Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YkIQscUoxoR6F5oxzhTWjKJg05A.roa
File: YkIQscUoxoR6F5oxzhTWjKJg05A.roa (raw, json)
Hash identifier: NDmHhMYPCN5w5KpNoWMgxVJYE3nncR4JZ/L5ZOjd9/4=
Subject key identifier: 62:42:10:B1:C5:28:C6:84:7A:17:9A:31:CE:14:D6:8C:A2:60:D3:90
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0A635A155FF42CE9749E8649A267FEA9F
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YkIQscUoxoR6F5oxzhTWjKJg05A.roa
Signing time: Tue 15 Sep 2026 17:55:27 +0000
ROA not before: Tue 15 Sep 2026 17:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:35:a1:55:ff:42:ce:97:49:e8:64:9a:26:7f:ea:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 15 17:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=624210b1c528c6847a179a31ce14d68ca260d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:31:d1:cb:bf:98:d2:5d:21:49:c2:ca:e6:
03:d8:13:3b:f6:08:e6:d9:99:56:69:63:cd:96:dd:
18:0d:8e:a1:af:dc:fa:2c:b8:9f:d2:55:08:10:96:
4e:8b:e8:16:5e:ea:8c:fe:8c:c9:82:5b:92:7d:7d:
51:65:e7:fa:bf:6b:8a:15:72:dd:eb:4d:4c:21:36:
c9:76:a5:c2:40:3c:f4:93:43:7a:d4:2c:8f:55:3d:
c8:b6:9a:d2:70:00:83:af:f7:bf:6a:13:b3:00:32:
b8:b1:50:21:a3:1e:cb:ad:23:d3:c3:b3:39:5e:f6:
1f:db:f6:39:89:f2:88:ac:3c:00:d7:8d:d8:d1:7b:
00:57:e1:fd:34:96:cf:69:c2:44:90:c3:55:dc:d2:
03:3b:29:0b:59:ef:52:52:c5:25:07:c9:b9:56:cf:
e4:f6:53:c2:2a:e9:0d:00:55:5a:0b:03:30:1d:bb:
15:14:ed:0a:1f:ab:a9:3f:fe:25:cb:e7:9d:9e:d3:
2e:a6:8e:e7:16:5f:49:c4:dc:39:11:8d:20:38:e2:
96:23:74:62:38:66:9a:a2:f9:ce:3e:78:c6:92:fd:
df:da:09:f1:60:e6:b9:fc:cb:f0:29:76:88:23:fa:
ad:a5:73:75:e5:0b:01:23:24:09:78:80:2d:3f:ad:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:10:B1:C5:28:C6:84:7A:17:9A:31:CE:14:D6:8C:A2:60:D3:90
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YkIQscUoxoR6F5oxzhTWjKJg05A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
91:76:18:7b:ec:8f:97:27:df:99:11:7b:2e:e0:e1:db:e0:59:
a4:bb:ad:76:2b:9d:ca:d7:62:17:b0:be:ad:77:26:b8:0c:e2:
c2:c7:37:d4:30:ed:b0:9b:ee:5e:ed:be:8c:48:f4:9b:64:bf:
85:7e:56:e3:35:be:77:7d:5b:d7:39:34:e0:44:03:89:db:f8:
f3:64:20:9f:b0:41:57:6e:3b:d7:2e:26:f4:7b:93:0b:a6:e2:
dc:ae:84:fa:80:bc:e3:22:ed:a7:b6:45:d4:24:ef:5b:b4:0e:
0f:f3:81:ff:87:4d:51:34:05:5f:36:f8:c6:33:09:52:d5:bc:
9d:d0:28:56:fc:f0:61:f6:99:3f:55:92:5b:8b:2a:e4:72:c2:
30:5e:2d:61:c7:38:a5:e5:86:89:40:e7:0d:e5:04:ec:57:9e:
fd:3b:b1:e4:7d:47:40:1d:e8:d4:82:8d:8d:7f:d8:cc:18:33:
0b:73:86:7b:6c:73:82:3d:9a:38:1d:de:4b:7a:d4:40:0b:21:
df:fe:31:ca:c8:23:88:11:a1:b4:16:6c:90:12:0f:bc:18:25:
a8:ff:a5:95:e0:27:ab:5c:50:4e:3d:a0:ba:83:ff:41:b8:82:
4c:9c:b1:31:c7:7b:02:28:0f:19:f3:17:56:2f:f4:3e:12:da:
14:0c:e0:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCmNaFV/0LOl0noZJomf+qfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwOTE1MTc1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjQyMTBiMWM1MjhjNjg0N2ExNzlhMzFjZTE0ZDY4Y2EyNjBkMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I4x0cu/mNJdIUnCyuYD2BM79gjm
2ZlWaWPNlt0YDY6hr9z6LLif0lUIEJZOi+gWXuqM/ozJgluSfX1RZef6v2uKFXLd
601MITbJdqXCQDz0k0N61CyPVT3ItprScACDr/e/ahOzADK4sVAhox7LrSPTw7M5
XvYf2/Y5ifKIrDwA143Y0XsAV+H9NJbPacJEkMNV3NIDOykLWe9SUsUlB8m5Vs/k
9lPCKukNAFVaCwMwHbsVFO0KH6upP/4ly+edntMupo7nFl9JxNw5EY0gOOKWI3Ri
OGaaovnOPnjGkv3f2gnxYOa5/MvwKXaII/qtpXN15QsBIyQJeIAtP60AsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGJCELHFKMaEeheaMc4U1oyiYNOQMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvWWtJUXNjVW94b1I2RjVveHpoVFdqS0pnMDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkDhkAwQA
kDh/MA0GCSqGSIb3DQEBCwUAA4IBAQCRdhh77I+XJ9+ZEXsu4OHb4Fmku612K53K
12IXsL6tdya4DOLCxzfUMO2wm+5e7b6MSPSbZL+FflbjNb53fVvXOTTgRAOJ2/jz
ZCCfsEFXbjvXLib0e5MLpuLcroT6gLzjIu2ntkXUJO9btA4P84H/h01RNAVfNvjG
MwlS1byd0ChW/PBh9pk/VZJbiyrkcsIwXi1hxzil5YaJQOcN5QTsV579O7HkfUdA
HejUgo2Nf9jMGDMLc4Z7bHOCPZo4Hd5LetRACyHf/jHKyCOIEaG0FmyQEg+8GCWo
/6WV4CerXFBOPaC6g/9BuIJMnLExx3sCKA8Z8xdWL/Q+EtoUDOCQ
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:19:48 2026 by rpki-client