Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YdRIaVbbPGHTfV55fBY-PFTIaBE.roa
File: YdRIaVbbPGHTfV55fBY-PFTIaBE.roa (raw, json)
Hash identifier: ojX3swW457yzdqh3Z0465q1AxmyPbbw2+QmEUC3AEmc=
Subject key identifier: 61:D4:48:69:56:DB:3C:61:D3:7D:5E:79:7C:16:3E:3C:54:C8:68:11
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EA39325ACBD41A3DCF9AF750432F096FB
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YdRIaVbbPGHTfV55fBY-PFTIaBE.roa
Signing time: Sun 07 Jun 2026 19:33:10 +0000
ROA not before: Sun 07 Jun 2026 19:33:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 146.255.189.0/24 maxlen: 24
212.46.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:93:25:ac:bd:41:a3:dc:f9:af:75:04:32:f0:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 7 19:33:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61d4486956db3c61d37d5e797c163e3c54c86811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:1b:30:d6:fc:8d:5c:81:36:f9:d7:cf:d7:
1d:2a:9b:44:38:ba:a7:ad:a9:33:d4:c3:bd:b2:8c:
63:46:04:e6:1e:ab:14:78:ad:79:f8:c1:e3:15:08:
6c:ba:3a:99:7e:cc:b5:e0:c7:31:49:fd:b2:f2:61:
a8:0d:cd:6b:22:a1:b1:cd:3d:b1:55:fe:86:54:c3:
95:8d:7c:e6:6b:9a:5f:13:08:57:b7:29:f4:08:bb:
e1:2e:be:61:8f:ec:bc:1f:06:87:43:e9:73:de:0a:
20:a8:f4:3d:fd:e1:ab:11:5b:bc:6c:24:f1:2a:b5:
21:5d:03:1a:09:1e:92:47:2a:87:d9:37:76:fc:ed:
03:8e:6e:16:ae:9e:08:49:e7:29:7b:05:2c:29:56:
f6:d6:e0:29:38:fa:2f:7f:25:90:d1:c2:8e:f7:3a:
6c:0e:3b:98:e9:b6:77:2a:39:80:9c:f6:31:23:c7:
8d:de:05:46:b1:23:a7:fe:36:7b:94:9f:65:79:06:
06:07:5f:45:d5:99:88:8e:0d:e7:88:a7:7c:15:1f:
cb:f4:b4:d0:3d:22:74:98:cd:f1:3c:f7:44:d1:d6:
17:37:6f:38:9a:ae:01:b9:86:7f:45:46:c3:dd:54:
90:a1:e4:eb:02:81:8b:a4:6d:c7:24:e7:d2:a8:7a:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:48:69:56:DB:3C:61:D3:7D:5E:79:7C:16:3E:3C:54:C8:68:11
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YdRIaVbbPGHTfV55fBY-PFTIaBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d5:3f:07:53:72:2d:17:a2:87:ee:8a:44:1e:47:f2:bb:ed:
f9:17:78:68:fa:3d:7f:48:3d:ca:41:21:2c:86:c3:0b:20:b4:
ca:30:ee:c9:ce:14:b9:ee:d9:e7:5f:91:e7:3e:d5:4d:8a:69:
28:3c:ee:69:39:f2:b0:bb:d4:da:59:48:de:cc:a7:ed:2e:ac:
25:45:89:61:f0:fe:c7:a6:40:2e:f0:3d:3d:34:97:d6:5e:f6:
8c:40:fa:ea:ad:2f:c6:cf:3b:90:f1:b5:2c:85:90:47:c7:13:
f8:8d:3e:66:47:de:fd:75:ab:4a:61:01:5d:fa:d4:c6:86:48:
4c:af:fc:57:b3:e2:ba:c0:b6:34:26:04:eb:aa:5d:d6:90:6b:
a6:5f:99:b0:f3:45:81:68:65:a1:af:8f:6c:b0:a5:63:21:cb:
19:0f:41:ab:f3:8d:4e:a4:e2:93:a7:a2:f2:1e:38:99:b7:da:
84:fd:3f:48:04:ee:94:04:7b:2a:60:54:40:c3:11:4e:00:87:
99:24:c7:b0:83:d3:c0:5d:b9:e7:87:d0:c4:00:a8:b7:73:8a:
7f:63:1d:5f:e8:b8:51:ee:22:38:df:1b:9b:d8:da:17:be:b6:
1c:c9:76:d4:72:ac:99:e6:1c:9f:67:b8:d2:c0:0c:d2:00:8d:
7f:05:85:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6jkyWsvUGj3PmvdQQy8Jb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNjA3MTkzMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWQ0NDg2OTU2ZGIzYzYxZDM3ZDVlNzk3YzE2M2UzYzU0Yzg2ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nQbMNb8jVyBNvnXz9cdKptEOLqn
rakz1MO9soxjRgTmHqsUeK15+MHjFQhsujqZfsy14McxSf2y8mGoDc1rIqGxzT2x
Vf6GVMOVjXzma5pfEwhXtyn0CLvhLr5hj+y8HwaHQ+lz3gogqPQ9/eGrEVu8bCTx
KrUhXQMaCR6SRyqH2Td2/O0Djm4Wrp4ISecpewUsKVb21uApOPovfyWQ0cKO9zps
DjuY6bZ3KjmAnPYxI8eN3gVGsSOn/jZ7lJ9leQYGB19F1ZmIjg3niKd8FR/L9LTQ
PSJ0mM3xPPdE0dYXN284mq4BuYZ/RUbD3VSQoeTrAoGLpG3HJOfSqHrClQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGHUSGlW2zxh031eeXwWPjxUyGgRMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvWWRSSWFWYmJQR0hUZlY1NWZCWS1QRlRJYUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkv+9AwQA
1C4hMA0GCSqGSIb3DQEBCwUAA4IBAQBd1T8HU3ItF6KH7opEHkfyu+35F3ho+j1/
SD3KQSEshsMLILTKMO7JzhS57tnnX5HnPtVNimkoPO5pOfKwu9TaWUjezKftLqwl
RYlh8P7HpkAu8D09NJfWXvaMQPrqrS/GzzuQ8bUshZBHxxP4jT5mR979datKYQFd
+tTGhkhMr/xXs+K6wLY0JgTrql3WkGumX5mw80WBaGWhr49ssKVjIcsZD0Gr841O
pOKTp6LyHjiZt9qE/T9IBO6UBHsqYFRAwxFOAIeZJMewg9PAXbnnh9DEAKi3c4p/
Yx1f6LhR7iI43xub2NoXvrYcyXbUcqyZ5hyfZ7jSwAzSAI1/BYVi
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:37 2026 by rpki-client