Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YW_X8L9Au8tijNngVXDfxdaNo-c.roa
File: YW_X8L9Au8tijNngVXDfxdaNo-c.roa (raw, json)
Hash identifier: HEBbUhk1BfbNCwsMV5Rd6ZmZjZjSo0gEduDGgVNNIlY=
Subject key identifier: 61:6F:D7:F0:BF:40:BB:CB:62:8C:D9:E0:55:70:DF:C5:D6:8D:A3:E7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6869D98E5BC7497DA83FD9F1F7BF55A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YW_X8L9Au8tijNngVXDfxdaNo-c.roa
Signing time: Mon 03 Aug 2026 07:28:58 +0000
ROA not before: Mon 03 Aug 2026 07:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 109.176.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:9d:98:e5:bc:74:97:da:83:fd:9f:1f:7b:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=616fd7f0bf40bbcb628cd9e05570dfc5d68da3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:2e:ee:28:be:c9:c0:60:66:7b:37:95:17:
4a:51:69:eb:f2:02:8a:d5:3e:b2:a3:1d:99:91:56:
09:c7:50:52:27:67:cf:4e:8f:d6:d6:f6:ac:a0:c2:
1c:a6:99:65:85:d6:f8:28:2b:34:de:42:ea:68:d7:
65:11:29:48:7a:46:1f:b1:7b:68:a9:52:e0:e6:9a:
07:3f:78:8e:15:2d:bf:da:1f:fa:6b:c1:26:5b:dc:
95:f8:4e:43:93:f3:6b:0c:ee:7e:1e:7c:41:c8:78:
c4:7a:2f:fb:7d:6a:00:80:f3:78:71:58:f0:44:f5:
c4:94:ce:6d:ab:86:f7:94:d2:46:71:99:8d:82:6f:
f5:5c:fb:b7:19:d1:52:17:e1:5a:b3:8e:3b:24:cc:
52:be:8c:57:ab:b3:ce:e7:c1:93:06:85:1b:5c:08:
30:68:9f:10:e3:46:7b:6e:98:7b:29:92:d9:f7:e8:
83:3d:a8:c9:ba:ea:b2:a9:3d:0c:9a:0e:7a:30:1b:
49:52:f4:12:ba:73:0e:27:9a:fe:01:14:ee:cb:d9:
83:a6:d4:b4:9c:6f:c0:93:7a:69:44:c3:37:17:4a:
25:39:ed:f7:a7:5f:94:ca:46:78:73:40:b1:9f:42:
c3:5d:e9:4c:a6:8f:93:cf:05:7f:6e:e8:98:77:4d:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:D7:F0:BF:40:BB:CB:62:8C:D9:E0:55:70:DF:C5:D6:8D:A3:E7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YW_X8L9Au8tijNngVXDfxdaNo-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:95:ea:a1:73:eb:62:6b:87:55:09:9f:64:a1:c7:ad:11:
2e:cb:ff:da:04:6e:c0:24:af:33:93:c0:f0:68:4b:a1:39:b0:
35:40:3f:b2:25:0d:49:90:ba:b0:a0:a3:eb:10:60:ce:80:0e:
fc:84:00:34:00:67:91:72:1a:a8:8e:8c:9b:a5:27:72:cd:47:
0c:66:4b:5c:09:01:f9:c2:c4:fc:22:60:0a:6c:8d:1f:1d:06:
ab:4a:13:d2:93:6c:76:36:5f:1d:fc:b2:f6:c6:ff:29:b8:5c:
5a:18:71:2e:1f:77:ee:64:d5:a4:f5:e0:dd:43:b4:b0:90:ce:
a0:03:01:37:47:26:c3:a6:fd:b6:d4:3a:5d:5f:f4:d6:ed:52:
c5:26:e0:23:ab:c7:89:68:3c:0a:fb:70:0a:b5:a7:11:74:99:
85:75:f0:02:eb:3b:86:a8:8a:cd:f9:5d:46:65:66:74:ab:ef:
be:0f:2f:b7:ea:ea:8b:49:b3:4e:14:a8:65:41:18:d4:d5:6b:
e9:61:49:91:4c:08:1f:83:7d:4e:b2:db:16:7d:b4:ce:0b:5f:
cf:d9:b4:ee:d4:4b:f8:77:98:c0:9b:ce:88:9f:b6:47:86:49:
1d:b8:9a:f3:8b:4c:17:2e:02:03:ed:c3:1d:5f:fc:72:83:6b:
21:a6:1f:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/Ghp2Y5bx0l9qD/Z8fe/VaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODAzMDcyODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTZmZDdmMGJmNDBiYmNiNjI4Y2Q5ZTA1NTcwZGZjNWQ2OGRhM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopwu7ii+ycBgZns3lRdKUWnr8gKK
1T6yox2ZkVYJx1BSJ2fPTo/W1vasoMIcppllhdb4KCs03kLqaNdlESlIekYfsXto
qVLg5poHP3iOFS2/2h/6a8EmW9yV+E5Dk/NrDO5+HnxByHjEei/7fWoAgPN4cVjw
RPXElM5tq4b3lNJGcZmNgm/1XPu3GdFSF+Fas447JMxSvoxXq7PO58GTBoUbXAgw
aJ8Q40Z7bph7KZLZ9+iDPajJuuqyqT0Mmg56MBtJUvQSunMOJ5r+ARTuy9mDptS0
nG/Ak3ppRMM3F0olOe33p1+UykZ4c0Cxn0LDXelMpo+TzwV/buiYd00JqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFv1/C/QLvLYozZ4FVw38XWjaPnMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWVdfWDhMOUF1OHRpak5uZ1ZYRGZ4ZGFOby1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbCGMA0G
CSqGSIb3DQEBCwUAA4IBAQBZLpXqoXPrYmuHVQmfZKHHrREuy//aBG7AJK8zk8Dw
aEuhObA1QD+yJQ1JkLqwoKPrEGDOgA78hAA0AGeRchqojoybpSdyzUcMZktcCQH5
wsT8ImAKbI0fHQarShPSk2x2Nl8d/LL2xv8puFxaGHEuH3fuZNWk9eDdQ7SwkM6g
AwE3RybDpv221DpdX/TW7VLFJuAjq8eJaDwK+3AKtacRdJmFdfAC6zuGqIrN+V1G
ZWZ0q+++Dy+36uqLSbNOFKhlQRjU1WvpYUmRTAgfg31OstsWfbTOC1/P2bTu1Ev4
d5jAm86In7ZHhkkduJrzi0wXLgID7cMdX/xyg2shph/k
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:30 2026 by rpki-client