Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p0YYU8cXrcGAkIG0jMVdVl_Jz2E.roa
File: p0YYU8cXrcGAkIG0jMVdVl_Jz2E.roa (raw, json)
Hash identifier: 9HSfkKqcTGj+wfHlZYIeRDCNZQOtfgUBjHRDcwNbi0I=
Subject key identifier: A7:46:18:53:C7:17:AD:C1:80:90:81:B4:8C:C5:5D:56:5F:C9:CF:61
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019C4B399F59EC3C6B9366FA5CAFE75863C9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p0YYU8cXrcGAkIG0jMVdVl_Jz2E.roa
Signing time: Wed 11 Feb 2026 05:43:13 +0000
ROA not before: Wed 11 Feb 2026 05:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215230
IP address blocks: 81.181.64.0/24 maxlen: 24
81.181.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:39:9f:59:ec:3c:6b:93:66:fa:5c:af:e7:58:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 11 05:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7461853c717adc1809081b48cc55d565fc9cf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:a6:5d:34:1b:65:39:9e:a3:24:90:d0:44:
25:55:61:a4:51:20:2d:23:04:a6:20:f9:01:bc:64:
e3:01:ab:0a:b1:53:de:22:6c:21:f3:50:2a:ef:81:
c5:fa:5f:98:f5:58:9b:2d:c3:82:c0:0e:10:cf:c6:
6f:d2:a6:82:74:b5:cf:c2:1d:c1:fc:67:ba:b6:94:
f2:d2:84:61:a2:54:b7:db:31:4f:1b:26:31:ad:ad:
8e:bd:1d:7c:8d:04:67:e2:4c:14:0f:57:38:29:7e:
34:4f:ee:59:ff:a3:24:df:33:d6:00:60:96:8b:26:
00:4c:71:56:a5:01:83:d9:ab:a9:84:8e:e2:a7:df:
eb:80:5b:ff:30:31:5d:eb:b0:ae:44:bf:33:29:d9:
e1:cc:df:b7:d4:1e:96:19:a1:d3:50:2e:f6:0f:9b:
a1:62:96:d2:16:af:7c:d3:38:fe:a5:6d:35:02:25:
ba:b2:a4:9c:df:94:5d:d1:86:9b:2a:3b:23:f9:35:
7b:63:65:fc:7a:a2:b2:c3:0d:bf:b0:d6:b4:b9:a2:
99:8b:6e:26:62:83:e6:cf:94:74:24:20:30:16:04:
6d:77:92:1e:08:ef:ec:b3:18:57:a9:e4:73:f0:ac:
dc:14:a8:30:cc:cf:2e:92:1a:8d:ad:1f:92:8b:a6:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:18:53:C7:17:AD:C1:80:90:81:B4:8C:C5:5D:56:5F:C9:CF:61
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p0YYU8cXrcGAkIG0jMVdVl_Jz2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.64.0/24
81.181.188.0/23
Signature Algorithm: sha256WithRSAEncryption
05:72:c0:6d:19:07:9e:5b:d4:28:94:60:8c:e0:5d:39:a2:a2:
b5:8b:56:22:44:7c:4b:1a:6b:4b:17:88:e6:31:e4:24:a9:b7:
2a:35:07:90:c2:b6:fa:97:29:89:3a:9d:1e:37:07:36:ca:a3:
f4:25:07:9d:9b:20:85:86:2c:6d:f8:c7:ff:2a:62:1b:db:09:
e7:dd:b5:f6:ee:df:70:e4:ee:58:20:98:14:1c:c4:84:75:6b:
f4:c8:c6:34:1b:9c:7f:d7:a2:2a:ce:71:08:e4:d8:9a:c7:ec:
27:05:c6:d4:24:48:ad:80:dd:aa:28:d1:92:9b:8c:78:71:54:
b6:30:ad:c4:3d:9e:a5:0a:e5:5f:99:86:c3:61:4f:db:ee:c7:
ec:98:55:52:57:b9:e5:07:99:bf:d6:7f:a7:b1:ce:24:6b:77:
07:6e:df:7c:8d:ad:df:30:8a:c7:70:ba:38:23:76:47:8d:68:
76:c2:80:6a:20:9e:ad:04:46:09:3b:67:0c:de:a4:32:93:8a:
51:34:3a:07:38:38:09:fa:e2:c9:ac:bd:03:2d:f3:81:ff:e2:
63:3b:05:ca:47:db:67:d3:5f:3d:01:ff:0a:30:d8:ac:ab:cf:
33:03:58:d2:50:37:24:d1:7c:9b:7b:e2:42:e9:f2:3c:e4:73:
23:24:27:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxLOZ9Z7Dxrk2b6XK/nWGPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMjExMDU0MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQ2MTg1M2M3MTdhZGMxODA5MDgxYjQ4Y2M1NWQ1NjVmYzljZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vCmXTQbZTmeoySQ0EQlVWGkUSAt
IwSmIPkBvGTjAasKsVPeImwh81Aq74HF+l+Y9VibLcOCwA4Qz8Zv0qaCdLXPwh3B
/Ge6tpTy0oRholS32zFPGyYxra2OvR18jQRn4kwUD1c4KX40T+5Z/6Mk3zPWAGCW
iyYATHFWpQGD2auphI7ip9/rgFv/MDFd67CuRL8zKdnhzN+31B6WGaHTUC72D5uh
YpbSFq980zj+pW01AiW6sqSc35Rd0YabKjsj+TV7Y2X8eqKyww2/sNa0uaKZi24m
YoPmz5R0JCAwFgRtd5IeCO/ssxhXqeRz8KzcFKgwzM8ukhqNrR+Si6aLBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKdGGFPHF63BgJCBtIzFXVZfyc9hMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvcDBZWVU4Y1hyY0dBa0lHMGpNVmRWbF9KejJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUbVAAwQB
UbW8MA0GCSqGSIb3DQEBCwUAA4IBAQAFcsBtGQeeW9QolGCM4F05oqK1i1YiRHxL
GmtLF4jmMeQkqbcqNQeQwrb6lymJOp0eNwc2yqP0JQedmyCFhixt+Mf/KmIb2wnn
3bX27t9w5O5YIJgUHMSEdWv0yMY0G5x/16IqznEI5Niax+wnBcbUJEitgN2qKNGS
m4x4cVS2MK3EPZ6lCuVfmYbDYU/b7sfsmFVSV7nlB5m/1n+nsc4ka3cHbt98ja3f
MIrHcLo4I3ZHjWh2woBqIJ6tBEYJO2cM3qQyk4pRNDoHODgJ+uLJrL0DLfOB/+Jj
OwXKR9tn0189Af8KMNisq88zA1jSUDck0Xybe+JC6fI85HMjJCdt
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:28 2026 by rpki-client