Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/ywHuQjcoQQPpckvAcM1rJIpUcPA.roa
File: ywHuQjcoQQPpckvAcM1rJIpUcPA.roa (raw, json)
Hash identifier: Gf5RuuJQtNjDUR6Af6lWwEk4oPf4XfNWFz/FImCV94g=
Subject key identifier: CB:01:EE:42:37:28:41:03:E9:72:4B:C0:70:CD:6B:24:8A:54:70:F0
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01A0B13923E38FE0C6319B843A80A7780A9B
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/ywHuQjcoQQPpckvAcM1rJIpUcPA.roa
Signing time: Thu 17 Sep 2026 21:15:07 +0000
ROA not before: Thu 17 Sep 2026 21:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43019
IP address blocks: 95.214.213.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:39:23:e3:8f:e0:c6:31:9b:84:3a:80:a7:78:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Sep 17 21:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb01ee4237284103e9724bc070cd6b248a5470f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:bc:16:ed:77:b8:54:95:59:f5:43:65:18:
2d:c9:87:4b:c3:8c:54:ab:61:fd:0a:23:a0:93:8a:
80:d2:fd:55:62:8a:d8:6b:15:1c:83:ec:62:b7:e3:
62:c5:53:7c:28:1c:09:42:21:e7:ae:eb:5b:d8:ff:
cb:cd:14:8c:ed:06:01:fb:6e:1e:e0:b5:18:1b:e0:
c6:7a:4c:f1:17:13:08:e5:35:34:37:05:56:af:61:
0f:06:a8:25:02:d4:5e:1c:46:55:6d:26:d0:e0:28:
95:15:5b:ef:f1:0c:58:c5:2d:2b:5b:7f:86:09:ca:
33:62:5f:c2:5a:c8:96:f0:b3:e3:1c:e2:1e:be:ab:
f6:74:1a:89:6b:11:87:bb:2b:ea:e8:8d:c6:d6:c5:
27:bf:06:53:37:04:9d:3b:9f:be:47:19:a8:88:f2:
38:3e:e3:bb:fa:f5:6b:60:7c:ae:f5:b8:f7:d6:d5:
ea:07:56:5c:92:cf:f1:81:c8:c9:7d:dc:0c:d6:e8:
bb:13:86:41:39:8b:91:e5:3b:ad:c0:2e:6d:9f:9f:
dd:5a:2f:79:d0:2d:10:14:56:19:de:27:cb:a7:8f:
c4:bc:f2:47:a4:a4:e3:4d:5d:89:bd:de:1c:f9:47:
aa:3f:fb:68:b9:ef:17:b0:3d:c5:ce:21:75:a1:03:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:EE:42:37:28:41:03:E9:72:4B:C0:70:CD:6B:24:8A:54:70:F0
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/ywHuQjcoQQPpckvAcM1rJIpUcPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.213.0-95.214.214.255
Signature Algorithm: sha256WithRSAEncryption
28:55:10:71:af:bd:59:bb:cc:8d:96:e8:b1:e7:e8:ab:1e:cc:
b8:8d:25:96:1a:d3:dc:04:28:47:ec:e5:1f:9f:4a:0f:a7:1d:
4d:39:f7:61:cc:81:a8:7f:5f:b5:1b:33:a3:d7:4d:67:1b:ad:
20:fc:33:1e:94:a4:6b:90:ce:04:cc:40:bc:08:69:b8:87:0a:
55:9c:71:7a:d9:e0:67:2d:69:fa:58:16:13:3c:de:b6:26:28:
21:ad:e1:4c:27:87:70:3f:fe:bb:a6:09:89:da:0f:fe:ff:43:
80:1a:a5:f2:4a:2c:87:a9:31:2b:03:2d:2f:2f:e0:4f:1c:16:
25:9c:7b:4c:ed:d6:f9:5f:e5:b7:61:16:f2:76:e3:c0:23:6a:
db:6c:b5:23:37:b2:92:2b:e3:22:45:28:8d:d7:46:3f:c0:d4:
dd:5c:c3:43:f1:6f:b3:72:1e:15:f2:6e:c2:7b:22:8b:b4:78:
8d:1c:11:c9:f6:2e:4a:cb:14:d1:eb:93:51:19:4e:c4:a3:00:
68:e2:a5:da:8b:f6:4b:e0:ea:64:8e:cc:8c:28:75:1e:6f:b5:
a6:5a:63:77:32:56:dc:82:28:89:54:d0:b7:f8:00:a2:bd:ea:
7c:3f:22:d8:95:57:eb:ca:06:8b:e3:02:af:2e:d9:86:a0:c3:
a9:16:c9:a6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaCxOSPjj+DGMZuEOoCneAqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjYwOTE3MjExNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjAxZWU0MjM3Mjg0MTAzZTk3MjRiYzA3MGNkNmIyNDhhNTQ3MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhu8Fu13uFSVWfVDZRgtyYdLw4xU
q2H9CiOgk4qA0v1VYorYaxUcg+xit+NixVN8KBwJQiHnrutb2P/LzRSM7QYB+24e
4LUYG+DGekzxFxMI5TU0NwVWr2EPBqglAtReHEZVbSbQ4CiVFVvv8QxYxS0rW3+G
CcozYl/CWsiW8LPjHOIevqv2dBqJaxGHuyvq6I3G1sUnvwZTNwSdO5++RxmoiPI4
PuO7+vVrYHyu9bj31tXqB1Zcks/xgcjJfdwM1ui7E4ZBOYuR5TutwC5tn5/dWi95
0C0QFFYZ3ifLp4/EvPJHpKTjTV2Jvd4c+UeqP/toue8XsD3FziF1oQOVZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMsB7kI3KEED6XJLwHDNaySKVHDwMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEveXdIdVFqY29RUVBwY2t2QWNNMXJKSXBVY1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABf1tUD
BABf1tYwDQYJKoZIhvcNAQELBQADggEBAChVEHGvvVm7zI2W6LHn6KsezLiNJZYa
09wEKEfs5R+fSg+nHU0592HMgah/X7UbM6PXTWcbrSD8Mx6UpGuQzgTMQLwIabiH
ClWccXrZ4GctafpYFhM83rYmKCGt4Uwnh3A//rumCYnaD/7/Q4AapfJKLIepMSsD
LS8v4E8cFiWce0zt1vlf5bdhFvJ248AjattstSM3spIr4yJFKI3XRj/A1N1cw0Px
b7NyHhXybsJ7Iou0eI0cEcn2LkrLFNHrk1EZTsSjAGjipdqL9kvg6mSOzIwodR5v
taZaY3cyVtyCKIlU0Lf4AKK96nw/ItiVV+vKBovjAq8u2Yagw6kWyaY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:51 2026 by rpki-client