Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yUTmeS-NkDfKbmdfTdkhxc4774c.roa
File: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (raw, json)
Hash identifier: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=
Subject key identifier: C9:44:E6:79:2F:8D:90:37:CA:6E:67:5F:4D:D9:21:C5:CE:3B:EF:87
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019F70A0CE6F60EC082CD790A20DDF8F127C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yUTmeS-NkDfKbmdfTdkhxc4774c.roa
Signing time: Fri 17 Jul 2026 15:10:14 +0000
ROA not before: Fri 17 Jul 2026 15:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 213.145.82.0/24 maxlen: 24
213.145.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:a0:ce:6f:60:ec:08:2c:d7:90:a2:0d:df:8f:12:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 17 15:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c944e6792f8d9037ca6e675f4dd921c5ce3bef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:15:74:73:28:bc:1e:24:7c:c3:3b:a9:b6:
85:bc:67:79:82:37:8f:15:9f:5f:3b:e8:04:0e:c5:
c5:e7:c7:53:91:1f:20:62:4d:95:3e:4a:26:21:37:
49:7c:04:d1:c2:9c:16:44:be:cd:ce:d7:61:cd:ac:
e5:ca:ed:f3:e2:2b:eb:65:29:1f:6a:66:dc:33:84:
d6:0c:9e:77:72:92:79:dc:34:36:14:e1:5c:b2:48:
1e:2b:4e:c1:82:11:a4:d1:b9:a3:7c:bb:ca:b9:ba:
26:95:c5:2e:7e:21:f3:ff:02:86:87:6d:c3:e5:b9:
56:b0:24:3d:03:df:c9:9b:0a:7b:b1:c2:48:6e:4d:
67:ea:75:2e:8b:85:a4:db:7e:62:e8:96:8b:a7:c0:
9f:1c:64:54:ba:1f:0d:3d:5d:0d:2e:2f:b2:c9:16:
fc:3c:b8:e1:03:39:10:4c:a3:aa:0d:5a:08:9b:51:
a3:88:d1:43:d1:38:7f:ec:5e:d1:7c:fd:02:a2:74:
f0:69:80:de:fc:3d:0a:72:7d:d2:04:b9:54:4d:2c:
5a:29:88:eb:5d:94:0b:04:2e:76:11:0c:5d:2e:2d:
1d:dd:72:18:eb:7e:10:ab:2e:ea:ca:ac:3f:8b:68:
f3:41:5e:7c:0f:64:b8:ab:0f:5b:37:54:03:df:a8:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:E6:79:2F:8D:90:37:CA:6E:67:5F:4D:D9:21:C5:CE:3B:EF:87
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/yUTmeS-NkDfKbmdfTdkhxc4774c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.82.0/24
213.145.87.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ec:b0:33:42:9f:23:35:77:61:25:fb:2b:93:5a:e6:86:95:
61:e1:64:d1:c5:e9:e0:e6:d7:d5:9e:04:9a:4f:6e:15:20:18:
14:a5:e0:55:9b:06:f6:84:aa:87:81:29:31:18:ef:74:2a:75:
6a:33:e0:94:34:5e:9c:fb:86:13:b2:c4:0d:3b:cd:f5:86:0d:
f5:24:11:b0:3e:4d:01:43:81:42:47:76:07:01:df:17:48:94:
0f:79:2a:5a:4d:fe:38:99:66:58:40:11:9e:13:28:e6:c4:3f:
c5:71:6c:37:96:92:e4:f5:8b:cc:27:2f:c9:43:4f:c5:06:de:
99:86:9c:db:5d:68:c8:83:03:74:8e:b1:97:49:64:1b:3a:15:
6b:2b:a3:a7:94:8e:6f:4f:1f:92:d6:73:b1:a7:3e:30:98:8c:
b6:3b:08:e2:4d:b3:d7:35:8f:66:64:a4:cf:ea:b7:46:46:ec:
51:b9:8d:db:a8:34:85:d1:d7:1e:87:31:ff:4b:5c:9e:70:e5:
b2:4b:53:81:39:63:26:be:ce:a5:07:a4:b7:8c:4e:4b:75:4c:
4f:23:e6:57:ee:e3:d0:f1:4b:2b:b3:dd:f6:b2:17:63:75:2d:
b3:86:4b:6c:54:d6:75:c9:e3:b1:8f:85:f5:38:e1:cb:4b:4e:
29:ad:3b:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9woM5vYOwILNeQog3fjxJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwNzE3MTUxMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTQ0ZTY3OTJmOGQ5MDM3Y2E2ZTY3NWY0ZGQ5MjFjNWNlM2JlZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveQVdHMovB4kfMM7qbaFvGd5gjeP
FZ9fO+gEDsXF58dTkR8gYk2VPkomITdJfATRwpwWRL7Nztdhzazlyu3z4ivrZSkf
ambcM4TWDJ53cpJ53DQ2FOFcskgeK07BghGk0bmjfLvKubomlcUufiHz/wKGh23D
5blWsCQ9A9/Jmwp7scJIbk1n6nUui4Wk235i6JaLp8CfHGRUuh8NPV0NLi+yyRb8
PLjhAzkQTKOqDVoIm1GjiNFD0Th/7F7RfP0ConTwaYDe/D0Kcn3SBLlUTSxaKYjr
XZQLBC52EQxdLi0d3XIY634Qqy7qyqw/i2jzQV58D2S4qw9bN1QD36iYYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMlE5nkvjZA3ym5nX03ZIcXOO++HMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEveVVUbWVTLU5rRGZLYm1kZlRka2h4YzQ3NzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFSAwQA
1ZFXMA0GCSqGSIb3DQEBCwUAA4IBAQCE7LAzQp8jNXdhJfsrk1rmhpVh4WTRxeng
5tfVngSaT24VIBgUpeBVmwb2hKqHgSkxGO90KnVqM+CUNF6c+4YTssQNO831hg31
JBGwPk0BQ4FCR3YHAd8XSJQPeSpaTf44mWZYQBGeEyjmxD/FcWw3lpLk9YvMJy/J
Q0/FBt6ZhpzbXWjIgwN0jrGXSWQbOhVrK6OnlI5vTx+S1nOxpz4wmIy2OwjiTbPX
NY9mZKTP6rdGRuxRuY3bqDSF0dcehzH/S1yecOWyS1OBOWMmvs6lB6S3jE5LdUxP
I+ZX7uPQ8Usrs932shdjdS2zhktsVNZ1yeOxj4X1OOHLS04prTug
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:01:27 2026 by rpki-client