Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/ySEgLNv5akKaGSPHf8sn9WXgx14.roa
File: ySEgLNv5akKaGSPHf8sn9WXgx14.roa (raw, json)
Hash identifier: UUfL1P1qktY+dQFpnarrYKqbpVzqQOYO9+kpRUhxiI4=
Subject key identifier: C9:21:20:2C:DB:F9:6A:42:9A:19:23:C7:7F:CB:27:F5:65:E0:C7:5E
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 01A0226F36A2836D18422FC2E56AED3FB1C3
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/ySEgLNv5akKaGSPHf8sn9WXgx14.roa
Signing time: Fri 21 Aug 2026 03:48:28 +0000
ROA not before: Fri 21 Aug 2026 03:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154402
IP address blocks: 45.82.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:6f:36:a2:83:6d:18:42:2f:c2:e5:6a:ed:3f:b1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Aug 21 03:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c921202cdbf96a429a1923c77fcb27f565e0c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:5a:71:22:4e:ea:ce:3b:58:ed:53:d7:3c:
0b:57:7f:88:cb:76:90:03:7b:d5:a2:8e:d7:d7:58:
6d:43:ba:96:92:43:df:46:81:b2:5c:8a:fa:cd:33:
84:34:79:45:fc:f9:bd:87:13:a2:09:b2:6c:7e:d0:
12:19:92:ee:ad:fa:d1:35:7a:bb:c5:8d:09:08:ca:
bc:27:a9:8a:0c:d2:cd:f7:75:e1:12:20:ca:de:90:
0c:01:98:55:63:ea:f2:e3:5b:f4:af:75:81:fe:7d:
5c:d6:64:3e:0b:61:c8:dd:e8:16:f0:f0:0b:33:86:
e3:d3:3f:b8:5d:9a:d3:ac:2e:b4:79:3d:15:c1:b0:
3f:c0:45:94:33:9d:0e:47:58:a7:9c:70:aa:f3:52:
8c:9d:48:77:5f:36:e4:b2:f3:62:e1:2a:9a:4c:f4:
1f:3a:41:61:ca:fd:56:20:ab:9e:12:8a:d2:7a:88:
bc:04:28:4d:a4:44:a1:4d:c3:81:43:29:94:75:0a:
41:b3:4b:96:f9:2d:ec:67:02:93:33:84:91:df:e9:
28:92:c9:6f:3f:b3:63:cd:db:d2:b1:22:db:0a:02:
3c:8d:af:94:e1:92:d9:c5:07:50:98:bf:1f:0d:a0:
5c:02:d1:93:66:a4:89:23:2f:10:95:c2:5b:f3:c5:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:20:2C:DB:F9:6A:42:9A:19:23:C7:7F:CB:27:F5:65:E0:C7:5E
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/ySEgLNv5akKaGSPHf8sn9WXgx14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:96:5b:f5:67:3f:b7:de:94:2b:df:a1:e8:5a:11:15:e3:45:
88:79:68:53:f6:1b:a2:1d:b9:ee:dc:12:ba:2a:73:a3:fc:b5:
4c:89:33:b8:eb:dd:ce:b8:dd:61:09:85:b8:11:97:84:c0:d8:
f8:9d:10:35:af:40:7b:9d:c2:9b:46:27:98:64:ca:e2:46:40:
2c:13:e9:ba:8d:49:f4:5e:68:fa:10:53:c8:c0:17:76:d7:5f:
ba:c6:84:a0:4a:75:48:4f:71:9b:1f:ba:bb:a8:43:08:1d:89:
ea:a3:90:bb:54:63:55:09:b1:3d:89:2a:43:55:a4:ac:b3:78:
e1:36:89:98:37:47:c2:11:69:d6:e1:2a:0e:0a:0b:1f:84:bb:
d0:cd:52:01:11:df:84:84:bc:63:de:47:a6:80:d3:3d:f2:6c:
3f:97:ec:40:9a:e6:c0:8f:af:36:3d:bc:85:2d:09:3b:6a:8f:
4a:d8:0b:9e:66:ac:31:24:30:8c:f1:5f:a1:ab:2f:06:ec:a3:
bc:92:dc:3c:ac:9f:31:c4:83:4f:c9:8f:7c:74:1c:b7:f4:17:
7c:04:ba:d2:2d:ec:b6:25:d2:dc:88:5a:93:5a:79:ef:9c:b8:
55:9c:7c:f6:78:f4:8e:99:18:a4:62:c7:2c:af:e1:df:ab:e2:
62:a4:09:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAibzaig20YQi/C5WrtP7HDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTJiZTk4NDM4Yjk4ZWU2OGEwZDFiOGM0MTQ0NTIwYmQw
YTYyM2QwHhcNMjYwODIxMDM0ODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTIxMjAyY2RiZjk2YTQyOWExOTIzYzc3ZmNiMjdmNTY1ZTBjNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WRacSJO6s47WO1T1zwLV3+Iy3aQ
A3vVoo7X11htQ7qWkkPfRoGyXIr6zTOENHlF/Pm9hxOiCbJsftASGZLurfrRNXq7
xY0JCMq8J6mKDNLN93XhEiDK3pAMAZhVY+ry41v0r3WB/n1c1mQ+C2HI3egW8PAL
M4bj0z+4XZrTrC60eT0VwbA/wEWUM50OR1innHCq81KMnUh3XzbksvNi4SqaTPQf
OkFhyv1WIKueEorSeoi8BChNpEShTcOBQymUdQpBs0uW+S3sZwKTM4SR3+kokslv
P7NjzdvSsSLbCgI8ja+U4ZLZxQdQmL8fDaBcAtGTZqSJIy8QlcJb88WsfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkhICzb+WpCmhkjx3/LJ/Vl4MdeMB8GA1UdIwQY
MBaAFHuivphDi5juaKDRuMQURSC9CmI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYt
NDkzNWIzZjVjMjA5LzEveVNFZ0xOdjVha0thR1NQSGY4c245V1hneDE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYtNDkzNWIzZjVjMjA5
LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVLuMA0G
CSqGSIb3DQEBCwUAA4IBAQBdllv1Zz+33pQr36HoWhEV40WIeWhT9huiHbnu3BK6
KnOj/LVMiTO4693OuN1hCYW4EZeEwNj4nRA1r0B7ncKbRieYZMriRkAsE+m6jUn0
Xmj6EFPIwBd211+6xoSgSnVIT3GbH7q7qEMIHYnqo5C7VGNVCbE9iSpDVaSss3jh
NomYN0fCEWnW4SoOCgsfhLvQzVIBEd+EhLxj3kemgNM98mw/l+xAmubAj682PbyF
LQk7ao9K2AueZqwxJDCM8V+hqy8G7KO8ktw8rJ8xxINPyY98dBy39Bd8BLrSLey2
JdLciFqTWnnvnLhVnHz2ePSOmRikYscsr+Hfq+JipAkk
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:45 2026 by rpki-client