Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/YgKPBZzEptUB-VysMZ1QC19vKVo.roa
File: YgKPBZzEptUB-VysMZ1QC19vKVo.roa (raw, json)
Hash identifier: UUSQjdvl7T5Qa1uewqAwgqKQq4vND4OBY/oe1BQLrg8=
Subject key identifier: 62:02:8F:05:9C:C4:A6:D5:01:F9:5C:AC:31:9D:50:0B:5F:6F:29:5A
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 019B7BA4792F9CB4B16EEFCA566518A2F782
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/YgKPBZzEptUB-VysMZ1QC19vKVo.roa
Signing time: Thu 01 Jan 2026 22:18:54 +0000
ROA not before: Thu 01 Jan 2026 22:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43842
IP address blocks: 91.193.48.0/24 maxlen: 24
91.193.49.0/24 maxlen: 24
91.193.50.0/24 maxlen: 24
91.193.51.0/24 maxlen: 24
91.195.162.0/24 maxlen: 24
91.195.163.0/24 maxlen: 24
193.28.155.0/24 maxlen: 24
193.138.92.0/24 maxlen: 24
195.62.18.0/24 maxlen: 24
195.62.19.0/24 maxlen: 24
209.35.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:79:2f:9c:b4:b1:6e:ef:ca:56:65:18:a2:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Jan 1 22:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62028f059cc4a6d501f95cac319d500b5f6f295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:a7:90:3d:8c:3b:8b:a6:7a:05:57:a2:7e:
58:ee:b3:17:0e:3d:2c:57:01:61:58:79:71:8f:57:
6e:00:2b:5a:d7:ff:20:fb:db:a4:a6:7c:2f:b4:98:
f4:8f:62:ee:52:8e:ad:e2:3c:9c:d1:c5:e5:38:c0:
85:d5:f2:51:4a:a8:ea:91:d8:15:50:cd:e0:e8:67:
f7:b8:b1:9e:81:57:38:24:85:e7:2c:3e:39:0c:82:
55:ea:e7:22:ad:b2:71:f1:75:fb:f1:c2:28:b2:b7:
ea:c1:84:d2:02:d0:20:95:d1:0a:59:65:a1:08:e6:
1f:89:dd:6f:3f:08:0b:ef:92:16:fc:bf:7a:83:e4:
08:0c:7c:c8:28:b3:18:eb:5c:bf:00:a0:ae:08:90:
78:43:2a:9b:f9:24:ed:e3:85:7e:28:5a:9f:91:49:
e9:2e:2c:b4:b5:37:2e:89:a1:af:36:62:6d:6e:0b:
84:fd:ca:79:c1:21:71:be:23:f4:a7:37:62:22:82:
b3:2d:88:91:6e:42:87:f0:3d:a5:fd:6a:f3:b5:c8:
6a:21:c0:56:61:87:3f:78:71:37:f2:e4:e7:6a:d6:
f9:c0:8b:e1:ae:aa:11:30:0a:86:d3:c9:be:b0:d1:
7b:37:2b:e6:cc:5d:8e:c6:2f:f5:0d:9f:19:38:85:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:8F:05:9C:C4:A6:D5:01:F9:5C:AC:31:9D:50:0B:5F:6F:29:5A
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/YgKPBZzEptUB-VysMZ1QC19vKVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.48.0/22
91.195.162.0/23
193.28.155.0/24
193.138.92.0/24
195.62.18.0/23
209.35.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5e:51:17:c0:bb:63:38:d6:bd:d0:82:a6:20:1e:d4:39:80:
09:9c:7a:b1:68:78:4b:f8:6f:77:b8:16:a5:ba:8a:f9:7f:e7:
a6:3f:72:63:dc:b2:fe:5c:9b:d9:3f:8a:fc:68:60:d2:75:01:
8b:4e:13:ea:c3:d3:32:98:87:07:67:dd:11:ab:c4:39:46:f7:
49:96:34:02:94:35:52:3e:b2:47:17:c5:39:bf:5d:83:4a:12:
0c:5c:3d:50:83:3d:60:a2:79:1b:0f:be:cb:6e:e3:be:96:e2:
e8:7f:38:02:08:ae:07:fd:db:26:05:86:1c:18:a1:60:92:65:
77:de:9e:fa:39:43:20:06:8c:ad:27:0d:ee:5f:ee:16:ed:9c:
fd:d3:b2:99:e3:c4:d3:c1:29:65:9d:4b:f0:15:fc:d3:28:8b:
d9:c6:23:f3:e3:3f:64:2f:90:c5:14:9f:5f:d6:c4:11:e3:99:
69:99:05:6e:f7:74:a6:54:2b:9f:46:0a:49:0b:03:e6:17:ce:
b8:29:26:14:51:9e:18:a8:fe:8f:26:d9:4a:44:b1:68:72:af:
c6:e3:77:5e:26:4d:ec:78:43:ef:61:d5:96:e6:28:33:58:d9:
1f:22:f6:98:87:ad:ab:ac:3a:6b:b2:94:15:14:1f:e3:64:23:
ca:f3:11:c3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZt7pHkvnLSxbu/KVmUYoveCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl
YjU2MTEwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjAyOGYwNTljYzRhNmQ1MDFmOTVjYWMzMTlkNTAwYjVmNmYyOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2unkD2MO4umegVXon5Y7rMXDj0s
VwFhWHlxj1duACta1/8g+9ukpnwvtJj0j2LuUo6t4jyc0cXlOMCF1fJRSqjqkdgV
UM3g6Gf3uLGegVc4JIXnLD45DIJV6ucirbJx8XX78cIosrfqwYTSAtAgldEKWWWh
COYfid1vPwgL75IW/L96g+QIDHzIKLMY61y/AKCuCJB4Qyqb+STt44V+KFqfkUnp
Liy0tTcuiaGvNmJtbguE/cp5wSFxviP0pzdiIoKzLYiRbkKH8D2l/WrztchqIcBW
YYc/eHE38uTnatb5wIvhrqoRMAqG08m+sNF7NyvmzF2Oxi/1DZ8ZOIVeYwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGICjwWcxKbVAflcrDGdUAtfbylaMB8GA1UdIwQY
MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt
ZGNhZjdlZjdhZTNhLzEvWWdLUEJaekVwdFVCLVZ5c01aMVFDMTl2S1ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh
LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW8EwAwQB
W8OiAwQAwRybAwQAwYpcAwQBwz4SAwQA0SPFMA0GCSqGSIb3DQEBCwUAA4IBAQA7
XlEXwLtjONa90IKmIB7UOYAJnHqxaHhL+G93uBaluor5f+emP3Jj3LL+XJvZP4r8
aGDSdQGLThPqw9MymIcHZ90Rq8Q5RvdJljQClDVSPrJHF8U5v12DShIMXD1Qgz1g
onkbD77LbuO+luLofzgCCK4H/dsmBYYcGKFgkmV33p76OUMgBoytJw3uX+4W7Zz9
07KZ48TTwSllnUvwFfzTKIvZxiPz4z9kL5DFFJ9f1sQR45lpmQVu93SmVCufRgpJ
CwPmF864KSYUUZ4YqP6PJtlKRLFocq/G43deJk3seEPvYdWW5igzWNkfIvaYh62r
rDprspQVFB/jZCPK8xHD
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:02 2026 by rpki-client