Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa
File: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (raw, json)
Hash identifier: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=
Subject key identifier: C8:6C:FC:36:06:CB:FE:E3:DA:A9:02:2D:F0:77:CC:44:82:1B:87:12
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019E60D6E69866213CB1629B4A957EFC5FB0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa
Signing time: Mon 25 May 2026 20:32:36 +0000
ROA not before: Mon 25 May 2026 20:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
5.56.133.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:d6:e6:98:66:21:3c:b1:62:9b:4a:95:7e:fc:5f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: May 25 20:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c86cfc3606cbfee3daa9022df077cc44821b8712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:50:6d:40:24:97:f5:72:e9:27:56:2d:e8:
51:cf:20:26:0a:10:0b:55:45:d0:79:3e:b5:98:46:
cb:0b:c6:30:9c:a0:1c:cb:e7:84:51:ad:80:d5:77:
c2:81:d5:ad:9a:f7:c8:c7:ff:56:d8:3c:d9:a4:01:
d2:36:0e:38:2e:5d:09:03:b3:0c:c1:aa:0c:ac:b0:
7d:8f:41:db:b6:27:36:4e:42:55:1b:b0:19:4e:6a:
7a:25:ac:04:fe:fc:33:ab:08:ed:74:e8:5a:84:4a:
59:37:a1:94:67:0a:49:ac:ec:16:47:64:d3:38:35:
44:a8:83:6f:f8:a8:7e:7c:d3:aa:5f:d6:4c:83:eb:
7e:0b:be:4c:2e:ea:d9:c2:3d:e9:f1:5f:7f:cc:83:
0b:f6:cb:22:00:f7:0a:01:c6:2e:2d:4d:77:07:25:
9b:44:c1:0b:93:bc:7a:e9:9b:e6:61:6e:d4:2a:1a:
5a:d4:78:6e:86:bd:24:11:58:6a:ab:cf:d4:f5:76:
6e:8b:3c:6e:84:45:8f:a1:2e:ff:72:c3:5b:c4:ba:
26:46:52:59:ca:a1:97:d5:0a:f4:e3:5a:0e:0c:6e:
ac:07:2b:87:e6:50:3f:4f:a0:e6:49:2c:70:1d:65:
7d:86:f2:51:48:a4:9f:7a:08:b1:22:4b:63:20:5d:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:FC:36:06:CB:FE:E3:DA:A9:02:2D:F0:77:CC:44:82:1B:87:12
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/23
79.143.84.0/24
87.236.209.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d9:e3:52:43:68:61:74:d2:bf:c6:86:14:06:b8:69:20:46:
3b:ad:a9:f0:ce:45:77:53:55:c8:38:84:23:e0:6c:b5:de:ce:
3b:17:e7:58:3a:ed:2d:83:96:00:ea:ad:74:a0:fe:3d:dc:e3:
40:d1:55:13:20:3d:31:60:c3:16:d8:12:88:2a:af:09:5a:b6:
fa:39:df:ba:dd:5f:3d:df:90:a1:07:dd:72:69:aa:c8:4a:a3:
9e:36:2d:d9:31:d4:08:e6:63:5d:da:bf:b8:2b:db:b0:0d:88:
6f:ea:c5:12:3c:2d:65:7d:99:07:ea:09:81:f9:fb:c0:5e:a6:
c7:45:b3:c1:f3:92:9e:ef:3c:43:36:a1:71:6d:fc:02:9b:b3:
33:be:31:0b:f7:62:a9:50:1b:bc:a5:0f:70:2a:92:70:0f:2c:
2b:92:17:3d:b0:8e:b2:d4:94:d1:ff:a0:03:4a:e1:3c:56:d3:
97:5f:88:3f:df:49:be:ce:61:71:82:76:5a:ec:8f:75:78:43:
9f:0a:85:71:ed:41:66:02:0c:20:23:a6:15:ca:42:ba:59:72:
78:27:b9:f9:fb:cc:f5:e8:a3:ee:11:dd:95:ff:63:3a:41:d6:
57:b2:29:6b:db:e4:c2:f1:70:21:29:2a:1c:c8:76:74:8e:e8:
bf:93:25:2f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5g1uaYZiE8sWKbSpV+/F+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYwNTI1MjAzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZjZmMzNjA2Y2JmZWUzZGFhOTAyMmRmMDc3Y2M0NDgyMWI4NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0tQbUAkl/Vy6SdWLehRzyAmChAL
VUXQeT61mEbLC8YwnKAcy+eEUa2A1XfCgdWtmvfIx/9W2DzZpAHSNg44Ll0JA7MM
waoMrLB9j0Hbtic2TkJVG7AZTmp6JawE/vwzqwjtdOhahEpZN6GUZwpJrOwWR2TT
ODVEqINv+Kh+fNOqX9ZMg+t+C75MLurZwj3p8V9/zIML9ssiAPcKAcYuLU13ByWb
RMELk7x66ZvmYW7UKhpa1Hhuhr0kEVhqq8/U9XZuizxuhEWPoS7/csNbxLomRlJZ
yqGX1Qr041oODG6sByuH5lA/T6DmSSxwHWV9hvJRSKSfegixIktjIF1McwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMhs/DYGy/7j2qkCLfB3zESCG4cSMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEveUd6OE5nYkxfdVBhcVFJdDhIZk1SSUliaHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBTiEAwQA
T49UAwQAV+zRAwQAV+zUMA0GCSqGSIb3DQEBCwUAA4IBAQCZ2eNSQ2hhdNK/xoYU
BrhpIEY7ranwzkV3U1XIOIQj4Gy13s47F+dYOu0tg5YA6q10oP493ONA0VUTID0x
YMMW2BKIKq8JWrb6Od+63V8935ChB91yaarISqOeNi3ZMdQI5mNd2r+4K9uwDYhv
6sUSPC1lfZkH6gmB+fvAXqbHRbPB85Ke7zxDNqFxbfwCm7MzvjEL92KpUBu8pQ9w
KpJwDywrkhc9sI6y1JTR/6ADSuE8VtOXX4g/30m+zmFxgnZa7I91eEOfCoVx7UFm
AgwgI6YVykK6WXJ4J7n5+8z16KPuEd2V/2M6QdZXsilr2+TC8XAhKSocyHZ0jui/
kyUv
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:09:14 2026 by rpki-client