Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YNnbsjCJIAgXVTB9_O060B9JDoY.roa
File: YNnbsjCJIAgXVTB9_O060B9JDoY.roa (raw, json)
Hash identifier: SOQfD2LoFIFZdmt7Zrz8IoG/hy7jicshRbGi4+EK530=
Subject key identifier: 60:D9:DB:B2:30:89:20:08:17:55:30:7D:FC:ED:3A:D0:1F:49:0E:86
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFB13D7ABDE03C995B96FCE05D97F53BE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YNnbsjCJIAgXVTB9_O060B9JDoY.roa
Signing time: Thu 13 Aug 2026 12:23:29 +0000
ROA not before: Thu 13 Aug 2026 12:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
185.3.73.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:13:d7:ab:de:03:c9:95:b9:6f:ce:05:d9:7f:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 12:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60d9dbb2308920081755307dfced3ad01f490e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:73:b4:4e:6d:fd:70:97:9c:71:4c:71:85:
2e:69:ed:17:77:83:00:f8:45:09:09:f9:3c:31:92:
c2:db:f2:83:e6:6a:36:dc:54:87:13:d3:dc:80:2c:
73:52:9e:87:27:c0:9d:c0:9d:fe:7e:f3:94:31:b3:
bf:d7:cb:4d:75:59:66:4e:19:ca:fc:a1:f3:b9:41:
eb:f9:3d:82:79:db:5a:7f:ca:98:75:56:be:72:7d:
e2:9b:68:fe:c8:9c:d8:31:24:e2:cb:02:2e:26:8d:
3b:11:ba:f2:85:3d:e3:8a:45:38:f7:68:cf:db:1d:
64:d2:d6:7a:d2:14:85:14:63:ba:d1:0f:89:80:f1:
9c:5e:c3:e4:9e:5f:a4:0a:e7:31:36:80:ec:6b:f9:
29:cf:7c:08:e0:69:78:bd:a6:9c:3e:2d:d7:31:70:
4d:37:4e:2a:a0:09:78:2d:c8:10:44:01:a9:d9:8d:
5a:af:9a:b6:97:f4:17:8e:be:e4:65:a4:84:5a:44:
0b:ab:20:47:ff:ae:50:09:1e:9f:7b:87:70:4c:35:
36:23:ac:4d:00:dc:b7:1d:fd:4d:10:d1:6d:c8:21:
5e:8f:ae:d6:7f:f0:7f:09:1e:63:b3:7b:1a:1e:cc:
9c:98:b8:9b:87:72:7e:fd:8e:85:52:d4:29:46:ea:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:DB:B2:30:89:20:08:17:55:30:7D:FC:ED:3A:D0:1F:49:0E:86
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YNnbsjCJIAgXVTB9_O060B9JDoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.181.0/24
87.86.252.0/24
185.3.73.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cd:ee:31:e5:0c:39:ae:32:14:d5:4b:27:d4:4a:0c:24:6f:
4f:23:65:27:fa:b1:16:ed:bf:f1:57:00:ff:e4:58:b9:bd:e2:
e0:c6:27:ca:c3:b2:2b:49:b7:a9:c6:3e:ad:04:ef:06:c5:e9:
f2:5c:26:f1:5e:dd:be:5f:6b:81:3c:20:20:1e:7d:7f:b0:90:
4c:30:57:e0:d2:4c:1b:f4:ae:8e:10:71:ca:89:ec:6a:44:10:
21:ad:ec:98:f1:28:15:de:93:34:e0:c3:00:a6:0f:ac:59:e7:
80:a6:5d:d4:28:12:8d:f3:45:ac:30:ac:ce:89:a8:8b:fa:de:
e5:52:c7:da:87:aa:27:38:79:27:7f:13:2c:0b:85:1a:c6:05:
fe:32:b7:ea:b6:32:8b:64:a4:2b:4e:a1:42:45:a5:f6:4b:19:
bc:b7:de:30:8a:5a:ba:9a:08:73:d8:21:43:1a:9d:96:41:cf:
f5:09:0c:60:ad:54:94:b7:b1:cd:0d:4f:cc:2e:fe:34:1f:ac:
20:34:f4:8e:a5:39:5d:46:9b:b5:b7:b2:74:c0:18:33:0f:16:
a2:df:c8:99:10:bb:df:71:f3:8a:28:3a:01:2d:38:2f:f5:73:
ea:11:1f:88:a8:3d:50:32:2c:0b:a0:88:98:97:f1:e5:dc:54:
1c:1e:8a:d4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/7E9er3gPJlblvzgXZf1O+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODEzMTIyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGQ5ZGJiMjMwODkyMDA4MTc1NTMwN2RmY2VkM2FkMDFmNDkwZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9ztE5t/XCXnHFMcYUuae0Xd4MA
+EUJCfk8MZLC2/KD5mo23FSHE9PcgCxzUp6HJ8CdwJ3+fvOUMbO/18tNdVlmThnK
/KHzuUHr+T2Cedtaf8qYdVa+cn3im2j+yJzYMSTiywIuJo07EbryhT3jikU492jP
2x1k0tZ60hSFFGO60Q+JgPGcXsPknl+kCucxNoDsa/kpz3wI4Gl4vaacPi3XMXBN
N04qoAl4LcgQRAGp2Y1ar5q2l/QXjr7kZaSEWkQLqyBH/65QCR6fe4dwTDU2I6xN
ANy3Hf1NENFtyCFej67Wf/B/CR5js3saHsycmLibh3J+/Y6FUtQpRupQjQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGDZ27IwiSAIF1UwffztOtAfSQ6GMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvWU5uYnNqQ0pJQWdYVlRCOV9PMDYwQjlKRG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV1a1AwQA
V1b8AwQAuQNJAwQA1IZaMA0GCSqGSIb3DQEBCwUAA4IBAQC6ze4x5Qw5rjIU1Usn
1EoMJG9PI2Un+rEW7b/xVwD/5Fi5veLgxifKw7IrSbepxj6tBO8GxenyXCbxXt2+
X2uBPCAgHn1/sJBMMFfg0kwb9K6OEHHKiexqRBAhreyY8SgV3pM04MMApg+sWeeA
pl3UKBKN80WsMKzOiaiL+t7lUsfah6onOHknfxMsC4UaxgX+MrfqtjKLZKQrTqFC
RaX2Sxm8t94wilq6mghz2CFDGp2WQc/1CQxgrVSUt7HNDU/MLv40H6wgNPSOpTld
Rpu1t7J0wBgzDxai38iZELvfcfOKKDoBLTgv9XPqER+IqD1QMiwLoIiYl/Hl3FQc
HorU
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:33 2026 by rpki-client