRk39pOeNvQ+MUSd/kCxh89
ZLV/ULr9yCrMWmCCpu6g/K13uH7Zj4fk0oV1FReVPYqGDaS8kSK7EqI3YUltkuic
A9U+agWn0Doh7JHzi6dZLg80qwC/eBszWs9Ia7efdTfVzTLEdGJuH/Rff2zqNDoh
THMkoroqfZEsmUVKK7OCi6ybUu3mTvAa9oqlNVYf4SGLY2m5lL/MPOc4hMVnr2tf
fb3OLfqhSlj2NuLkUmmQyYZBdv9FKq72xNX5hURZbLzkLoHnscDmoYQlcQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMoMNGr0LK60NVsyZdqKFhJxIKmhMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEveWd3MGF2UXNyclExV3pKbDJvb1dFbkVncWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAURtUAwQD
0YNAMA0EAgACMAcDBQMqEorAMA0GCSqGSIb3DQEBCwUAA4IBAQBYPnCiJNm6KstS
bdBJkDQwppYR389Dj6jNlSyDJA3WUBmun2aErzd/xpWePlM2Ul6N1Bw7aCuPrD97
iHaMx8wDRrpCrPxHg+nEEeSuxbSLHr2to7007zmKD53s6L9ogvD/f9k2bY/+DtAO
3CASNyadjR4Gs94INoFos53hXqGy0lpjJApJZrHdIGb4GWX+e1c4U6mr4hP+58E2
FUFXHG+EE57AfNB4i+LExdZKj5QTAUMck4r/UctFVRSwFMPMkdfB3gfPuP75hTZQ
kSBY3mA91ZUd1DlzCqIJDlZIP3p0TyeICLmCUwk/uDzYDz2bFVowaNGx8vuEHQnM
wes+Xafr
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:28 2026 by rpki-client