Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/yfOZU5CKZDAcHHGqxEk4K09qllU.roa
File: yfOZU5CKZDAcHHGqxEk4K09qllU.roa (raw, json)
Hash identifier: gRxq9ezYdjnbgaXmyUT7raFFHRBGAap8BunIHpMnOwA=
Subject key identifier: C9:F3:99:53:90:8A:64:30:1C:1C:71:AA:C4:49:38:2B:4F:6A:96:55
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 019ECF389ABC32B1C26EC190FC2E57B4FA97
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/yfOZU5CKZDAcHHGqxEk4K09qllU.roa
Signing time: Tue 16 Jun 2026 06:57:33 +0000
ROA not before: Tue 16 Jun 2026 06:57:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7046
IP address blocks: 185.31.59.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:38:9a:bc:32:b1:c2:6e:c1:90:fc:2e:57:b4:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Jun 16 06:57:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9f39953908a64301c1c71aac449382b4f6a9655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:ae:6e:45:2b:23:88:e0:6e:82:06:e9:bd:
92:bc:ff:77:3e:6c:b8:b0:c3:ec:6c:d3:db:69:77:
c6:5b:03:a1:df:1f:69:7b:a9:03:e3:87:a0:c4:68:
ed:b2:b8:48:d2:79:44:08:7b:36:a6:ba:af:26:d2:
13:aa:f4:3d:9c:0e:3f:28:85:3a:71:38:cc:8f:cd:
8e:4a:d1:a7:06:e7:e2:bc:45:d9:de:22:51:ac:e1:
2e:7a:51:3f:45:ad:e7:c6:77:ea:2e:c5:6c:09:2f:
76:fb:3f:64:ee:ac:cd:d8:14:70:39:f8:9a:c9:0e:
61:84:00:b1:88:76:1e:7b:ad:38:f8:ae:aa:4d:67:
26:27:ab:d6:80:ae:54:75:56:49:c1:69:7d:7e:fd:
ee:f7:f4:8e:29:eb:f8:e3:b3:14:44:b1:ad:07:a1:
41:86:80:23:79:d8:61:35:4a:16:ad:ba:28:67:07:
a5:46:cc:0d:f5:1c:34:86:79:8f:55:8d:06:e9:30:
ef:86:6d:f6:24:09:50:cb:5c:1c:41:72:fa:92:63:
80:f7:8d:9f:f9:46:7e:1f:ef:07:7d:0a:11:89:1d:
d5:96:e6:01:82:5e:3b:45:07:2f:03:10:13:16:fb:
aa:90:f6:14:a3:c2:02:2a:22:62:f9:4c:87:d6:28:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:99:53:90:8A:64:30:1C:1C:71:AA:C4:49:38:2B:4F:6A:96:55
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/yfOZU5CKZDAcHHGqxEk4K09qllU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a2:7f:fe:03:24:e9:7e:f7:c7:51:7c:aa:40:09:d5:31:6e:
cb:a4:ca:d3:f6:f5:d7:f7:61:16:3f:28:66:23:e9:05:e2:0c:
40:ce:f4:a4:29:75:03:31:e0:d8:81:1e:99:08:9c:64:72:a0:
8a:50:7d:4d:5a:b7:65:4d:38:40:85:b3:71:b1:ae:a6:98:8a:
e4:61:d1:b5:9d:4c:ac:0b:0d:55:93:d5:f2:73:64:12:6f:ee:
3a:1e:a2:ce:01:8a:ac:e9:9b:49:ea:19:8a:12:03:e1:8f:aa:
75:61:2f:13:d1:eb:1d:03:fe:ba:4d:52:53:84:04:bd:76:90:
6d:11:d2:17:b4:4c:11:08:5d:09:a8:d5:4a:73:99:ee:46:31:
c7:c9:23:d6:0e:36:23:69:6a:1d:5f:d3:77:df:71:27:ce:39:
a7:e8:7a:c2:ce:df:6a:36:e4:35:b9:90:1a:e4:18:a6:50:1b:
a0:65:ff:0c:54:e1:36:74:39:f7:60:47:9d:34:2a:07:90:ba:
80:b5:83:11:85:14:87:60:e3:b3:7d:bf:fe:69:84:13:6a:a8:
2f:04:21:97:04:b8:d4:23:56:15:18:16:f6:e0:86:54:ce:8a:
49:c6:a2:f3:24:89:50:89:0b:fb:63:17:80:e1:66:e9:7d:72:
ba:1c:f5:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7POJq8MrHCbsGQ/C5XtPqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNGVhMmFhOGQzNGQ0M2I0YjY0MWEzYWYzMDY0Mjg0OWJm
NGE4ZmUwHhcNMjYwNjE2MDY1NzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWYzOTk1MzkwOGE2NDMwMWMxYzcxYWFjNDQ5MzgyYjRmNmE5NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAOubkUrI4jgboIG6b2SvP93Pmy4
sMPsbNPbaXfGWwOh3x9pe6kD44egxGjtsrhI0nlECHs2prqvJtITqvQ9nA4/KIU6
cTjMj82OStGnBufivEXZ3iJRrOEuelE/Ra3nxnfqLsVsCS92+z9k7qzN2BRwOfia
yQ5hhACxiHYee604+K6qTWcmJ6vWgK5UdVZJwWl9fv3u9/SOKev447MURLGtB6FB
hoAjedhhNUoWrbooZwelRswN9Rw0hnmPVY0G6TDvhm32JAlQy1wcQXL6kmOA942f
+UZ+H+8HfQoRiR3VluYBgl47RQcvAxATFvuqkPYUo8ICKiJi+UyH1ijZGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnzmVOQimQwHBxxqsRJOCtPapZVMB8GA1UdIwQY
MBaAFNtOoqqNNNQ7S2QaOvMGQoSb9Kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjA2aXFvMDAxRHRMWkJvNjh3WkNoSnYwcVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mYTE0ZTgtZjcxNi00MDc1LTg2MTQt
M2Y0OTViZjk5NDMxLzEveWZPWlU1Q0taREFjSEhHcXhFazRLMDlxbGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mYTE0ZTgtZjcxNi00MDc1LTg2MTQtM2Y0OTViZjk5NDMx
LzEvMjA2aXFvMDAxRHRMWkJvNjh3WkNoSnYwcVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR87MA0G
CSqGSIb3DQEBCwUAA4IBAQAvon/+AyTpfvfHUXyqQAnVMW7LpMrT9vXX92EWPyhm
I+kF4gxAzvSkKXUDMeDYgR6ZCJxkcqCKUH1NWrdlTThAhbNxsa6mmIrkYdG1nUys
Cw1Vk9Xyc2QSb+46HqLOAYqs6ZtJ6hmKEgPhj6p1YS8T0esdA/66TVJThAS9dpBt
EdIXtEwRCF0JqNVKc5nuRjHHySPWDjYjaWodX9N333Enzjmn6HrCzt9qNuQ1uZAa
5BimUBugZf8MVOE2dDn3YEedNCoHkLqAtYMRhRSHYOOzfb/+aYQTaqgvBCGXBLjU
I1YVGBb24IZUzopJxqLzJIlQiQv7YxeA4WbpfXK6HPVK
-----END CERTIFICATE-----
Generated at Sun Jun 21 17:34:58 2026 by rpki-client