Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Y236QjVhGrl24C2bEpBZTpmsO9g.roa
File: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (raw, json)
Hash identifier: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=
Subject key identifier: 63:6D:FA:42:35:61:1A:B9:76:E0:2D:9B:12:90:59:4E:99:AC:3B:D8
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019C58C4B75AF28201F3B11CADE1ED6E6FF3
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Y236QjVhGrl24C2bEpBZTpmsO9g.roa
Signing time: Fri 13 Feb 2026 20:50:12 +0000
ROA not before: Fri 13 Feb 2026 20:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210538
IP address blocks: 94.154.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:58:c4:b7:5a:f2:82:01:f3:b1:1c:ad:e1:ed:6e:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 13 20:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=636dfa4235611ab976e02d9b1290594e99ac3bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:ae:66:fd:f4:4b:6d:51:39:67:90:e8:e3:
5b:8e:21:75:07:d8:d3:5a:cb:9e:64:b8:45:1c:ab:
2f:3b:43:ca:ea:ce:20:ab:bd:05:e0:da:5a:c8:59:
24:27:c7:6e:7a:8b:a0:a1:9c:db:77:5b:83:21:bc:
0a:89:df:ed:a5:6e:99:ae:87:10:fb:d3:0e:70:a8:
34:29:94:73:d8:b9:08:da:5b:d3:8d:1c:fd:bd:35:
40:e2:c2:56:97:cd:8d:aa:5b:17:20:22:f5:24:c0:
33:64:9d:54:a8:fe:f7:b1:97:da:42:d2:07:6c:33:
8f:3e:15:3e:1c:5e:b1:38:14:3f:24:78:9f:2c:29:
75:0c:ba:7f:5f:e6:95:cb:a6:94:81:ed:ee:14:aa:
3e:2b:bd:b9:de:35:28:9e:72:27:8e:1e:dc:09:c5:
d1:88:ab:71:56:65:b3:e1:f4:9c:e5:0c:06:01:a4:
84:30:e1:87:03:04:04:31:26:35:cb:dd:a8:99:8f:
a5:bd:ff:28:86:3a:25:01:4d:5e:d5:e2:f6:a9:7a:
0f:60:06:16:fe:cc:45:12:1d:5e:1f:85:ad:4d:ee:
e6:2d:fe:01:35:16:b7:94:cb:ad:c1:bc:11:7c:a3:
51:f0:e4:ae:0c:02:03:92:98:d1:2c:fc:4f:76:3f:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:FA:42:35:61:1A:B9:76:E0:2D:9B:12:90:59:4E:99:AC:3B:D8
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Y236QjVhGrl24C2bEpBZTpmsO9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f1:b6:70:78:f4:a3:0e:42:33:ac:dc:18:d1:e9:ab:38:7d:
d4:15:d5:c2:ff:05:ec:70:19:61:de:59:7f:15:8d:bc:c1:60:
69:16:b3:b2:fb:9a:bc:c7:fe:8a:c5:b7:22:f9:e9:ab:09:5d:
4b:72:f3:93:04:8e:55:2f:64:72:66:76:e0:5b:cb:4d:a5:e1:
4a:85:0a:f8:4d:cc:13:09:93:2f:aa:e3:25:f9:b6:fe:fe:1b:
bb:1d:89:c7:58:1f:7f:0a:ee:a6:3b:ae:bb:66:9f:16:97:e4:
30:d8:55:86:99:56:9d:74:d4:0a:43:df:0d:1e:7d:a7:b0:44:
e8:a5:0f:e9:9d:37:38:47:f0:8b:34:ea:20:e1:33:6f:a1:58:
88:10:c5:1d:17:27:54:c2:9a:39:83:34:b0:c3:b0:17:07:c1:
90:49:f1:99:65:83:a7:24:8b:00:e5:bf:9f:17:49:ad:e6:43:
4d:b3:c7:d4:a1:bf:81:b7:51:11:7b:bb:31:7b:a0:dd:e8:b5:
82:40:19:90:89:2d:ed:59:97:87:6e:ad:3e:8b:9c:cb:be:13:
31:ca:94:3f:e7:16:4a:b2:d5:04:81:59:8e:34:e2:af:35:46:
2e:a0:71:92:8a:2b:7b:4b:0c:b9:df:8f:e3:44:4f:d4:19:70:
85:a4:22:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxYxLda8oIB87EcreHtbm/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjYwMjEzMjA1MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzZkZmE0MjM1NjExYWI5NzZlMDJkOWIxMjkwNTk0ZTk5YWMzYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiOuZv30S21ROWeQ6ONbjiF1B9jT
WsueZLhFHKsvO0PK6s4gq70F4NpayFkkJ8dueougoZzbd1uDIbwKid/tpW6ZrocQ
+9MOcKg0KZRz2LkI2lvTjRz9vTVA4sJWl82NqlsXICL1JMAzZJ1UqP73sZfaQtIH
bDOPPhU+HF6xOBQ/JHifLCl1DLp/X+aVy6aUge3uFKo+K7253jUonnInjh7cCcXR
iKtxVmWz4fSc5QwGAaSEMOGHAwQEMSY1y92omY+lvf8ohjolAU1e1eL2qXoPYAYW
/sxFEh1eH4WtTe7mLf4BNRa3lMutwbwRfKNR8OSuDAIDkpjRLPxPdj/NXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNt+kI1YRq5duAtmxKQWU6ZrDvYMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvWTIzNlFqVmhHcmwyNEMyYkVwQlpUcG1zTzlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpoiMA0G
CSqGSIb3DQEBCwUAA4IBAQCm8bZwePSjDkIzrNwY0emrOH3UFdXC/wXscBlh3ll/
FY28wWBpFrOy+5q8x/6Kxbci+emrCV1LcvOTBI5VL2RyZnbgW8tNpeFKhQr4TcwT
CZMvquMl+bb+/hu7HYnHWB9/Cu6mO667Zp8Wl+Qw2FWGmVaddNQKQ98NHn2nsETo
pQ/pnTc4R/CLNOog4TNvoViIEMUdFydUwpo5gzSww7AXB8GQSfGZZYOnJIsA5b+f
F0mt5kNNs8fUob+Bt1ERe7sxe6Dd6LWCQBmQiS3tWZeHbq0+i5zLvhMxypQ/5xZK
stUEgVmONOKvNUYuoHGSiit7Swy534/jRE/UGXCFpCIj
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:27 2026 by rpki-client