Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Rj4bwFKDGuLEhtNIdDT4O7m4J-g.roa
File: Rj4bwFKDGuLEhtNIdDT4O7m4J-g.roa (raw, json)
Hash identifier: DjGv56r1xvs03quc9RpEmfbDxsC9EosomFGUiuaU7Hw=
Subject key identifier: 46:3E:1B:C0:52:83:1A:E2:C4:86:D3:48:74:34:F8:3B:B9:B8:27:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 019B7A59A0B88E669A490A062E66E1CB5B32
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Rj4bwFKDGuLEhtNIdDT4O7m4J-g.roa
Signing time: Thu 01 Jan 2026 16:17:32 +0000
ROA not before: Thu 01 Jan 2026 16:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211583
IP address blocks: 188.94.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:59:a0:b8:8e:66:9a:49:0a:06:2e:66:e1:cb:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jan 1 16:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463e1bc052831ae2c486d3487434f83bb9b827e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:41:96:22:d3:14:58:a2:62:80:be:f9:55:
8a:97:45:42:cb:66:75:0f:29:d5:df:dd:c5:7f:58:
57:8c:f1:c0:e9:62:ac:79:1c:cf:22:b4:54:7f:29:
d0:5b:0c:e9:cf:ba:45:3c:a2:60:d5:70:b0:fb:e0:
35:3f:e4:e2:c5:24:e3:63:70:2f:b1:cf:4e:0c:0f:
9a:bb:4d:65:a8:1a:57:4e:1a:6e:77:63:d2:a2:08:
49:4d:f2:7d:f1:d0:43:90:5e:9e:d9:ed:bf:1b:13:
e3:5c:19:79:a4:ec:c9:d5:df:5b:f9:ae:ee:b5:1e:
55:01:fc:cb:18:6b:05:27:62:4c:7c:05:9a:05:e3:
4a:ff:72:dc:af:2f:22:d4:f4:aa:5e:84:97:fc:41:
5d:b0:e2:da:d8:44:ff:60:18:0d:5b:cf:47:31:59:
4c:c2:e6:5d:60:03:66:12:e2:da:5c:a9:14:a1:0f:
43:d8:ca:a2:3e:1e:cb:48:54:62:c6:8f:50:95:f8:
31:cb:d6:c4:5d:91:e5:ca:72:69:49:59:fd:6d:dc:
41:6a:ae:ca:c0:3f:32:57:3b:de:60:02:67:84:42:
40:0a:5d:86:a8:02:dd:53:f0:83:25:de:08:8d:dc:
5d:b5:75:54:eb:99:83:2c:a0:53:11:6c:2b:e0:58:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:1B:C0:52:83:1A:E2:C4:86:D3:48:74:34:F8:3B:B9:B8:27:E8
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Rj4bwFKDGuLEhtNIdDT4O7m4J-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9b:b1:aa:f1:51:6b:16:b8:1b:41:a3:21:b1:07:9e:84:dc:
18:0b:0f:fc:d6:e5:c6:0d:51:f8:c9:32:5a:db:ee:49:4e:6d:
1b:dc:60:e9:ed:2e:6c:54:a6:0a:29:9d:0d:3f:a5:a6:ba:7e:
81:33:7a:92:8b:1d:c0:c1:da:7a:8b:03:f0:f5:33:0b:fc:62:
00:29:e8:2b:66:9e:a2:a5:b6:b7:47:43:80:e8:8e:9f:08:d4:
a4:ef:f0:00:fb:50:a1:04:12:96:5b:02:26:bb:bf:09:68:af:
fc:73:ad:52:17:e5:25:d3:e9:bd:82:df:c7:2e:8d:19:7a:b7:
ce:ca:d1:71:76:f1:80:6f:38:4e:15:bb:73:8d:9d:d2:68:d8:
83:07:94:54:ae:d3:8d:0e:7c:a2:a4:fe:84:03:8e:d2:f0:67:
1d:89:d5:f1:c1:18:71:78:de:c5:56:21:43:e5:e0:a4:aa:48:
9d:33:be:7e:b5:fa:9f:04:8b:68:ab:9c:ad:85:d6:d7:41:7a:
0e:6e:7e:c7:82:f6:cf:f6:b6:69:9d:95:27:e4:cb:17:f9:63:
55:06:81:5b:ca:c8:c0:49:ed:a1:a4:b4:22:d2:53:df:90:57:
1f:53:b4:ac:a0:12:1a:ad:91:3f:2b:a0:e0:ad:07:92:85:d5:
e9:8b:d7:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WaC4jmaaSQoGLmbhy1syMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy
YWVlZTgwHhcNMjYwMTAxMTYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjNlMWJjMDUyODMxYWUyYzQ4NmQzNDg3NDM0ZjgzYmI5YjgyN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22xBliLTFFiiYoC++VWKl0VCy2Z1
DynV393Ff1hXjPHA6WKseRzPIrRUfynQWwzpz7pFPKJg1XCw++A1P+TixSTjY3Av
sc9ODA+au01lqBpXThpud2PSoghJTfJ98dBDkF6e2e2/GxPjXBl5pOzJ1d9b+a7u
tR5VAfzLGGsFJ2JMfAWaBeNK/3Lcry8i1PSqXoSX/EFdsOLa2ET/YBgNW89HMVlM
wuZdYANmEuLaXKkUoQ9D2MqiPh7LSFRixo9Qlfgxy9bEXZHlynJpSVn9bdxBaq7K
wD8yVzveYAJnhEJACl2GqALdU/CDJd4IjdxdtXVU65mDLKBTEWwr4FgHyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEY+G8BSgxrixIbTSHQ0+Du5uCfoMB8GA1UdIwQY
MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt
N2VhNjVjMTJlOGVjLzEvUmo0YndGS0RHdUxFaHROSWREVDRPN200Si1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj
LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF68MA0G
CSqGSIb3DQEBCwUAA4IBAQCPm7Gq8VFrFrgbQaMhsQeehNwYCw/81uXGDVH4yTJa
2+5JTm0b3GDp7S5sVKYKKZ0NP6Wmun6BM3qSix3Awdp6iwPw9TML/GIAKegrZp6i
pba3R0OA6I6fCNSk7/AA+1ChBBKWWwImu78JaK/8c61SF+Ul0+m9gt/HLo0ZerfO
ytFxdvGAbzhOFbtzjZ3SaNiDB5RUrtONDnyipP6EA47S8GcdidXxwRhxeN7FViFD
5eCkqkidM75+tfqfBItoq5ythdbXQXoObn7HgvbP9rZpnZUn5MsX+WNVBoFbysjA
Se2hpLQi0lPfkFcfU7SsoBIarZE/K6DgrQeShdXpi9cV
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:08 2026 by rpki-client