Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YAx1lGnos99Jo87V3B6vt-EsV88.roa
File: YAx1lGnos99Jo87V3B6vt-EsV88.roa (raw, json)
Hash identifier: GKo/Z344H5O5F03h11UB1lN3oDLKZmdx169H4yQB7eU=
Subject key identifier: 60:0C:75:94:69:E8:B3:DF:49:A3:CE:D5:DC:1E:AF:B7:E1:2C:57:CF
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0822865B09EAF7B1649582BE8F4252593
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YAx1lGnos99Jo87V3B6vt-EsV88.roa
Signing time: Tue 08 Sep 2026 17:54:40 +0000
ROA not before: Tue 08 Sep 2026 17:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:28:65:b0:9e:af:7b:16:49:58:2b:e8:f4:25:25:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 8 17:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=600c759469e8b3df49a3ced5dc1eafb7e12c57cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:c2:45:03:e6:c7:0a:fa:fd:b0:1b:91:4d:
c5:25:17:80:a2:9a:94:05:fe:60:4b:8d:7c:55:8d:
95:53:e0:20:3a:7f:b4:44:89:4f:5e:12:46:62:e2:
d0:12:70:08:87:77:49:59:f4:10:82:c7:bf:c4:79:
fb:69:09:bd:9c:28:b9:b7:fd:f9:53:e4:6c:57:a5:
c0:df:00:56:d2:58:bf:66:cd:32:fc:a2:c2:d0:c7:
98:56:50:53:e9:7c:19:85:da:7d:04:69:9e:85:20:
df:5e:06:a4:ae:7c:2e:dc:66:1b:2a:cb:b6:28:f7:
ae:d7:c9:c7:2f:97:14:27:b8:e9:b6:80:dd:04:05:
d3:e8:07:77:fc:09:bc:ee:7b:cc:57:ae:e0:66:39:
c6:81:0b:7f:61:18:5f:b8:f5:b3:0f:53:07:fb:e9:
67:93:36:c5:a6:78:11:d0:bb:01:af:89:27:9e:11:
57:ec:34:52:1c:61:4a:b6:77:32:73:c2:42:e9:8b:
1d:c4:93:49:3d:99:98:fe:e3:ae:34:9e:bf:4d:ac:
8a:f7:9e:2d:2c:62:ca:62:d3:1e:69:2f:a0:32:ab:
83:06:7c:b6:2f:42:d8:d3:e0:f3:4f:89:c9:f5:a3:
ed:7f:2d:73:8c:5d:b6:6a:58:78:f5:50:ef:3f:cf:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:75:94:69:E8:B3:DF:49:A3:CE:D5:DC:1E:AF:B7:E1:2C:57:CF
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YAx1lGnos99Jo87V3B6vt-EsV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
55:78:bc:cc:b1:ac:c8:1b:dd:4d:b8:e3:ed:e8:3b:c5:fd:f2:
bc:d6:35:08:34:19:96:27:c9:19:4d:31:44:a6:f6:0c:56:9b:
b5:22:22:05:65:2c:6d:f5:b2:67:11:b4:63:37:ad:1b:58:bc:
c3:ef:e0:3c:f0:a8:f2:9d:c9:f3:b8:c4:ca:64:3f:f9:6f:68:
df:ff:69:4a:c1:8b:aa:be:a1:ce:c5:cf:82:22:30:3c:d9:18:
30:07:87:3e:a5:93:e7:9a:82:e9:13:e3:23:27:08:27:d7:61:
81:b1:80:14:b2:26:d5:3e:a6:a9:fe:2c:10:fe:f4:cf:e4:2c:
85:39:d5:e1:e2:ea:fb:8f:66:37:24:ca:74:4d:0f:0a:94:b2:
8b:ad:b8:a7:4d:98:5c:be:a7:eb:84:6c:51:4f:d8:b2:bc:83:
b0:0c:ed:bb:78:90:7f:b7:ba:31:8b:20:e2:65:0b:35:be:cf:
f0:fd:94:25:2b:65:74:a2:e4:04:de:b7:d3:8a:2e:3d:2f:fc:
d8:c3:e9:83:81:8c:bb:74:ac:15:90:1b:57:5f:88:b8:f7:f7:
0b:d8:09:da:9f:24:59:6b:5a:63:9c:a0:b9:4f:ed:ed:07:16:
ef:47:5e:79:02:ed:af:5c:78:a8:23:c3:b7:8c:26:a0:a0:36:
ab:12:e3:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCCKGWwnq97FklYK+j0JSWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwOTA4MTc1NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDBjNzU5NDY5ZThiM2RmNDlhM2NlZDVkYzFlYWZiN2UxMmM1N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLCRQPmxwr6/bAbkU3FJReAopqU
Bf5gS418VY2VU+AgOn+0RIlPXhJGYuLQEnAIh3dJWfQQgse/xHn7aQm9nCi5t/35
U+RsV6XA3wBW0li/Zs0y/KLC0MeYVlBT6XwZhdp9BGmehSDfXgakrnwu3GYbKsu2
KPeu18nHL5cUJ7jptoDdBAXT6Ad3/Am87nvMV67gZjnGgQt/YRhfuPWzD1MH++ln
kzbFpngR0LsBr4knnhFX7DRSHGFKtncyc8JC6YsdxJNJPZmY/uOuNJ6/TayK954t
LGLKYtMeaS+gMquDBny2L0LY0+DzT4nJ9aPtfy1zjF22alh49VDvP899DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGAMdZRp6LPfSaPO1dwer7fhLFfPMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvWUF4MWxHbm9zOTlKbzg3VjNCNnZ0LUVzVjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQiQMA0G
CSqGSIb3DQEBCwUAA4IBAQBVeLzMsazIG91NuOPt6DvF/fK81jUINBmWJ8kZTTFE
pvYMVpu1IiIFZSxt9bJnEbRjN60bWLzD7+A88KjyncnzuMTKZD/5b2jf/2lKwYuq
vqHOxc+CIjA82RgwB4c+pZPnmoLpE+MjJwgn12GBsYAUsibVPqap/iwQ/vTP5CyF
OdXh4ur7j2Y3JMp0TQ8KlLKLrbinTZhcvqfrhGxRT9iyvIOwDO27eJB/t7oxiyDi
ZQs1vs/w/ZQlK2V0ouQE3rfTii49L/zYw+mDgYy7dKwVkBtXX4i49/cL2AnanyRZ
a1pjnKC5T+3tBxbvR155Au2vXHioI8O3jCagoDarEuMy
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:18:10 2026 by rpki-client