Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/YXA35Xy8YGhh6Hvtl9PgHxWLedk.roa
File: YXA35Xy8YGhh6Hvtl9PgHxWLedk.roa (raw, json)
Hash identifier: A4FJG1g2cKuymT/9NuMnoHDOpw+liuhXg740fo3M3h8=
Subject key identifier: 61:70:37:E5:7C:BC:60:68:61:E8:7B:ED:97:D3:E0:1F:15:8B:79:D9
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01A179004C9C889A17848226B2F5EB66D025
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/YXA35Xy8YGhh6Hvtl9PgHxWLedk.roa
Signing time: Mon 26 Oct 2026 16:17:05 +0000
ROA not before: Mon 26 Oct 2026 16:17:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 185.228.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:00:4c:9c:88:9a:17:84:82:26:b2:f5:eb:66:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Oct 26 16:17:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=617037e57cbc606861e87bed97d3e01f158b79d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:5d:0d:a5:e8:44:5d:ec:bd:9b:0a:25:86:
99:e6:b6:f1:13:7c:94:cf:29:d9:f1:b6:75:ee:62:
2e:f7:00:07:18:b8:54:d3:01:2e:b1:a5:00:03:2a:
20:c3:ee:c2:2d:8b:de:99:61:cf:ab:2d:4c:6a:e5:
ce:41:94:54:8a:9d:15:7f:b5:52:23:d5:b2:0f:92:
6a:69:c0:64:8e:d4:50:8e:95:00:f7:84:eb:82:51:
ec:ca:e5:96:8e:2d:ab:2c:58:85:9b:0a:19:9f:9b:
db:7d:ba:60:ac:d8:7c:e2:75:b0:5d:5c:d1:10:91:
b2:e0:81:f5:d8:4d:fe:47:8d:ad:4f:57:77:fb:d0:
52:70:0d:c6:43:51:ff:4b:f4:5d:7a:91:44:dc:ac:
d3:07:9a:15:b5:5d:ea:d8:d5:5f:3d:34:2f:51:b9:
37:73:80:d4:c2:44:5e:e7:b8:82:95:ea:c5:cf:a9:
de:32:11:2d:d9:cf:f3:c8:65:5c:6e:24:3b:fd:b5:
c3:53:fb:75:40:96:61:bd:33:4d:ce:47:8f:c1:5b:
e4:63:88:c7:54:c7:cf:39:ea:60:a8:bf:a7:b7:ea:
ea:3d:49:13:84:65:b7:ae:3b:e6:42:9d:d8:5a:df:
60:45:88:81:69:2b:95:2a:aa:c3:67:9b:30:45:55:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:37:E5:7C:BC:60:68:61:E8:7B:ED:97:D3:E0:1F:15:8B:79:D9
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/YXA35Xy8YGhh6Hvtl9PgHxWLedk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cb:94:6f:ed:c4:ff:0c:31:21:44:65:f4:00:83:06:62:ed:
eb:50:a5:68:80:bc:59:7f:2f:79:de:c3:1a:d8:83:08:e3:47:
57:80:79:97:d3:ba:fd:3f:12:0a:5c:28:1b:87:f7:13:57:bb:
d1:fe:70:7f:e9:ca:b0:85:16:63:9c:ad:a4:21:c2:34:24:3a:
4c:38:a4:8c:a1:f7:42:4c:d4:15:ff:6f:de:fe:6c:88:a9:ea:
83:0b:1e:bd:3a:06:a5:9b:c8:d5:f2:cb:f1:18:12:2c:ee:b6:
e2:40:43:53:41:56:de:36:26:2c:59:87:59:24:32:64:4d:a6:
15:d0:6c:7c:6c:df:f3:57:a5:6c:68:5f:d8:d5:25:35:f6:16:
34:fe:79:18:05:58:a5:d7:83:e6:dc:22:db:59:8f:90:1e:67:
7c:a4:c7:2e:85:4a:58:33:3b:40:42:46:78:07:c9:90:f2:74:
3e:97:38:4a:fd:55:4d:b7:2a:6d:02:f9:58:33:95:cc:8b:e8:
59:cc:42:3c:19:e4:18:d0:77:72:b8:96:a0:b6:0d:1e:38:19:
1b:fe:e4:25:97:70:b4:9e:0b:c1:05:1e:b4:d6:dc:5e:d9:f2:
40:a7:84:da:36:f8:b1:c8:67:7d:e5:ff:f1:cc:c7:5e:81:fb:
c2:94:03:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF5AEyciJoXhIImsvXrZtAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYxMDI2MTYxNzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTcwMzdlNTdjYmM2MDY4NjFlODdiZWQ5N2QzZTAxZjE1OGI3OWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPJdDaXoRF3svZsKJYaZ5rbxE3yU
zynZ8bZ17mIu9wAHGLhU0wEusaUAAyogw+7CLYvemWHPqy1MauXOQZRUip0Vf7VS
I9WyD5JqacBkjtRQjpUA94TrglHsyuWWji2rLFiFmwoZn5vbfbpgrNh84nWwXVzR
EJGy4IH12E3+R42tT1d3+9BScA3GQ1H/S/RdepFE3KzTB5oVtV3q2NVfPTQvUbk3
c4DUwkRe57iClerFz6neMhEt2c/zyGVcbiQ7/bXDU/t1QJZhvTNNzkePwVvkY4jH
VMfPOepgqL+nt+rqPUkThGW3rjvmQp3YWt9gRYiBaSuVKqrDZ5swRVW5cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFwN+V8vGBoYeh77ZfT4B8Vi3nZMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvWVhBMzVYeThZR2hoNkh2dGw5UGdIeFdMZWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQCMA0G
CSqGSIb3DQEBCwUAA4IBAQCEy5Rv7cT/DDEhRGX0AIMGYu3rUKVogLxZfy953sMa
2IMI40dXgHmX07r9PxIKXCgbh/cTV7vR/nB/6cqwhRZjnK2kIcI0JDpMOKSMofdC
TNQV/2/e/myIqeqDCx69Ogalm8jV8svxGBIs7rbiQENTQVbeNiYsWYdZJDJkTaYV
0Gx8bN/zV6VsaF/Y1SU19hY0/nkYBVil14Pm3CLbWY+QHmd8pMcuhUpYMztAQkZ4
B8mQ8nQ+lzhK/VVNtyptAvlYM5XMi+hZzEI8GeQY0HdyuJagtg0eOBkb/uQll3C0
ngvBBR601txe2fJAp4TaNvixyGd95f/xzMdegfvClAMx
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:19:28 2026 by rpki-client