Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/YgnciPpG25vPLjs4alvklTckQa0.roa
File: YgnciPpG25vPLjs4alvklTckQa0.roa (raw, json)
Hash identifier: LMsW71cXkQjTBXqyfbQ1BVncfxCsq9ms60/4uLgDxuQ=
Subject key identifier: 62:09:DC:88:FA:46:DB:9B:CF:2E:3B:38:6A:5B:E4:95:37:24:41:AD
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019CAED42F10EEA8F8A341CBFBF4D366C3D9
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/YgnciPpG25vPLjs4alvklTckQa0.roa
Signing time: Mon 02 Mar 2026 13:54:26 +0000
ROA not before: Mon 02 Mar 2026 13:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8308
IP address blocks: 194.92.0.0/16 maxlen: 16
194.92.32.0/24 maxlen: 24
194.92.33.0/24 maxlen: 24
194.92.34.0/24 maxlen: 24
194.92.35.0/24 maxlen: 24
194.92.36.0/24 maxlen: 24
194.92.37.0/24 maxlen: 24
194.92.38.0/24 maxlen: 24
194.92.39.0/24 maxlen: 24
194.92.40.0/24 maxlen: 24
194.92.41.0/24 maxlen: 24
194.92.42.0/24 maxlen: 24
194.92.43.0/24 maxlen: 24
194.92.44.0/24 maxlen: 24
194.92.45.0/24 maxlen: 24
194.92.46.0/24 maxlen: 24
194.92.47.0/24 maxlen: 24
194.92.48.0/24 maxlen: 24
194.92.49.0/24 maxlen: 24
194.92.50.0/24 maxlen: 24
194.92.51.0/24 maxlen: 24
194.92.52.0/24 maxlen: 24
194.92.53.0/24 maxlen: 24
194.92.54.0/24 maxlen: 24
194.92.55.0/24 maxlen: 24
194.92.56.0/24 maxlen: 24
194.92.57.0/24 maxlen: 24
194.92.58.0/24 maxlen: 24
194.92.59.0/24 maxlen: 24
194.92.60.0/24 maxlen: 24
194.92.61.0/24 maxlen: 24
194.92.62.0/24 maxlen: 24
194.92.63.0/24 maxlen: 24
194.92.77.0/24 maxlen: 24
194.92.102.0/24 maxlen: 24
2a0a:3a40::/32 maxlen: 32
2a0a:3a40:1004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d4:2f:10:ee:a8:f8:a3:41:cb:fb:f4:d3:66:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Mar 2 13:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6209dc88fa46db9bcf2e3b386a5be495372441ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:d2:cf:ba:27:6e:93:d3:44:8d:3e:81:1a:
f9:94:82:ff:26:b4:2d:5e:10:50:ef:4f:8e:34:af:
b1:10:8d:a7:67:30:fc:cd:77:38:6f:43:e1:c6:52:
13:c0:87:f8:6a:92:42:84:9f:0f:f5:19:bd:68:06:
84:94:d9:33:f5:61:af:08:72:bb:fd:96:63:45:a2:
e9:a3:ab:45:f7:38:b7:61:74:0d:13:a7:f8:1f:f2:
ef:f6:bb:fc:57:16:e0:c6:0f:f1:21:54:21:e8:35:
23:db:07:6c:cf:06:2a:d6:f0:50:77:76:04:9b:cf:
6b:4b:b0:f4:17:b7:2c:46:40:0c:2c:95:64:20:99:
4b:6d:1a:27:48:f7:4e:07:9e:5a:93:f0:46:da:ce:
1a:3e:2a:d4:fd:2e:1a:1c:7e:2c:bc:2a:82:a1:c3:
73:65:47:1c:77:1a:9b:fa:fe:c4:a0:4f:52:bc:36:
e0:57:22:cb:60:69:2a:0c:cc:cc:82:be:9a:b0:fa:
ed:5e:fd:6c:9a:04:c6:97:ff:58:31:f5:dd:fb:0d:
d1:9c:e2:42:b1:80:61:42:05:2b:3f:f5:f6:99:54:
a6:c4:a7:57:5e:0c:56:27:31:3a:b0:44:60:36:73:
cc:53:56:b4:ff:b0:3b:e6:83:44:c6:5d:15:d1:f9:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:DC:88:FA:46:DB:9B:CF:2E:3B:38:6A:5B:E4:95:37:24:41:AD
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/YgnciPpG25vPLjs4alvklTckQa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.0.0/16
IPv6:
2a0a:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
41:9b:d9:36:7d:ca:7b:63:fb:a6:5e:5a:a6:d3:47:43:95:9c:
fc:aa:81:fa:e7:4f:e9:db:91:3e:ea:57:e1:36:a2:f9:2d:5e:
4e:ed:fc:ae:17:35:17:fb:c7:87:bd:e5:98:a8:38:a7:12:60:
9c:4d:c2:10:ab:2a:14:09:3b:f9:a6:37:cf:04:51:7d:4c:87:
eb:ba:72:46:ea:cd:27:7a:3c:36:c1:f2:dd:7f:53:66:9c:97:
18:87:7a:99:ee:cf:5e:d3:d8:83:7b:cb:30:92:8c:c4:e4:55:
e3:25:d5:53:44:f6:66:cf:66:fc:ec:a7:ba:10:39:80:f8:8a:
1c:a8:df:06:29:af:0f:a6:46:ff:9e:85:c3:79:19:68:0f:8a:
97:1d:4c:bf:8f:a0:69:96:a1:99:f0:3e:77:9a:3d:cf:63:81:
d9:ee:26:a5:e3:09:27:27:64:09:92:28:d4:fc:be:01:47:8d:
50:ec:b4:09:be:46:92:65:72:4a:84:f8:98:e2:b7:e6:9a:c9:
84:71:bd:a2:43:1c:b2:bc:8d:c9:ba:71:4d:fb:99:e8:4e:6a:
54:a0:65:59:81:1a:16:7d:d8:15:03:8c:07:45:88:e8:c7:f7:
fe:1b:8d:0e:0d:de:c2:a3:e6:f2:fc:a9:39:34:5e:ce:4e:a5:
9d:50:7d:72
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZyu1C8Q7qj4o0HL+/TTZsPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm
NjA3MzkwHhcNMjYwMzAyMTM1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjA5ZGM4OGZhNDZkYjliY2YyZTNiMzg2YTViZTQ5NTM3MjQ0MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HXSz7onbpPTRI0+gRr5lIL/JrQt
XhBQ70+ONK+xEI2nZzD8zXc4b0PhxlITwIf4apJChJ8P9Rm9aAaElNkz9WGvCHK7
/ZZjRaLpo6tF9zi3YXQNE6f4H/Lv9rv8Vxbgxg/xIVQh6DUj2wdszwYq1vBQd3YE
m89rS7D0F7csRkAMLJVkIJlLbRonSPdOB55ak/BG2s4aPirU/S4aHH4svCqCocNz
ZUccdxqb+v7EoE9SvDbgVyLLYGkqDMzMgr6asPrtXv1smgTGl/9YMfXd+w3RnOJC
sYBhQgUrP/X2mVSmxKdXXgxWJzE6sERgNnPMU1a0/7A75oNExl0V0flumwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGIJ3Ij6Rtubzy47OGpb5JU3JEGtMB8GA1UdIwQY
MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt
YmFmNGUwYjRhNjllLzEvWWduY2lQcEcyNXZQTGpzNGFsdmtsVGNrUWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll
LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAwlwwDQQC
AAIwBwMFACoKOkAwDQYJKoZIhvcNAQELBQADggEBAEGb2TZ9yntj+6ZeWqbTR0OV
nPyqgfrnT+nbkT7qV+E2ovktXk7t/K4XNRf7x4e95ZioOKcSYJxNwhCrKhQJO/mm
N88EUX1Mh+u6ckbqzSd6PDbB8t1/U2aclxiHepnuz17T2IN7yzCSjMTkVeMl1VNE
9mbPZvzsp7oQOYD4ihyo3wYprw+mRv+ehcN5GWgPipcdTL+PoGmWoZnwPneaPc9j
gdnuJqXjCScnZAmSKNT8vgFHjVDstAm+RpJlckqE+Jjit+aayYRxvaJDHLK8jcm6
cU37mehOalSgZVmBGhZ92BUDjAdFiOjH9/4bjQ4N3sKj5vL8qTk0Xs5OpZ1QfXI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:11:16 2026 by rpki-client