Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/YB9m1TJ1VAcZcgsWqQBIsxMhh9o.roa
File: YB9m1TJ1VAcZcgsWqQBIsxMhh9o.roa (raw, json)
Hash identifier: PV9hsobyM1OnjRRgN0MXs4+vRd37S7Rtc77wsaiFFtk=
Subject key identifier: 60:1F:66:D5:32:75:54:07:19:72:0B:16:A9:00:48:B3:13:21:87:DA
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019DCDCBEC1439DD3BDCAD277AE92CCC06A8
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/YB9m1TJ1VAcZcgsWqQBIsxMhh9o.roa
Signing time: Mon 27 Apr 2026 07:16:26 +0000
ROA not before: Mon 27 Apr 2026 07:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197695
IP address blocks: 79.174.77.0/24 maxlen: 24
79.174.78.0/23 maxlen: 24
79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.104.64.0/21 maxlen: 24
89.104.74.0/24 maxlen: 24
89.104.94.0/24 maxlen: 24
89.111.152.0/22 maxlen: 24
89.111.168.0/21 maxlen: 24
168.222.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:cb:ec:14:39:dd:3b:dc:ad:27:7a:e9:2c:cc:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Apr 27 07:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=601f66d53275540719720b16a90048b3132187da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:0e:d4:bf:8c:a5:9c:b1:ea:e4:44:05:39:
c3:fc:e6:3c:c0:4f:f9:bb:e0:b6:4a:b3:2c:2f:aa:
b1:ce:8b:46:fe:04:3a:63:3b:61:58:75:a9:71:54:
9e:24:e4:8f:ad:06:66:1b:d4:61:cb:e3:c1:93:8f:
36:30:ba:c1:81:5c:e9:50:c0:e8:ae:15:a3:60:3a:
02:26:d5:99:b5:76:c9:d8:5f:02:90:a1:f6:70:03:
9f:3c:48:7f:9f:3f:85:ed:ac:33:7e:41:75:15:79:
b8:db:a5:bc:b9:c0:9b:cc:d8:1a:e3:35:35:96:28:
c7:77:d1:c2:fd:a5:dd:f3:b0:d9:60:dc:e7:6d:1f:
51:2f:76:57:ec:86:13:97:cb:e4:f9:fd:15:f3:c0:
85:41:8d:e5:81:b1:41:4f:d2:95:31:79:c0:63:66:
8a:68:34:2f:6f:d2:73:cc:c9:a0:e3:ee:88:cb:f3:
d0:80:67:e1:12:33:bf:8a:3d:26:5f:d7:4b:9b:df:
0d:14:1a:89:b7:ae:b4:d1:2f:5b:f2:17:b5:ae:84:
52:50:2f:ca:62:a7:3b:63:d5:d7:82:fa:58:04:21:
3c:97:ad:da:e3:ee:ab:63:87:8c:5d:2a:56:06:25:
ef:57:b5:35:97:fe:0f:ab:60:51:56:74:5a:4f:3e:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:66:D5:32:75:54:07:19:72:0B:16:A9:00:48:B3:13:21:87:DA
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/YB9m1TJ1VAcZcgsWqQBIsxMhh9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.77.0-79.174.95.255
89.104.64.0/21
89.104.74.0/24
89.104.94.0/24
89.111.152.0/22
89.111.168.0/21
168.222.142.0/23
Signature Algorithm: sha256WithRSAEncryption
69:fc:59:cd:05:cc:fe:d1:4f:1a:14:87:0b:2f:2c:fb:c3:53:
f3:b2:18:25:8c:5a:e8:9e:f0:f3:33:5a:41:83:a3:1d:9d:46:
d6:e8:02:dc:00:2a:f8:66:a6:5d:55:e2:aa:88:0c:e5:36:20:
15:13:d8:ab:82:46:b0:fe:7e:1b:b8:13:50:5a:08:f7:88:3f:
52:05:d1:1f:e0:d9:62:89:49:8d:8c:58:ea:9e:29:8a:f2:b4:
a8:4a:c8:63:5a:a2:54:cb:42:9c:06:de:3c:11:57:84:0f:fc:
5c:6f:70:23:95:02:52:9d:34:0c:2a:62:a1:da:f1:4c:7c:0a:
c0:ce:78:4f:6d:95:67:3a:ff:15:18:ac:63:55:50:1d:d2:a5:
e3:f9:97:3b:38:6c:54:1d:7d:ae:0a:32:79:2e:2c:ca:34:e2:
7d:d4:38:8f:ae:85:e0:32:5e:40:c1:9c:38:e0:a7:0a:8f:e1:
cd:fb:e9:c1:48:44:28:f8:b3:ab:ff:8d:9e:70:85:f8:76:89:
bb:c4:d2:0c:e7:19:f1:19:bc:a7:3f:a7:51:16:2b:aa:c5:fb:
ff:14:03:06:81:ec:db:28:c2:c5:8b:f1:e9:83:9c:99:2f:22:
bc:b5:bb:22:66:82:0c:45:c9:27:27:c7:b8:7b:5a:68:03:cf:
1c:b0:ba:61
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ3Ny+wUOd073K0neukszAaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2
ZjFmZmYwHhcNMjYwNDI3MDcxNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDFmNjZkNTMyNzU1NDA3MTk3MjBiMTZhOTAwNDhiMzEzMjE4N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N4O1L+MpZyx6uREBTnD/OY8wE/5
u+C2SrMsL6qxzotG/gQ6YzthWHWpcVSeJOSPrQZmG9Rhy+PBk482MLrBgVzpUMDo
rhWjYDoCJtWZtXbJ2F8CkKH2cAOfPEh/nz+F7awzfkF1FXm426W8ucCbzNga4zU1
lijHd9HC/aXd87DZYNznbR9RL3ZX7IYTl8vk+f0V88CFQY3lgbFBT9KVMXnAY2aK
aDQvb9JzzMmg4+6Iy/PQgGfhEjO/ij0mX9dLm98NFBqJt6600S9b8he1roRSUC/K
Yqc7Y9XXgvpYBCE8l63a4+6rY4eMXSpWBiXvV7U1l/4Pq2BRVnRaTz4uuwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFGAfZtUydVQHGXILFqkASLMTIYfaMB8GA1UdIwQY
MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt
NGY0ZTcxZTMyMDg0LzEvWUI5bTFUSjFWQWNaY2dzV3FRQklzeE1oaDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0
LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBABPrk0D
BAVPrkADBANZaEADBABZaEoDBABZaF4DBAJZb5gDBANZb6gDBAGo3o4wDQYJKoZI
hvcNAQELBQADggEBAGn8Wc0FzP7RTxoUhwsvLPvDU/OyGCWMWuie8PMzWkGDox2d
RtboAtwAKvhmpl1V4qqIDOU2IBUT2KuCRrD+fhu4E1BaCPeIP1IF0R/g2WKJSY2M
WOqeKYrytKhKyGNaolTLQpwG3jwRV4QP/FxvcCOVAlKdNAwqYqHa8Ux8CsDOeE9t
lWc6/xUYrGNVUB3SpeP5lzs4bFQdfa4KMnkuLMo04n3UOI+uheAyXkDBnDjgpwqP
4c376cFIRCj4s6v/jZ5whfh2ibvE0gznGfEZvKc/p1EWK6rF+/8UAwaB7NsowsWL
8emDnJkvIry1uyJmggxFyScnx7h7WmgDzxywumE=
-----END CERTIFICATE-----
Generated at Wed Apr 29 14:04:52 2026 by rpki-client