Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Y35ymqVuICcHRHXaPcpZe6jYRyY.roa
File: Y35ymqVuICcHRHXaPcpZe6jYRyY.roa (raw, json)
Hash identifier: bu/l5P3p1+Rn72sxr1RRom125U/AUkT7NhwPheI3I7o=
Subject key identifier: 63:7E:72:9A:A5:6E:20:27:07:44:75:DA:3D:CA:59:7B:A8:D8:47:26
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 019B7F8502F5412E0742A9DD8D9F89968B23
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Y35ymqVuICcHRHXaPcpZe6jYRyY.roa
Signing time: Fri 02 Jan 2026 16:23:01 +0000
ROA not before: Fri 02 Jan 2026 16:23:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51545
IP address blocks: 91.217.245.0/24 maxlen: 24
185.155.104.0/24 maxlen: 24
185.155.106.0/24 maxlen: 24
185.155.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:02:f5:41:2e:07:42:a9:dd:8d:9f:89:96:8b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Jan 2 16:23:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=637e729aa56e2027074475da3dca597ba8d84726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:cd:9d:7c:1d:73:9d:a3:2d:c8:d6:52:4a:
2a:c3:99:ec:a1:8d:b4:1a:c4:f4:32:97:88:eb:2d:
df:ad:21:ea:fd:41:ee:b5:75:09:e2:8c:9d:7a:65:
b0:53:a0:db:df:f5:0c:23:3d:03:27:a8:00:78:67:
31:78:58:cb:52:d9:d2:9a:69:9b:dd:8d:80:51:7f:
20:9a:c5:04:dd:e3:7a:29:06:d3:53:fa:94:a7:3f:
c3:79:25:c7:27:80:da:b4:d8:9c:ff:fc:de:e9:14:
97:2a:77:f4:ba:b7:90:fb:9e:c6:41:9c:45:0b:ea:
02:f3:29:cd:a5:d7:68:2c:24:71:78:23:51:ea:65:
e0:16:3f:cb:77:39:86:d8:7f:07:5c:7b:cc:11:64:
60:06:ee:aa:45:41:37:39:10:d2:d6:77:e4:a0:ea:
2d:ae:b8:2a:f0:07:b6:53:af:d7:4e:69:54:6b:f6:
08:ed:b8:58:26:23:60:ff:50:4c:af:22:a6:af:26:
1c:ca:42:d2:ef:a3:8d:c6:7d:ce:92:2e:40:11:9b:
fa:ac:19:f5:81:4e:2b:f4:c4:b9:e0:d2:3b:3e:f7:
e4:a1:26:ee:8e:59:87:28:b4:45:64:f1:16:12:cd:
dc:42:59:7d:c2:4b:d9:b5:90:d3:fa:cb:8c:e5:a6:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:72:9A:A5:6E:20:27:07:44:75:DA:3D:CA:59:7B:A8:D8:47:26
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Y35ymqVuICcHRHXaPcpZe6jYRyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.245.0/24
185.155.104.0/24
185.155.106.0/23
Signature Algorithm: sha256WithRSAEncryption
98:32:06:00:39:7e:fd:7b:b9:05:d6:d3:76:41:fb:57:c5:3a:
bf:6a:da:ae:5c:8b:e2:48:1f:7b:dd:ad:a6:a8:c9:ef:1e:52:
a0:da:26:86:8f:97:61:4a:a6:7d:1a:39:7d:7c:74:97:60:48:
22:1c:14:9d:0c:c4:66:62:17:82:ae:c5:76:a8:12:e4:b9:d5:
6f:a5:ab:4c:c1:85:b6:98:7e:9a:82:a4:0b:03:cc:03:db:54:
c1:f6:ab:96:ef:a2:44:7e:d5:14:71:29:00:9d:6f:65:5c:a7:
8e:3d:88:85:9a:6e:0d:48:5b:1c:5a:ef:7a:ec:55:bc:4a:06:
1b:2a:8b:4e:5d:76:80:e0:69:20:b1:85:a3:a2:17:6e:35:94:
4b:a7:50:8b:00:1a:4b:8b:01:0b:7c:15:d7:2a:96:29:57:1d:
ab:2f:59:fc:bd:e9:40:37:50:58:e1:b4:1d:e2:4e:91:c3:cb:
20:f0:86:2a:79:32:ba:68:b8:4d:36:c6:f3:32:7c:28:12:06:
ee:a1:0f:d6:0d:d4:3b:2a:20:6b:09:95:0c:92:19:cb:69:f2:
ce:6f:de:49:9e:10:02:d4:d4:94:ec:8e:24:b4:0b:d4:f0:b4:
e5:75:76:03:69:6d:4c:30:c1:cb:77:52:f0:79:23:f6:2d:2f:
e0:5c:11:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt/hQL1QS4HQqndjZ+JlosjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMWRjMjA1ZTI0YTIzYTVhMDQ1NGExM2YxZDRhMGM5NjM3
YTQzOWQwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzdlNzI5YWE1NmUyMDI3MDc0NDc1ZGEzZGNhNTk3YmE4ZDg0NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1rNnXwdc52jLcjWUkoqw5nsoY20
GsT0MpeI6y3frSHq/UHutXUJ4oydemWwU6Db3/UMIz0DJ6gAeGcxeFjLUtnSmmmb
3Y2AUX8gmsUE3eN6KQbTU/qUpz/DeSXHJ4DatNic//ze6RSXKnf0ureQ+57GQZxF
C+oC8ynNpddoLCRxeCNR6mXgFj/LdzmG2H8HXHvMEWRgBu6qRUE3ORDS1nfkoOot
rrgq8Ae2U6/XTmlUa/YI7bhYJiNg/1BMryKmryYcykLS76ONxn3Oki5AEZv6rBn1
gU4r9MS54NI7PvfkoSbujlmHKLRFZPEWEs3cQll9wkvZtZDT+suM5ab4qwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGN+cpqlbiAnB0R12j3KWXuo2EcmMB8GA1UdIwQY
MBaAFCsdwgXiSiOloEVKE/HUoMljekOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQt
ZGJjOWE1MjJjZDEyLzEvWTM1eW1xVnVJQ2NIUkhYYVBjcFplNmpZUnlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQtZGJjOWE1MjJjZDEy
LzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9n1AwQA
uZtoAwQBuZtqMA0GCSqGSIb3DQEBCwUAA4IBAQCYMgYAOX79e7kF1tN2QftXxTq/
atquXIviSB973a2mqMnvHlKg2iaGj5dhSqZ9Gjl9fHSXYEgiHBSdDMRmYheCrsV2
qBLkudVvpatMwYW2mH6agqQLA8wD21TB9quW76JEftUUcSkAnW9lXKeOPYiFmm4N
SFscWu967FW8SgYbKotOXXaA4GkgsYWjohduNZRLp1CLABpLiwELfBXXKpYpVx2r
L1n8velAN1BY4bQd4k6Rw8sg8IYqeTK6aLhNNsbzMnwoEgbuoQ/WDdQ7KiBrCZUM
khnLafLOb95JnhAC1NSU7I4ktAvU8LTldXYDaW1MMMHLd1LweSP2LS/gXBGM
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:14 2026 by rpki-client