Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yEeFE1BE-DNpvAclSGDenGcedhE.roa
File: yEeFE1BE-DNpvAclSGDenGcedhE.roa (raw, json)
Hash identifier: 4PqQWG6eTCsvExahCduBeRzlqVfOdZNkHjkhLWhXCdg=
Subject key identifier: C8:47:85:13:50:44:F8:33:69:BC:07:25:48:60:DE:9C:67:1E:76:11
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0B0570384E6BF09515BB3A63CBC574BDE
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yEeFE1BE-DNpvAclSGDenGcedhE.roa
Signing time: Thu 17 Sep 2026 17:08:07 +0000
ROA not before: Thu 17 Sep 2026 17:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.110.0.0/24 maxlen: 24
94.231.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:57:03:84:e6:bf:09:51:5b:b3:a6:3c:bc:57:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 17 17:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84785135044f83369bc07254860de9c671e7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:02:e6:50:17:8c:0a:ca:40:e1:29:2d:01:
a5:c4:0d:c2:a5:6c:18:1b:8a:ee:94:b1:20:0d:0b:
ef:c9:b2:f6:07:0f:28:38:bc:fb:0d:da:9e:de:a4:
16:77:79:27:43:ba:a2:3d:3b:5e:7a:ce:d4:c9:ca:
c2:44:a1:e9:a9:70:26:ce:cc:68:5d:46:b3:e6:23:
b7:4d:b5:60:d0:0a:77:85:61:4b:a1:ec:53:31:38:
84:b6:68:ab:8f:4e:9f:e4:25:58:19:8d:73:d1:38:
3a:a0:ed:f0:fe:df:7a:b3:5a:8b:c8:c9:f9:49:7f:
31:d4:1a:06:1e:a6:ec:e2:74:cc:35:a8:8b:6a:62:
8e:55:b5:58:53:1d:10:9a:25:6c:03:9f:cf:32:52:
0d:b1:25:2b:e3:4d:e9:b8:d1:88:ca:08:9c:4e:0b:
e3:a0:8a:a4:e0:1e:87:13:40:f2:1f:69:21:39:41:
65:85:24:0f:32:f1:bb:da:ff:30:df:2b:8b:67:1b:
6d:3b:7f:e4:33:3f:63:61:03:03:a9:a7:40:9e:04:
e9:96:10:fc:82:1a:c2:15:6c:71:d7:44:be:5a:5f:
90:4f:a7:5b:26:eb:f5:b9:e3:cd:1c:e3:b3:82:ff:
e7:c8:a6:6d:ed:f1:0a:b4:3b:85:ed:81:21:04:6b:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:85:13:50:44:F8:33:69:BC:07:25:48:60:DE:9C:67:1E:76:11
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yEeFE1BE-DNpvAclSGDenGcedhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.0.0/24
94.231.231.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9b:2f:53:5c:1c:0d:fd:57:04:f9:3e:b4:32:e4:60:0f:bd:
c5:31:56:02:c2:a5:62:d8:1d:e9:dd:cb:36:ab:fe:b8:23:bc:
26:43:f8:f4:7e:ff:4e:bb:86:de:25:4a:e6:7d:11:e8:9a:be:
91:10:58:a6:62:c6:99:c5:10:0a:f1:2b:1f:1c:00:7d:b9:4d:
3e:c5:35:ee:d2:77:4f:55:2b:b5:de:83:d5:f3:a8:54:35:a7:
73:5f:ad:99:a5:8b:2a:4a:1d:1a:46:5a:38:c1:92:23:74:20:
26:9d:74:61:bb:01:1b:97:db:a4:a5:bc:f6:9f:06:37:e2:03:
2a:e0:24:f7:ae:82:f5:4e:34:bd:cf:8b:58:0a:f1:7f:31:06:
88:5c:08:67:bf:44:95:de:6c:74:c5:83:ff:f0:78:08:1c:8c:
3b:fa:b1:73:0f:2a:7b:d3:94:24:0b:aa:2a:6a:95:f6:10:a5:
d8:0a:5a:bc:fe:64:16:37:c8:16:59:31:48:b7:74:b4:3e:06:
28:73:43:b7:c4:65:e1:43:3f:b2:c9:6f:01:33:76:ae:86:33:
ec:02:12:f4:c3:ef:fd:3f:06:dd:ba:42:bf:d1:37:1d:75:5b:
b4:86:cb:d3:ed:b7:92:43:bd:97:a6:86:01:85:7b:cc:9e:90:
fb:63:16:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCwVwOE5r8JUVuzpjy8V0veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjYwOTE3MTcwODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ3ODUxMzUwNDRmODMzNjliYzA3MjU0ODYwZGU5YzY3MWU3NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iMC5lAXjArKQOEpLQGlxA3CpWwY
G4rulLEgDQvvybL2Bw8oOLz7Ddqe3qQWd3knQ7qiPTtees7UycrCRKHpqXAmzsxo
XUaz5iO3TbVg0Ap3hWFLoexTMTiEtmirj06f5CVYGY1z0Tg6oO3w/t96s1qLyMn5
SX8x1BoGHqbs4nTMNaiLamKOVbVYUx0QmiVsA5/PMlINsSUr403puNGIygicTgvj
oIqk4B6HE0DyH2khOUFlhSQPMvG72v8w3yuLZxttO3/kMz9jYQMDqadAngTplhD8
ghrCFWxx10S+Wl+QT6dbJuv1uePNHOOzgv/nyKZt7fEKtDuF7YEhBGs7QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMhHhRNQRPgzabwHJUhg3pxnHnYRMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEveUVlRkUxQkUtRE5wdkFjbFNHRGVuR2NlZGhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT24AAwQA
XufnMA0GCSqGSIb3DQEBCwUAA4IBAQBEmy9TXBwN/VcE+T60MuRgD73FMVYCwqVi
2B3p3cs2q/64I7wmQ/j0fv9Ou4beJUrmfRHomr6REFimYsaZxRAK8SsfHAB9uU0+
xTXu0ndPVSu13oPV86hUNadzX62ZpYsqSh0aRlo4wZIjdCAmnXRhuwEbl9ukpbz2
nwY34gMq4CT3roL1TjS9z4tYCvF/MQaIXAhnv0SV3mx0xYP/8HgIHIw7+rFzDyp7
05QkC6oqapX2EKXYClq8/mQWN8gWWTFIt3S0PgYoc0O3xGXhQz+yyW8BM3auhjPs
AhL0w+/9PwbdukK/0TcddVu0hsvT7beSQ72XpoYBhXvMnpD7Yxbh
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:26 2026 by rpki-client