Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yDBM58kt81zyAkC__aD6SmFbM48.roa
File: yDBM58kt81zyAkC__aD6SmFbM48.roa (raw, json)
Hash identifier: BR6t0lSWRq79owbI5zS53DIuGEwrPtDn2T3AK3TJsVE=
Subject key identifier: C8:30:4C:E7:C9:2D:F3:5C:F2:02:40:BF:FD:A0:FA:4A:61:5B:33:8F
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 01A09F1F0D26E48AEA91751BA6F56FA5F843
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yDBM58kt81zyAkC__aD6SmFbM48.roa
Signing time: Mon 14 Sep 2026 08:53:27 +0000
ROA not before: Mon 14 Sep 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197902
IP address blocks: 164.37.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:0d:26:e4:8a:ea:91:75:1b:a6:f5:6f:a5:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Sep 14 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8304ce7c92df35cf20240bffda0fa4a615b338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:67:63:ce:23:73:8c:64:34:6d:70:e7:57:
64:19:f9:a0:36:47:bc:9a:44:26:b4:88:22:a8:8e:
24:61:c4:54:27:b7:af:a3:c7:b4:98:63:19:fd:41:
45:47:f1:b8:7c:22:0f:5e:8f:d1:4a:f0:f7:fe:f5:
67:df:8f:f9:a6:7e:e0:86:be:89:62:1d:32:d5:d3:
2b:36:83:da:c9:5d:4f:fd:b0:61:2c:a7:35:ee:66:
03:b9:e9:0a:1c:48:28:ad:51:53:31:26:d9:11:4e:
3a:c6:12:83:b8:27:0a:0e:c9:c6:5f:73:bb:1c:72:
a7:f3:d2:01:c0:8f:2e:18:12:5c:2a:5e:26:70:e9:
00:41:1b:38:34:96:3c:8d:25:b1:7f:76:29:06:7c:
6d:38:9b:b9:9a:87:be:2d:49:ea:e0:94:a7:1b:66:
20:0d:24:2a:7e:23:3a:0e:26:3c:42:00:b1:e6:1e:
f9:75:d7:ab:1a:e8:7a:83:b6:a8:9a:65:4a:25:db:
a0:64:30:68:5f:1d:2e:74:b2:31:4e:3c:f2:b4:f3:
11:56:d3:2f:e1:00:b9:ad:3f:fc:f3:91:96:3f:dd:
09:66:8c:fa:a2:09:e0:27:2c:5a:bb:22:ea:e8:38:
7b:89:06:77:1c:32:c3:1b:4b:d8:b6:d5:0d:a1:c7:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:4C:E7:C9:2D:F3:5C:F2:02:40:BF:FD:A0:FA:4A:61:5B:33:8F
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yDBM58kt81zyAkC__aD6SmFbM48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.112.0/20
Signature Algorithm: sha256WithRSAEncryption
17:d9:7d:e2:fc:33:87:bf:c2:ee:7a:05:b3:1f:69:1e:28:e7:
5c:75:69:63:ee:e2:38:a5:29:5e:de:51:61:75:d9:db:75:24:
e6:ae:e4:48:48:51:39:f5:a1:10:b5:32:70:e7:96:e8:15:eb:
58:13:d8:d8:52:6b:6a:43:7d:da:18:c6:ce:ad:3b:93:ca:ca:
ef:86:67:1f:78:56:28:34:27:53:77:0a:1f:29:9a:9a:cf:a6:
df:5f:62:b5:e1:b0:e6:54:64:c8:e1:66:8d:4d:00:2c:38:15:
48:03:c7:e4:04:ca:c5:c8:fc:16:92:e1:62:57:42:7f:44:c8:
d9:18:ba:ee:c0:26:ec:ed:f8:be:a4:a7:23:bd:d0:fe:04:c3:
89:ff:bb:4c:5f:95:b3:71:9d:0f:82:22:c4:a7:bf:42:fb:52:
bb:03:af:21:17:d9:c0:b2:a8:39:5e:f4:3c:8c:4b:26:fd:a9:
ae:96:c7:ab:1e:8f:03:7b:2d:59:a9:1e:65:da:e1:0e:96:b5:
98:c4:aa:10:74:b9:a2:0e:d9:85:2f:76:0d:0a:96:a7:b5:da:
bf:95:b2:84:fa:6f:48:1b:7c:10:57:01:78:e3:1a:8f:56:ca:
73:ee:08:67:c1:d6:92:85:b2:7b:f4:65:a8:5d:87:86:5d:65:
93:96:51:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCfHw0m5IrqkXUbpvVvpfhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjYwOTE0MDg1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODMwNGNlN2M5MmRmMzVjZjIwMjQwYmZmZGEwZmE0YTYxNWIzMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM1nY84jc4xkNG1w51dkGfmgNke8
mkQmtIgiqI4kYcRUJ7evo8e0mGMZ/UFFR/G4fCIPXo/RSvD3/vVn34/5pn7ghr6J
Yh0y1dMrNoPayV1P/bBhLKc17mYDuekKHEgorVFTMSbZEU46xhKDuCcKDsnGX3O7
HHKn89IBwI8uGBJcKl4mcOkAQRs4NJY8jSWxf3YpBnxtOJu5moe+LUnq4JSnG2Yg
DSQqfiM6DiY8QgCx5h75dderGuh6g7aommVKJdugZDBoXx0udLIxTjzytPMRVtMv
4QC5rT/885GWP90JZoz6ogngJyxauyLq6Dh7iQZ3HDLDG0vYttUNocfVkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMgwTOfJLfNc8gJAv/2g+kphWzOPMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEveURCTTU4a3Q4MXp5QWtDX19hRDZTbUZiTTQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpCVwMA0G
CSqGSIb3DQEBCwUAA4IBAQAX2X3i/DOHv8LuegWzH2keKOdcdWlj7uI4pSle3lFh
ddnbdSTmruRISFE59aEQtTJw55boFetYE9jYUmtqQ33aGMbOrTuTysrvhmcfeFYo
NCdTdwofKZqaz6bfX2K14bDmVGTI4WaNTQAsOBVIA8fkBMrFyPwWkuFiV0J/RMjZ
GLruwCbs7fi+pKcjvdD+BMOJ/7tMX5WzcZ0PgiLEp79C+1K7A68hF9nAsqg5XvQ8
jEsm/amulserHo8Dey1ZqR5l2uEOlrWYxKoQdLmiDtmFL3YNCpantdq/lbKE+m9I
G3wQVwF44xqPVspz7ghnwdaShbJ79GWoXYeGXWWTllEV
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:58:16 2026 by rpki-client