Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yAol-EbbaNV-k8hN9i2jtI165b8.roa
File: yAol-EbbaNV-k8hN9i2jtI165b8.roa (raw, json)
Hash identifier: OyOG5EZ2J+vlWGjKD43VcOysAruFfwshDM1TLDcnnw0=
Subject key identifier: C8:0A:25:F8:46:DB:68:D5:7E:93:C8:4D:F6:2D:A3:B4:8D:7A:E5:BF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A116A4920F85E5788BD49155EB68203BAF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yAol-EbbaNV-k8hN9i2jtI165b8.roa
Signing time: Wed 07 Oct 2026 13:54:06 +0000
ROA not before: Wed 07 Oct 2026 13:54:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218956
IP address blocks: 89.251.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:a4:92:0f:85:e5:78:8b:d4:91:55:eb:68:20:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 7 13:54:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80a25f846db68d57e93c84df62da3b48d7ae5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:e7:5b:b9:18:2a:00:08:46:c6:28:de:19:
0e:00:76:82:fe:32:ce:b0:73:17:ae:2c:49:6f:b4:
d5:f5:ac:ec:26:77:9b:dc:90:3f:19:3c:7f:7c:f0:
71:2b:00:06:a9:19:1f:6d:74:64:4d:db:b0:f7:3e:
0c:b6:af:2d:a7:5c:9a:fa:b4:82:50:c9:bd:8b:79:
de:d6:20:82:09:98:16:d9:0a:57:c8:42:53:6a:3f:
db:d0:c8:b0:45:74:af:45:1f:57:ab:14:13:6b:c9:
2a:bf:4b:2b:47:a5:8d:af:53:e2:13:06:43:cf:2c:
60:51:8f:77:c3:4e:8a:bb:13:56:e9:3d:48:74:9e:
98:93:13:23:e4:c9:6f:e6:d9:1f:6e:38:6e:c9:aa:
44:36:12:66:4b:24:31:89:d4:5c:f0:cc:8b:d0:a7:
e8:53:00:e9:53:7d:ab:78:bb:8e:20:87:de:1a:85:
80:7f:b2:1d:42:4b:a3:10:39:34:82:a6:4f:d0:e3:
de:7b:25:76:d7:e7:59:d1:e6:2c:69:15:7b:8c:65:
b6:8a:af:7d:e4:da:86:55:93:62:15:9f:88:4c:cc:
2e:cc:35:3d:7a:ed:6e:e5:e3:15:a8:7f:e1:0d:4d:
6a:be:de:84:cc:30:fb:f4:b1:e1:93:ad:cc:77:4d:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:25:F8:46:DB:68:D5:7E:93:C8:4D:F6:2D:A3:B4:8D:7A:E5:BF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yAol-EbbaNV-k8hN9i2jtI165b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bf:41:66:2a:78:db:85:20:3d:6b:ba:57:dd:8e:39:e3:13:
ba:3b:e2:6a:a5:4f:a6:be:21:2e:ba:3a:83:91:59:73:0f:3f:
5b:10:00:95:f5:a9:ba:c1:b4:a9:72:c8:25:f5:ce:aa:93:90:
f9:fb:6c:03:31:91:cd:f9:04:c7:92:59:c6:47:6f:d4:3b:1e:
76:ec:cb:23:0f:f9:74:54:b4:b1:cd:d8:6a:ef:bd:6a:72:fa:
a2:31:2b:67:0c:48:00:33:13:c7:2e:6a:e2:8f:f3:f9:d3:82:
6d:29:49:1d:b0:de:4f:5e:3f:6c:4e:41:c3:5a:33:47:d5:06:
9a:45:8f:8f:2d:05:ed:ba:5b:be:12:e6:ba:25:62:a8:1a:58:
2e:1e:a1:a0:aa:4e:92:c6:2f:bb:99:4e:39:61:19:c1:62:9e:
34:4c:bf:e0:b9:97:c4:36:ea:4f:57:dd:4e:a4:1b:79:c3:87:
0e:eb:64:57:c7:78:30:91:19:70:ed:fb:e8:41:90:e2:b7:44:
88:1e:f0:3b:b0:ca:c9:c6:1a:1d:59:4c:35:45:b5:0a:5f:b5:
bb:87:dd:f9:6c:4e:a8:ec:c0:62:73:f8:10:98:ee:1f:72:0b:
ee:e4:81:df:3d:a8:47:67:d1:c9:73:48:8b:3c:a4:f8:28:84:
50:98:cc:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEWpJIPheV4i9SRVetoIDuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYxMDA3MTM1NDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODBhMjVmODQ2ZGI2OGQ1N2U5M2M4NGRmNjJkYTNiNDhkN2FlNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrTnW7kYKgAIRsYo3hkOAHaC/jLO
sHMXrixJb7TV9azsJneb3JA/GTx/fPBxKwAGqRkfbXRkTduw9z4Mtq8tp1ya+rSC
UMm9i3ne1iCCCZgW2QpXyEJTaj/b0MiwRXSvRR9XqxQTa8kqv0srR6WNr1PiEwZD
zyxgUY93w06KuxNW6T1IdJ6YkxMj5Mlv5tkfbjhuyapENhJmSyQxidRc8MyL0Kfo
UwDpU32reLuOIIfeGoWAf7IdQkujEDk0gqZP0OPeeyV21+dZ0eYsaRV7jGW2iq99
5NqGVZNiFZ+ITMwuzDU9eu1u5eMVqH/hDU1qvt6EzDD79LHhk63Md03L1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMgKJfhG22jVfpPITfYto7SNeuW/MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEveUFvbC1FYmJhTlYtazhoTjlpMmp0STE2NWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsTMA0G
CSqGSIb3DQEBCwUAA4IBAQAgv0FmKnjbhSA9a7pX3Y454xO6O+JqpU+mviEuujqD
kVlzDz9bEACV9am6wbSpcsgl9c6qk5D5+2wDMZHN+QTHklnGR2/UOx527MsjD/l0
VLSxzdhq771qcvqiMStnDEgAMxPHLmrij/P504JtKUkdsN5PXj9sTkHDWjNH1Qaa
RY+PLQXtulu+Eua6JWKoGlguHqGgqk6Sxi+7mU45YRnBYp40TL/guZfENupPV91O
pBt5w4cO62RXx3gwkRlw7fvoQZDit0SIHvA7sMrJxhodWUw1RbUKX7W7h935bE6o
7MBic/gQmO4fcgvu5IHfPahHZ9HJc0iLPKT4KIRQmMwc
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:38:21 2026 by rpki-client