Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylQFxvG36vXVLTGOKI2unXkfSzY.roa
File: ylQFxvG36vXVLTGOKI2unXkfSzY.roa (raw, json)
Hash identifier: qDGrwXkTHsR2ycbE0/HOa5Lu8fI8lzu5ZlSS6iTTtgc=
Subject key identifier: CA:54:05:C6:F1:B7:EA:F5:D5:2D:31:8E:28:8D:AE:9D:79:1F:4B:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D9A8159DC704CE9A3719C5AAEA612CD0C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylQFxvG36vXVLTGOKI2unXkfSzY.roa
Signing time: Fri 17 Apr 2026 08:14:21 +0000
ROA not before: Fri 17 Apr 2026 08:14:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 45.88.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:81:59:dc:70:4c:e9:a3:71:9c:5a:ae:a6:12:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 08:14:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca5405c6f1b7eaf5d52d318e288dae9d791f4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:20:8e:16:9d:49:9f:c2:5a:1a:e6:53:e1:
ca:7d:d0:37:c2:1d:29:34:02:63:80:89:7b:bd:b2:
4c:2c:ef:24:fc:db:06:4b:c5:3a:9a:61:45:b0:dc:
b3:09:46:ae:55:f4:7c:e5:b8:00:b1:65:b6:a5:69:
3a:5a:fd:52:b5:2a:c0:a3:6c:51:ea:93:75:80:b1:
b8:eb:53:d5:87:f6:29:b7:43:61:03:fb:f7:96:69:
bf:71:7d:84:14:35:3d:7a:bd:64:77:0a:04:93:e3:
ab:12:e8:4e:0c:fa:2d:fa:eb:69:d2:ee:4a:93:92:
fd:ee:b9:bd:df:09:db:a6:ce:75:35:19:d3:3c:62:
f7:01:b0:92:e9:1d:92:c5:a3:6c:e8:e6:3a:c4:c6:
1f:a1:e1:f7:fe:ee:46:35:10:f9:14:08:45:5b:09:
eb:ba:3f:bf:a0:c1:10:f8:e6:57:2a:c6:10:fd:61:
8b:0b:02:88:dc:cd:b4:5d:6d:b8:8a:7b:46:5d:d3:
c4:f9:0d:d9:9d:d5:54:84:b7:af:4d:a2:f7:1a:46:
de:88:d2:06:1a:12:c3:04:34:e3:3c:3c:48:bc:8f:
17:df:2e:65:60:8e:71:06:df:55:0c:45:65:cd:16:
29:64:87:3c:3f:78:a6:10:bf:8d:67:6e:80:49:a6:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:05:C6:F1:B7:EA:F5:D5:2D:31:8E:28:8D:AE:9D:79:1F:4B:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ylQFxvG36vXVLTGOKI2unXkfSzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:08:b3:b3:95:1a:d3:3f:9c:78:a7:76:e8:18:12:6a:0f:f4:
2d:97:0e:54:21:fd:00:2f:6b:8e:4d:f0:e7:81:84:05:8c:14:
4c:2a:22:ca:6f:02:0d:a4:49:2c:0a:dd:7c:dd:6e:ac:0d:74:
88:e7:49:fe:64:d1:18:62:c9:7b:37:d3:84:f5:99:59:68:df:
fd:ca:54:f6:74:f2:b0:9d:31:57:a0:62:46:6e:71:b0:e1:21:
a9:a3:59:47:31:57:cf:eb:bc:e5:4b:e1:3d:f8:73:a9:6b:21:
6c:70:68:29:fc:1d:5b:8a:b5:bd:fc:41:39:a2:de:25:9d:b9:
78:ed:e6:d7:95:3f:71:da:b7:3a:c1:90:d7:86:26:96:c3:2e:
82:bb:da:d4:dc:10:36:7d:c4:f8:b7:50:33:7f:ea:e7:fd:8c:
ed:0e:d9:61:ba:00:1c:1b:72:5e:9c:ad:7f:0c:da:61:fc:24:
be:f5:da:f3:68:67:7f:a4:de:6a:bb:a4:43:3c:f0:2c:a0:8d:
e5:1c:a1:9c:9b:a4:eb:ff:3f:0c:9c:d6:b3:ef:1e:5e:cc:b5:
31:40:11:f7:ab:10:13:09:74:d8:80:15:84:74:35:ab:94:c7:
41:9e:f3:87:a6:2e:3d:7d:55:f6:93:97:99:7c:34:93:52:22:
9d:f2:ff:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2agVnccEzpo3GcWq6mEs0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNDE3MDgxNDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTU0MDVjNmYxYjdlYWY1ZDUyZDMxOGUyODhkYWU5ZDc5MWY0YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAogjhadSZ/CWhrmU+HKfdA3wh0p
NAJjgIl7vbJMLO8k/NsGS8U6mmFFsNyzCUauVfR85bgAsWW2pWk6Wv1StSrAo2xR
6pN1gLG461PVh/Ypt0NhA/v3lmm/cX2EFDU9er1kdwoEk+OrEuhODPot+utp0u5K
k5L97rm93wnbps51NRnTPGL3AbCS6R2SxaNs6OY6xMYfoeH3/u5GNRD5FAhFWwnr
uj+/oMEQ+OZXKsYQ/WGLCwKI3M20XW24intGXdPE+Q3ZndVUhLevTaL3GkbeiNIG
GhLDBDTjPDxIvI8X3y5lYI5xBt9VDEVlzRYpZIc8P3imEL+NZ26ASaaIIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpUBcbxt+r11S0xjiiNrp15H0s2MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveWxRRnh2RzM2dlhWTFRHT0tJMnVuWGtmU3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhCMA0G
CSqGSIb3DQEBCwUAA4IBAQBcCLOzlRrTP5x4p3boGBJqD/Qtlw5UIf0AL2uOTfDn
gYQFjBRMKiLKbwINpEksCt183W6sDXSI50n+ZNEYYsl7N9OE9ZlZaN/9ylT2dPKw
nTFXoGJGbnGw4SGpo1lHMVfP67zlS+E9+HOpayFscGgp/B1birW9/EE5ot4lnbl4
7ebXlT9x2rc6wZDXhiaWwy6Cu9rU3BA2fcT4t1Azf+rn/YztDtlhugAcG3JenK1/
DNph/CS+9drzaGd/pN5qu6RDPPAsoI3lHKGcm6Tr/z8MnNaz7x5ezLUxQBH3qxAT
CXTYgBWEdDWrlMdBnvOHpi49fVX2k5eZfDSTUiKd8v+N
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:28:43 2026 by rpki-client