Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/y-4-nqSYc3tqTRazNlGQZP2DnP8.roa
File: y-4-nqSYc3tqTRazNlGQZP2DnP8.roa (raw, json)
Hash identifier: GfYO8yyGaWypKYXSBMap3Z6gCCFnS4WexpcfM9iCxAI=
Subject key identifier: CB:EE:3E:9E:A4:98:73:7B:6A:4D:16:B3:36:51:90:64:FD:83:9C:FF
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 01A05787CB6EB2FC1F4B73A426CF0F9F486B
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/y-4-nqSYc3tqTRazNlGQZP2DnP8.roa
Signing time: Mon 31 Aug 2026 11:15:12 +0000
ROA not before: Mon 31 Aug 2026 11:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200570
IP address blocks: 195.138.41.0/24 maxlen: 24
195.253.228.0/22 maxlen: 22
2a0e:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:87:cb:6e:b2:fc:1f:4b:73:a4:26:cf:0f:9f:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Aug 31 11:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbee3e9ea498737b6a4d16b336519064fd839cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:bd:d2:b2:45:6c:f0:38:c7:0a:7b:ff:db:
e9:ff:35:1a:d1:c6:78:3e:2e:a3:f9:2d:84:c9:33:
a4:df:47:cc:38:32:fe:76:ea:e7:75:5c:b9:1c:f6:
7a:78:ff:90:01:1c:39:36:1a:31:08:d3:09:ac:e6:
78:88:4a:7b:f7:4d:cb:06:9a:6a:07:95:48:30:44:
46:c3:93:b0:f9:a9:f4:b0:f6:a9:c5:c5:cc:cd:e7:
4b:a0:96:ce:ff:64:b4:d4:a4:17:3e:c2:bd:e9:67:
5b:6b:68:ac:63:70:ca:81:46:54:81:c9:38:d9:11:
10:a2:9d:4d:03:fe:93:9d:22:d6:aa:c8:1f:4b:ae:
e0:7e:6b:7a:aa:98:c9:fc:fd:22:3c:fa:ea:c9:cc:
4a:e5:f3:4a:51:50:72:1c:fb:92:f9:dc:18:de:33:
b2:54:8f:dc:13:67:4d:d0:69:84:c3:31:2e:d5:c2:
ae:98:00:cc:da:37:8a:fb:92:6e:14:5a:55:8d:77:
2e:48:8a:c6:f7:bd:f2:44:53:b7:2b:8b:9a:dc:6e:
d3:45:93:a0:bb:8b:73:c3:65:bc:94:7d:5d:d5:6c:
1e:53:35:88:22:28:86:4f:c7:90:2b:71:d8:d1:62:
f2:a8:02:11:4f:1b:ad:79:b3:fe:80:b4:a3:52:ff:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:3E:9E:A4:98:73:7B:6A:4D:16:B3:36:51:90:64:FD:83:9C:FF
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/y-4-nqSYc3tqTRazNlGQZP2DnP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.41.0/24
195.253.228.0/22
IPv6:
2a0e:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:dc:1f:e6:cf:fb:61:17:34:6b:b2:04:a3:3c:75:81:1c:d2:
c7:3e:c5:9b:ce:15:db:0d:fa:b2:b6:ff:5e:2b:97:82:5a:6c:
f4:ea:67:0e:4e:1b:ff:48:d5:95:d5:f2:6c:8e:ed:a4:c0:9f:
f0:ae:27:5c:17:17:d8:c7:cf:d5:3e:90:d4:f6:4f:de:a2:f1:
59:11:e0:66:6e:ce:05:4f:0e:00:99:42:42:f7:b5:d1:46:03:
9b:52:a0:52:7a:c2:05:72:e0:e4:d5:86:e2:6f:a7:e6:42:5f:
4a:11:42:8c:11:63:ed:3c:1e:e3:2b:59:74:1d:8b:e9:34:1b:
34:13:46:95:1c:b4:4a:6e:4e:56:17:88:fe:3e:db:7a:73:6d:
da:30:37:b0:85:fb:93:e0:06:b3:e6:07:af:dd:a5:2e:4d:9a:
9a:b5:ea:31:99:58:ff:18:d0:24:aa:82:44:30:b2:b5:cf:b3:
02:9a:ce:89:3a:57:6a:d0:90:d6:1a:2e:68:b5:a5:1d:2d:8f:
e6:34:2f:2f:66:35:fb:7e:9f:3f:5e:f4:be:e8:35:cb:5f:fb:
a0:f0:8e:37:1a:6b:13:57:b2:c4:26:34:07:41:2a:89:6f:be:
79:86:29:9e:7f:d0:ca:c4:62:30:e3:ca:64:00:04:cc:c4:1e:
db:73:85:73
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaBXh8tusvwfS3OkJs8Pn0hrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljOTVlZThmMGNiMzUzYzFkZTk5MjA3OTJhMzRkMzAy
NDQ2MTcwHhcNMjYwODMxMTExNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmVlM2U5ZWE0OTg3MzdiNmE0ZDE2YjMzNjUxOTA2NGZkODM5Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu+90rJFbPA4xwp7/9vp/zUa0cZ4
Pi6j+S2EyTOk30fMODL+durndVy5HPZ6eP+QARw5NhoxCNMJrOZ4iEp7903LBppq
B5VIMERGw5Ow+an0sPapxcXMzedLoJbO/2S01KQXPsK96Wdba2isY3DKgUZUgck4
2REQop1NA/6TnSLWqsgfS67gfmt6qpjJ/P0iPPrqycxK5fNKUVByHPuS+dwY3jOy
VI/cE2dN0GmEwzEu1cKumADM2jeK+5JuFFpVjXcuSIrG973yRFO3K4ua3G7TRZOg
u4tzw2W8lH1d1WweUzWIIiiGT8eQK3HY0WLyqAIRTxutebP+gLSjUv9tRwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMvuPp6kmHN7ak0WszZRkGT9g5z/MB8GA1UdIwQY
MBaAFIu5yV7o8Ms1PB3pkgeSo00wJEYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAt
YTk2MTAyYzgzNjQxLzEveS00LW5xU1ljM3RxVFJhek5sR1FaUDJEblA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAtYTk2MTAyYzgzNjQx
LzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAw4opAwQC
w/3kMA0EAgACMAcDBQMqDkXAMA0GCSqGSIb3DQEBCwUAA4IBAQBd3B/mz/thFzRr
sgSjPHWBHNLHPsWbzhXbDfqytv9eK5eCWmz06mcOThv/SNWV1fJsju2kwJ/wridc
FxfYx8/VPpDU9k/eovFZEeBmbs4FTw4AmUJC97XRRgObUqBSesIFcuDk1Ybib6fm
Ql9KEUKMEWPtPB7jK1l0HYvpNBs0E0aVHLRKbk5WF4j+Ptt6c23aMDewhfuT4Aaz
5gev3aUuTZqateoxmVj/GNAkqoJEMLK1z7MCms6JOldq0JDWGi5otaUdLY/mNC8v
ZjX7fp8/XvS+6DXLX/ug8I43GmsTV7LEJjQHQSqJb755himef9DKxGIw48pkAATM
xB7bc4Vz
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:39:33 2026 by rpki-client