Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa
File: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (raw, json)
Hash identifier: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=
Subject key identifier: CA:7F:94:43:5A:55:25:90:C0:04:C5:4B:78:9F:67:86:A5:E0:0A:99
Certificate issuer: /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial: 019EF9AA949F60B2199C1FF0A449361584A9
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa
Signing time: Wed 24 Jun 2026 12:46:06 +0000
ROA not before: Wed 24 Jun 2026 12:46:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209007
IP address blocks: 185.50.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:aa:94:9f:60:b2:19:9c:1f:f0:a4:49:36:15:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749304120ce64942efb3896623b386a041dcb364
Validity
Not Before: Jun 24 12:46:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca7f94435a552590c004c54b789f6786a5e00a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:4e:60:2e:d1:75:b7:83:72:63:fe:de:42:
80:af:ea:57:b7:4d:50:24:55:3a:c1:b4:25:12:2d:
5e:ea:5b:9a:46:17:30:d0:d8:a5:48:eb:5b:20:e9:
b9:8b:a6:2f:df:e9:7b:27:9e:24:6f:03:38:e7:42:
a6:2e:6b:67:e7:30:52:57:24:78:c2:9e:02:bb:51:
b5:e3:65:d6:99:df:dd:f8:88:f7:b9:d6:f7:92:de:
95:f7:10:fc:75:ce:9a:4c:ec:66:ec:ba:7e:61:82:
dd:ee:1d:7d:a3:58:ce:63:4a:28:a4:c2:23:50:92:
e3:11:54:9a:5f:70:0f:f6:2b:e1:e4:06:3b:8b:97:
69:c7:36:7c:a5:1c:3c:48:d5:a4:db:ca:d4:c1:ac:
36:9d:ae:08:6f:5a:c7:60:90:44:c0:db:a5:c9:a0:
a6:53:cc:0e:04:c7:72:92:b0:1f:5a:d1:7f:d2:b5:
02:36:f6:89:0a:16:45:32:85:5c:d3:71:df:ad:e4:
a3:11:56:b2:ef:41:4a:4c:fc:95:54:16:99:d4:17:
61:91:17:53:95:ce:20:01:9a:62:f3:1d:90:54:20:
1e:95:59:83:00:ec:71:72:e6:36:c3:85:2d:97:04:
a2:e5:33:53:5b:68:e9:36:73:94:9a:4b:40:2a:b3:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:94:43:5A:55:25:90:C0:04:C5:4B:78:9F:67:86:A5:E0:0A:99
X509v3 Authority Key Identifier:
keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fd:1a:83:2a:f3:5c:19:e9:c1:88:d1:b6:9f:14:85:1a:fe:
40:f0:33:a0:15:af:49:d0:fd:de:34:09:df:d0:5b:37:6f:bc:
1a:57:40:de:a4:d9:b8:2c:de:2c:f0:11:a8:f6:fb:63:ff:bc:
c4:1e:0c:43:c6:87:c9:09:bd:2e:c0:fc:da:ac:a6:19:94:4a:
7c:46:05:62:e8:9a:6a:eb:c4:4d:08:5f:71:c5:a6:01:23:59:
90:e5:c3:e6:27:c2:77:3b:41:a9:53:3c:18:ac:f1:4b:4b:8c:
4e:b2:3e:c4:48:8f:9e:91:7a:33:f9:17:4d:c0:45:1c:93:8b:
08:e7:6f:a5:26:2d:ae:7e:37:73:43:15:ed:57:2b:ed:7b:a4:
cc:b4:1b:71:cf:1c:76:5d:5d:4d:71:2b:80:8f:47:5c:b4:22:
73:88:6d:de:9f:c4:f6:70:a9:3c:c1:5a:e7:87:8a:b5:6b:78:
92:e5:9b:d6:07:26:a9:77:5e:eb:21:e4:26:fb:c1:c2:b8:ac:
05:24:26:00:f0:45:0b:23:38:5b:db:2f:6f:2e:f1:44:16:17:
95:03:b3:b1:60:e2:32:2f:d5:ad:88:13:d2:ae:08:dd:41:42:
f5:c2:c6:54:6b:75:8b:0a:13:aa:cb:7b:70:52:61:9a:76:57:
d1:b2:2c:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ75qpSfYLIZnB/wpEk2FYSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTMwNDEyMGNlNjQ5NDJlZmIzODk2NjIzYjM4NmEwNDFk
Y2IzNjQwHhcNMjYwNjI0MTI0NjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdmOTQ0MzVhNTUyNTkwYzAwNGM1NGI3ODlmNjc4NmE1ZTAwYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6JOYC7RdbeDcmP+3kKAr+pXt01Q
JFU6wbQlEi1e6luaRhcw0NilSOtbIOm5i6Yv3+l7J54kbwM450KmLmtn5zBSVyR4
wp4Cu1G142XWmd/d+Ij3udb3kt6V9xD8dc6aTOxm7Lp+YYLd7h19o1jOY0oopMIj
UJLjEVSaX3AP9ivh5AY7i5dpxzZ8pRw8SNWk28rUwaw2na4Ib1rHYJBEwNulyaCm
U8wOBMdykrAfWtF/0rUCNvaJChZFMoVc03HfreSjEVay70FKTPyVVBaZ1BdhkRdT
lc4gAZpi8x2QVCAelVmDAOxxcuY2w4UtlwSi5TNTW2jpNnOUmktAKrOyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMp/lENaVSWQwATFS3ifZ4al4AqZMB8GA1UdIwQY
MBaAFHSTBBIM5klC77OJZiOzhqBB3LNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTIt
NDMwOGIxMDU0MTdmLzEveW4tVVExcFZKWkRBQk1WTGVKOW5ocVhnQ3BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTItNDMwOGIxMDU0MTdm
LzEvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTKnMA0G
CSqGSIb3DQEBCwUAA4IBAQBv/RqDKvNcGenBiNG2nxSFGv5A8DOgFa9J0P3eNAnf
0Fs3b7waV0DepNm4LN4s8BGo9vtj/7zEHgxDxofJCb0uwPzarKYZlEp8RgVi6Jpq
68RNCF9xxaYBI1mQ5cPmJ8J3O0GpUzwYrPFLS4xOsj7ESI+ekXoz+RdNwEUck4sI
52+lJi2ufjdzQxXtVyvte6TMtBtxzxx2XV1NcSuAj0dctCJziG3en8T2cKk8wVrn
h4q1a3iS5ZvWByapd17rIeQm+8HCuKwFJCYA8EULIzhb2y9vLvFEFheVA7OxYOIy
L9WtiBPSrgjdQUL1wsZUa3WLChOqy3twUmGadlfRsiwi
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:12 2026 by rpki-client