Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YYSBCusmOATTsDlexwdHCGh1TQo.roa
File: YYSBCusmOATTsDlexwdHCGh1TQo.roa (raw, json)
Hash identifier: h7RqP8GZAD05bX49zITtzPTXDfFkGa6deohAIGARxjs=
Subject key identifier: 61:84:81:0A:EB:26:38:04:D3:B0:39:5E:C7:07:47:08:68:75:4D:0A
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 019D6EEDA10CBE8D521B4A0B3661FA40A1A0
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YYSBCusmOATTsDlexwdHCGh1TQo.roa
Signing time: Wed 08 Apr 2026 21:09:20 +0000
ROA not before: Wed 08 Apr 2026 21:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3196
IP address blocks: 185.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:ed:a1:0c:be:8d:52:1b:4a:0b:36:61:fa:40:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Apr 8 21:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6184810aeb263804d3b0395ec707470868754d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:c9:69:64:0d:ca:32:bf:a8:1f:2e:47:11:
f6:5a:47:58:7b:69:09:6b:2c:db:39:4a:a9:e2:54:
36:dc:de:9d:89:f7:23:fb:26:9c:57:ab:7c:34:ef:
dc:09:90:87:a8:a0:03:0f:3d:15:21:cd:23:64:a0:
98:1d:09:9d:88:fc:d9:7e:d5:0e:2f:1a:43:d0:21:
1c:a2:80:de:d9:23:47:a1:6d:f1:a7:fa:cd:ed:7b:
aa:09:27:02:3d:a5:f7:39:a7:8e:e2:ae:27:f5:06:
41:98:ff:0a:26:9a:db:8d:c6:db:4a:d3:ed:ef:ab:
4f:37:6e:29:3f:38:2a:c5:71:52:38:f1:ed:c4:f2:
d0:bd:5a:67:0a:82:55:63:c2:02:01:58:63:42:27:
72:1c:97:86:bf:b7:e2:d3:68:54:b5:e1:bf:18:69:
52:30:5d:27:03:50:3b:54:30:a7:0f:99:6a:33:57:
4b:9c:18:0a:63:3d:7c:aa:d2:43:40:cb:84:c1:a9:
7c:7d:36:f9:b9:3b:59:35:f8:29:4b:ef:db:b2:f4:
86:1f:5e:4a:d7:af:a8:59:d7:0b:70:50:a4:9d:69:
61:9d:9d:82:d4:ac:e8:1a:83:01:92:4c:c6:61:49:
ad:38:3b:d0:37:b4:d2:4e:13:7b:c6:f7:2a:c5:a1:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:81:0A:EB:26:38:04:D3:B0:39:5E:C7:07:47:08:68:75:4D:0A
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YYSBCusmOATTsDlexwdHCGh1TQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5e:7d:fa:1e:5f:39:4e:f6:c1:a3:06:2c:28:25:c2:71:3a:
e9:3a:d1:6d:16:2d:c5:a9:1c:e6:20:75:27:de:f1:65:55:7a:
f3:83:d4:03:2f:df:bf:dc:49:85:d1:77:c9:11:5f:8f:30:f7:
b9:ab:b3:2c:8e:cc:7a:aa:50:1b:97:72:d4:f2:dd:fb:28:56:
65:60:d5:e7:59:fb:0a:7f:c5:5b:72:4d:53:2d:ae:17:d6:c4:
fb:ef:06:6f:68:31:3d:bd:ac:8e:cf:c3:74:f1:93:49:a8:dc:
76:af:3a:b4:8a:90:f5:fe:65:23:19:0d:fd:ed:40:67:81:8e:
68:d2:cc:41:1e:0b:c8:39:54:a9:8c:ad:da:9e:00:d2:f9:14:
de:f4:ad:77:27:6a:7c:f8:76:0a:1d:d2:08:b4:49:42:41:7b:
f4:2a:3c:29:c0:d9:7c:27:22:3d:d4:c5:32:79:ac:80:2d:78:
dc:6f:51:bf:47:ae:b2:d2:0e:d2:08:da:f4:14:2a:cb:94:10:
a2:d1:b1:07:47:f5:0f:3a:4d:2c:54:16:f6:b9:31:e9:6f:da:
cb:f9:61:b5:99:26:e2:e8:e9:07:8a:12:49:8c:e9:2e:7d:2f:
35:6a:ca:eb:94:35:0d:b6:e5:4d:3b:35:61:29:46:b3:e5:8c:
08:e7:d1:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1u7aEMvo1SG0oLNmH6QKGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3
YWI3N2MwHhcNMjYwNDA4MjEwOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg0ODEwYWViMjYzODA0ZDNiMDM5NWVjNzA3NDcwODY4NzU0ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTJaWQNyjK/qB8uRxH2WkdYe2kJ
ayzbOUqp4lQ23N6difcj+yacV6t8NO/cCZCHqKADDz0VIc0jZKCYHQmdiPzZftUO
LxpD0CEcooDe2SNHoW3xp/rN7XuqCScCPaX3OaeO4q4n9QZBmP8KJprbjcbbStPt
76tPN24pPzgqxXFSOPHtxPLQvVpnCoJVY8ICAVhjQidyHJeGv7fi02hUteG/GGlS
MF0nA1A7VDCnD5lqM1dLnBgKYz18qtJDQMuEwal8fTb5uTtZNfgpS+/bsvSGH15K
16+oWdcLcFCknWlhnZ2C1KzoGoMBkkzGYUmtODvQN7TSThN7xvcqxaHTRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGEgQrrJjgE07A5XscHRwhodU0KMB8GA1UdIwQY
MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt
NmExOGRjODgxNmRiLzEvWVlTQkN1c21PQVRUc0RsZXh3ZEhDR2gxVFFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi
LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWS4MA0G
CSqGSIb3DQEBCwUAA4IBAQBdXn36Hl85TvbBowYsKCXCcTrpOtFtFi3FqRzmIHUn
3vFlVXrzg9QDL9+/3EmF0XfJEV+PMPe5q7Msjsx6qlAbl3LU8t37KFZlYNXnWfsK
f8Vbck1TLa4X1sT77wZvaDE9vayOz8N08ZNJqNx2rzq0ipD1/mUjGQ397UBngY5o
0sxBHgvIOVSpjK3angDS+RTe9K13J2p8+HYKHdIItElCQXv0KjwpwNl8JyI91MUy
eayALXjcb1G/R66y0g7SCNr0FCrLlBCi0bEHR/UPOk0sVBb2uTHpb9rL+WG1mSbi
6OkHihJJjOkufS81asrrlDUNtuVNOzVhKUaz5YwI59EU
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:37 2026 by rpki-client