Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yHd3y566qumDeCF7VCZeFIO18gc.roa
File: yHd3y566qumDeCF7VCZeFIO18gc.roa (raw, json)
Hash identifier: rXDeqmK6EkOMAkpr6+a7xfq1Ceio2CLTqtNBttQrAh0=
Subject key identifier: C8:77:77:CB:9E:BA:AA:E9:83:78:21:7B:54:26:5E:14:83:B5:F2:07
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019FA988AE141435F3E4F57C3728682C5294
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yHd3y566qumDeCF7VCZeFIO18gc.roa
Signing time: Tue 28 Jul 2026 16:22:14 +0000
ROA not before: Tue 28 Jul 2026 16:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:88:ae:14:14:35:f3:e4:f5:7c:37:28:68:2c:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 28 16:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c87777cb9ebaaae98378217b54265e1483b5f207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:fa:97:14:72:d0:88:82:4e:59:82:98:f7:
b0:bd:16:62:48:a9:07:b1:e8:2b:bd:7d:c8:bf:d4:
df:d4:74:9f:18:c3:60:22:0b:b9:d9:d4:f4:97:1e:
ec:80:57:8f:06:b2:e0:15:eb:40:1b:95:69:0c:52:
4f:b8:4c:ea:f0:4e:27:f1:31:d1:27:d1:2f:6e:5c:
09:11:7c:a9:05:ab:8e:18:88:f9:e7:9e:63:c7:73:
58:39:7f:97:b1:0d:9c:f0:19:5e:cc:46:b6:2e:a4:
86:cb:1e:bf:f6:f9:66:bf:4e:44:0c:bc:da:aa:14:
da:d1:2d:46:f3:d8:44:05:4d:cb:99:e1:08:ce:7a:
16:5d:18:fd:43:32:24:60:73:a4:a4:6f:9a:c1:3b:
9b:c4:0b:db:5a:0d:3c:9c:be:02:7b:3e:29:b8:80:
4b:dd:30:95:a1:97:68:2d:84:9d:7d:54:c0:9c:df:
fa:dd:10:16:46:eb:de:51:9b:ce:ff:3a:f3:0e:3d:
2c:5b:2b:e4:51:85:c0:03:3c:cc:1d:23:34:43:2e:
22:93:94:90:25:a7:78:c7:29:05:80:39:34:fb:b1:
3c:b7:65:a9:4a:f0:5f:bf:99:b7:27:b1:f8:5d:48:
4d:2d:6c:91:41:1d:15:5e:0d:76:9e:84:50:a6:fc:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:77:CB:9E:BA:AA:E9:83:78:21:7B:54:26:5E:14:83:B5:F2:07
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yHd3y566qumDeCF7VCZeFIO18gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4e:79:56:28:1a:98:a9:9a:61:1e:75:aa:0e:7c:3a:8f:c1:
3f:98:a1:3d:88:1a:44:ca:ce:49:e1:92:c2:e2:de:0f:e3:ca:
a5:36:67:91:bc:97:1b:17:64:b9:1e:2e:e7:65:89:be:d0:2c:
e9:09:0b:96:7d:15:46:99:0f:d6:f1:d7:7d:f1:8d:14:d3:b0:
1d:73:75:d7:5b:9a:dc:68:ae:03:29:ad:67:25:fb:b9:e6:5a:
f6:ea:72:bc:0b:f2:55:29:21:d4:24:ad:d2:eb:bb:1c:e8:cd:
1c:9a:67:ec:9c:5e:09:6a:ad:2c:4c:83:73:71:0b:2a:da:2f:
b0:1a:eb:28:c9:b9:69:44:c4:6c:80:89:23:0d:56:db:5a:13:
ea:39:51:5e:9b:07:61:bf:0c:39:d8:de:c9:dc:0e:15:35:ca:
28:b6:42:6e:20:0d:3e:9f:4d:a2:0f:c4:0f:3f:9d:e8:ef:ee:
4a:f1:75:25:23:55:b3:c6:ed:0b:50:8b:56:61:0f:ea:eb:61:
0b:66:8a:ae:1b:c8:c7:d5:1f:ec:5b:0b:33:84:58:85:9b:f2:
ef:de:21:54:59:ca:c6:e3:1f:8f:00:9a:d5:35:48:98:86:59:
7d:a4:97:b2:ff:29:aa:bb:92:18:f8:3d:f0:c6:cc:98:b3:7f:
6a:22:68:7a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ+piK4UFDXz5PV8NyhoLFKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwNzI4MTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc3NzdjYjllYmFhYWU5ODM3ODIxN2I1NDI2NWUxNDgzYjVmMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0r6lxRy0IiCTlmCmPewvRZiSKkH
segrvX3Iv9Tf1HSfGMNgIgu52dT0lx7sgFePBrLgFetAG5VpDFJPuEzq8E4n8THR
J9EvblwJEXypBauOGIj5555jx3NYOX+XsQ2c8BlezEa2LqSGyx6/9vlmv05EDLza
qhTa0S1G89hEBU3LmeEIznoWXRj9QzIkYHOkpG+awTubxAvbWg08nL4Cez4puIBL
3TCVoZdoLYSdfVTAnN/63RAWRuveUZvO/zrzDj0sWyvkUYXAAzzMHSM0Qy4ik5SQ
Jad4xykFgDk0+7E8t2WpSvBfv5m3J7H4XUhNLWyRQR0VXg12noRQpvwJNQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMh3d8ueuqrpg3ghe1QmXhSDtfIHMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEveUhkM3k1NjZxdW1EZUNGN1ZDWmVGSU8xOGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBAjhsAwQA
LVFxAwQALVFzAwQALViLAwQALYS1AwQAVdF4AwQAwTkpAwQAwg80MA0GCSqGSIb3
DQEBCwUAA4IBAQBUTnlWKBqYqZphHnWqDnw6j8E/mKE9iBpEys5J4ZLC4t4P48ql
NmeRvJcbF2S5Hi7nZYm+0CzpCQuWfRVGmQ/W8dd98Y0U07Adc3XXW5rcaK4DKa1n
Jfu55lr26nK8C/JVKSHUJK3S67sc6M0cmmfsnF4Jaq0sTINzcQsq2i+wGusoyblp
RMRsgIkjDVbbWhPqOVFemwdhvww52N7J3A4VNcootkJuIA0+n02iD8QPP53o7+5K
8XUlI1Wzxu0LUItWYQ/q62ELZoquG8jH1R/sWwszhFiFm/Lv3iFUWcrG4x+PAJrV
NUiYhll9pJey/ymqu5IY+D3wxsyYs39qImh6
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:25 2026 by rpki-client