Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa
File: YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa (raw, json)
Hash identifier: QIjaZBuvHBXuD+BQAt0PNBm4499hR/AfSSSNvFa+qG0=
Subject key identifier: 60:68:57:6F:42:81:C0:C3:C3:D1:E2:B2:16:3A:3E:C0:F4:AF:83:B0
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692DFE5A8D67BC67306F6C3474114B
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 185.240.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:fe:5a:8d:67:bc:67:30:6f:6c:34:74:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6068576f4281c0c3c3d1e2b2163a3ec0f4af83b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:5f:53:53:2e:d3:07:cb:88:b6:40:0a:b9:
4e:f1:06:fc:ab:30:b8:81:7b:be:9b:ea:7d:26:6d:
c4:b8:ca:af:b0:df:47:58:f8:96:af:bc:6b:ee:85:
ae:f0:d8:d1:7d:09:80:63:25:d2:5d:a1:18:b6:74:
c5:74:b2:5e:83:bf:b6:67:10:bc:64:7d:8f:03:b7:
76:b0:29:16:0f:e0:56:4b:1d:90:01:1b:db:ba:c7:
99:8a:ac:be:e7:ad:c3:63:d7:0e:39:bb:3c:b5:87:
be:fd:dd:7e:eb:ff:67:f5:a7:d7:38:36:25:e1:8f:
62:76:1e:39:00:15:92:11:69:40:73:17:18:08:4f:
8c:31:ea:ce:7a:1d:fc:53:c1:96:87:77:c6:1a:83:
88:54:99:ae:bf:4f:a2:fa:1d:3c:1b:c1:bf:b7:55:
75:cc:04:47:94:74:ee:91:b1:30:c6:b6:54:ed:25:
20:04:2d:98:88:db:de:c5:ed:cb:d5:69:04:43:94:
7c:ed:95:49:9b:34:77:05:90:fb:2e:04:93:3f:19:
31:95:09:92:08:bd:00:73:4b:16:a7:b1:14:0a:2c:
3b:60:20:2a:83:99:83:f4:dd:8e:ad:21:70:4a:02:
a5:de:b2:dd:a5:c6:56:eb:6a:ad:4d:e3:e2:25:b7:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:57:6F:42:81:C0:C3:C3:D1:E2:B2:16:3A:3E:C0:F4:AF:83:B0
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:34:af:c0:13:00:b0:72:fa:69:f1:c1:35:98:4f:e4:4c:e3:
cd:6a:09:dd:93:16:e0:40:dd:ec:59:7c:25:ac:21:e6:e5:ce:
0b:ab:19:d1:e9:cc:fa:9d:c2:cf:76:41:ea:3e:ab:ea:e7:a3:
2b:be:37:90:ab:7e:56:be:b0:84:0a:b4:eb:65:67:63:a5:4b:
6e:62:fd:26:e4:e5:0a:a2:de:0c:ec:ce:95:73:ed:6b:2c:5c:
a5:16:e3:30:44:3b:48:1d:0d:98:34:46:f1:55:dd:b8:d5:8f:
aa:03:0c:d9:47:c7:21:fc:d8:0a:8e:7f:d7:22:6b:6a:0e:95:
a3:09:11:54:49:6b:33:cd:43:fb:3c:b5:33:fc:72:9a:78:bb:
f4:5a:f6:d9:30:3f:c7:a3:8f:ad:7b:bf:4f:ef:cf:86:af:11:
c6:b5:f8:fd:3e:69:a1:a1:4f:00:92:51:ea:f6:d3:41:ed:59:
f7:6d:aa:89:32:17:25:8a:55:04:f9:8b:5f:e8:00:06:28:ad:
ef:a3:f7:7b:38:6a:09:a7:78:96:84:78:c8:38:f8:d5:6b:0a:
3a:d2:bf:74:58:cf:70:b9:b5:ef:b8:94:c5:ec:f5:c3:58:c3:
2d:94:53:2e:be:19:40:f6:42:6b:c9:e0:b9:86:c5:bd:b4:40:
9f:93:9e:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaS3+Wo1nvGcwb2w0dBFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjYxOWQ0ZDE4MzU3NDViMDRiZTllNDRkYWIxMDJkMDYx
NDYyMmYwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDY4NTc2ZjQyODFjMGMzYzNkMWUyYjIxNjNhM2VjMGY0YWY4M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5JfU1Mu0wfLiLZACrlO8Qb8qzC4
gXu+m+p9Jm3EuMqvsN9HWPiWr7xr7oWu8NjRfQmAYyXSXaEYtnTFdLJeg7+2ZxC8
ZH2PA7d2sCkWD+BWSx2QARvbuseZiqy+563DY9cOObs8tYe+/d1+6/9n9afXODYl
4Y9idh45ABWSEWlAcxcYCE+MMerOeh38U8GWh3fGGoOIVJmuv0+i+h08G8G/t1V1
zARHlHTukbEwxrZU7SUgBC2YiNvexe3L1WkEQ5R87ZVJmzR3BZD7LgSTPxkxlQmS
CL0Ac0sWp7EUCiw7YCAqg5mD9N2OrSFwSgKl3rLdpcZW62qtTePiJbep1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBoV29CgcDDw9HishY6PsD0r4OwMB8GA1UdIwQY
MBaAFMa2GdTRg1dFsEvp5E2rEC0GFGIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvWUdoWGIwS0J3TVBEMGVLeUZqby13UFN2ZzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufCAMA0G
CSqGSIb3DQEBCwUAA4IBAQAPNK/AEwCwcvpp8cE1mE/kTOPNagndkxbgQN3sWXwl
rCHm5c4LqxnR6cz6ncLPdkHqPqvq56MrvjeQq35WvrCECrTrZWdjpUtuYv0m5OUK
ot4M7M6Vc+1rLFylFuMwRDtIHQ2YNEbxVd241Y+qAwzZR8ch/NgKjn/XImtqDpWj
CRFUSWszzUP7PLUz/HKaeLv0WvbZMD/Ho4+te79P78+GrxHGtfj9PmmhoU8AklHq
9tNB7Vn3baqJMhclilUE+Ytf6AAGKK3vo/d7OGoJp3iWhHjIOPjVawo60r90WM9w
ubXvuJTF7PXDWMMtlFMuvhlA9kJryeC5hsW9tECfk54y
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:16 2026 by rpki-client