Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/yrMgEtFjCVSsCMn7YjkSj19StGc.roa
File: yrMgEtFjCVSsCMn7YjkSj19StGc.roa (raw, json)
Hash identifier: hGOie0hBu6eRXEMbsuifURbA1uzoiAH8L5Iguxnz680=
Subject key identifier: CA:B3:20:12:D1:63:09:54:AC:08:C9:FB:62:39:12:8F:5F:52:B4:67
Certificate issuer: /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial: 019F2368B5A6E414A8E7B6C0F4CFEADC8780
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/yrMgEtFjCVSsCMn7YjkSj19StGc.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20648
IP address blocks: 185.91.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:a6:e4:14:a8:e7:b6:c0:f4:cf:ea:dc:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cab32012d1630954ac08c9fb6239128f5f52b467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:89:b8:63:83:f5:6f:f2:71:a8:01:ee:cf:
8a:94:e8:10:47:1a:92:f8:1e:11:c7:bf:0e:7b:f4:
c8:c7:16:fb:1d:4e:9e:e6:3e:17:ed:9e:f9:6b:16:
79:bd:dd:fb:d6:db:5e:7b:70:9a:0c:82:36:a5:95:
f4:f9:54:28:d4:d3:5b:1b:9f:1d:50:57:73:7a:a2:
f0:be:1f:93:dc:f0:f9:3d:10:e6:d6:51:40:51:cc:
7a:a8:b5:4f:b4:d3:a7:fe:b7:63:38:56:25:6a:af:
00:d8:52:71:1e:62:69:39:4c:67:ef:fe:53:a7:77:
8c:40:c1:09:ac:fc:3b:49:17:67:2e:82:f1:32:29:
91:eb:76:03:93:dd:f5:3f:c5:8b:a5:1b:bd:67:54:
b8:2c:40:94:25:10:ed:95:21:6a:ee:d8:60:9f:3f:
6f:40:49:ec:f4:9f:0c:7e:59:e2:88:2e:8d:85:f4:
89:3c:4f:1d:79:10:a7:bb:54:88:1f:d9:07:92:9b:
1f:26:49:1d:92:a8:84:0e:9a:82:d6:b8:b5:f2:2e:
0c:10:bb:18:2f:33:f8:af:96:de:ce:53:ff:c1:31:
f0:37:f1:50:35:cb:b8:30:99:ea:df:5f:d3:f6:d3:
b6:6c:86:41:fa:21:e9:85:ad:a2:02:c1:9e:36:cb:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:20:12:D1:63:09:54:AC:08:C9:FB:62:39:12:8F:5F:52:B4:67
X509v3 Authority Key Identifier:
keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/yrMgEtFjCVSsCMn7YjkSj19StGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:30:01:83:be:4c:fc:f1:55:04:e7:ed:0d:29:59:31:7e:f7:
24:93:f1:86:a7:e8:84:be:8a:0a:e6:3d:a8:f7:ce:a9:ae:24:
cc:a3:18:18:19:56:2c:5f:a1:c3:f1:5b:d5:5d:68:00:60:d3:
af:52:84:72:2b:b6:73:8c:69:5d:dc:07:39:43:75:8f:1b:ab:
d8:ae:72:08:e3:c3:06:4b:16:fb:85:df:a2:32:2e:b6:06:63:
b3:37:15:ae:02:37:80:76:68:d9:b1:33:45:81:d1:8a:a9:d8:
91:47:55:84:6c:d9:50:81:27:5b:95:78:7c:33:8c:9f:83:51:
50:25:ea:30:9d:18:50:5b:87:3f:44:ef:fc:36:b6:ca:46:47:
97:7a:7d:8a:09:53:d1:f3:52:6e:ef:91:00:78:c6:91:70:5c:
5d:b1:6f:4a:b5:e6:ba:63:e6:d5:79:1f:e7:af:39:b6:4e:5c:
6d:ea:27:68:7f:95:5a:d8:7c:fd:d1:b9:09:46:f0:66:1c:92:
07:f6:71:0e:83:17:14:e0:ae:ef:dc:47:f9:70:d1:38:ff:b4:
9f:e7:e4:0a:f2:6a:0a:bb:0c:8d:24:7e:33:e0:b6:43:93:1a:
d8:48:77:ec:21:66:e4:7e:e0:c1:89:85:55:13:1e:60:04:c9:
d1:a2:0e:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLWm5BSo57bA9M/q3IeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDdmMmVlMGVkMGUxN2E3M2IxOWY5ODI5ZDAwOWNiNTc1
YWFiNzQwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWIzMjAxMmQxNjMwOTU0YWMwOGM5ZmI2MjM5MTI4ZjVmNTJiNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V+JuGOD9W/ycagB7s+KlOgQRxqS
+B4Rx78Oe/TIxxb7HU6e5j4X7Z75axZ5vd371ttee3CaDII2pZX0+VQo1NNbG58d
UFdzeqLwvh+T3PD5PRDm1lFAUcx6qLVPtNOn/rdjOFYlaq8A2FJxHmJpOUxn7/5T
p3eMQMEJrPw7SRdnLoLxMimR63YDk931P8WLpRu9Z1S4LECUJRDtlSFq7thgnz9v
QEns9J8MflniiC6NhfSJPE8deRCnu1SIH9kHkpsfJkkdkqiEDpqC1ri18i4MELsY
LzP4r5bezlP/wTHwN/FQNcu4MJnq31/T9tO2bIZB+iHpha2iAsGeNsu1vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqzIBLRYwlUrAjJ+2I5Eo9fUrRnMB8GA1UdIwQY
MBaAFEFH8u4O0OF6c7GfmCnQCctXWqt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVmeTdnN1E0WHB6c1otWUtkQUp5MWRhcTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt
ZjUyMGE3ZDcxZWY1LzEveXJNZ0V0RmpDVlNzQ01uN1lqa1NqMTlTdEdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1
LzEvUVVmeTdnN1E0WHB6c1otWUtkQUp5MWRhcTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVvNMA0G
CSqGSIb3DQEBCwUAA4IBAQAKMAGDvkz88VUE5+0NKVkxfvckk/GGp+iEvooK5j2o
986priTMoxgYGVYsX6HD8VvVXWgAYNOvUoRyK7ZzjGld3Ac5Q3WPG6vYrnII48MG
Sxb7hd+iMi62BmOzNxWuAjeAdmjZsTNFgdGKqdiRR1WEbNlQgSdblXh8M4yfg1FQ
JeownRhQW4c/RO/8NrbKRkeXen2KCVPR81Ju75EAeMaRcFxdsW9Ktea6Y+bVeR/n
rzm2Tlxt6idof5Va2Hz90bkJRvBmHJIH9nEOgxcU4K7v3Ef5cNE4/7Sf5+QK8moK
uwyNJH4z4LZDkxrYSHfsIWbkfuDBiYVVEx5gBMnRog6y
-----END CERTIFICATE-----
Generated at Mon Jul 6 11:27:19 2026 by rpki-client