Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/YgOY2vQ8eYiICTd6YcdmoJM_Ut0.roa
File: YgOY2vQ8eYiICTd6YcdmoJM_Ut0.roa (raw, json)
Hash identifier: OH/oiPNXGds13W380cavjGRazrPRsf1bjbxs0HeBpNI=
Subject key identifier: 62:03:98:DA:F4:3C:79:88:88:09:37:7A:61:C7:66:A0:93:3F:52:DD
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019ECF1C390B5E734745456F948DA9C75B57
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/YgOY2vQ8eYiICTd6YcdmoJM_Ut0.roa
Signing time: Tue 16 Jun 2026 06:26:33 +0000
ROA not before: Tue 16 Jun 2026 06:26:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62212
IP address blocks: 85.137.164.0/22 maxlen: 24
87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
92.61.70.0/23 maxlen: 24
109.172.8.0/23 maxlen: 24
109.238.94.0/23 maxlen: 24
141.133.172.0/22 maxlen: 24
188.127.246.0/23 maxlen: 24
193.124.56.0/22 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:1c:39:0b:5e:73:47:45:45:6f:94:8d:a9:c7:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 16 06:26:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620398daf43c79888809377a61c766a0933f52dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:63:e3:fb:29:b7:f8:d4:d9:48:20:63:e4:
76:a6:35:b3:fb:4a:64:b4:65:03:d5:dc:de:c8:9b:
dc:c5:49:11:24:42:2a:48:5d:56:b4:e2:55:6f:f3:
a8:16:b1:ab:fd:79:ac:94:e9:89:d4:58:c5:fb:f9:
6f:3e:e7:52:b1:0b:da:29:9f:5f:06:c4:46:7c:cd:
b0:79:16:5d:8d:bf:3f:32:d6:ea:94:6a:27:e9:b4:
da:e6:93:ba:e6:f3:f7:2a:92:e2:6f:38:cd:63:3c:
81:5c:49:7f:72:26:2f:da:6a:47:db:c2:dd:02:5b:
ad:93:a4:ca:b1:72:71:a8:d1:cf:4b:98:77:15:db:
25:e5:9c:a3:85:28:11:8a:ab:f6:f9:0f:c4:31:07:
06:8b:25:b8:8b:64:fe:d5:40:94:0d:85:27:eb:90:
5f:29:e6:b5:74:ac:8f:44:84:1c:f1:29:64:0f:ae:
c0:c0:5c:3b:da:d2:0e:a3:a8:f8:01:fe:fb:ff:22:
3c:45:1b:63:49:68:6d:a5:9d:0f:6f:60:ad:d1:1a:
16:1c:de:b6:c9:20:a8:c1:6c:4f:4a:d1:56:43:d2:
49:ca:dd:5f:14:36:b8:fa:2e:4c:e4:4c:cf:d7:fa:
22:b7:16:33:05:04:1d:23:7b:a5:55:f3:4d:0c:6a:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:98:DA:F4:3C:79:88:88:09:37:7A:61:C7:66:A0:93:3F:52:DD
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/YgOY2vQ8eYiICTd6YcdmoJM_Ut0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.164.0/22
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
92.61.70.0/23
109.172.8.0/23
109.238.94.0/23
141.133.172.0/22
188.127.246.0/23
193.124.56.0/22
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:46:6a:69:88:9b:54:96:a8:0d:e8:94:c8:92:32:22:57:18:
55:52:36:c4:ab:77:e4:a9:ce:30:5c:78:c2:cd:73:a9:44:96:
70:d5:ad:cf:ac:f3:45:a6:c4:8c:5c:be:43:22:63:a7:1f:54:
90:de:27:1e:57:fb:33:63:6e:91:f2:d7:65:b6:dd:09:36:4a:
69:95:f1:0f:95:72:4e:d6:44:00:0d:e2:f7:db:89:fc:bb:f8:
8d:1b:a8:3b:0f:d7:60:d4:86:bb:91:9c:5d:d6:e6:13:17:86:
35:8d:22:6f:d7:5c:e8:7f:25:fc:83:d9:00:84:c6:d2:19:5f:
06:8d:72:f6:09:bc:30:2e:70:af:bd:96:ff:8a:b9:6e:92:c4:
70:24:09:93:6c:60:23:c4:68:74:83:10:8a:42:4a:74:39:a0:
3a:49:c6:38:1d:ae:7c:d4:f1:8d:fe:62:05:bf:ec:65:d1:75:
a4:05:17:fd:27:55:4c:ef:a4:5f:2e:f8:64:5e:9d:d2:a2:1c:
d5:5b:8f:75:1c:59:37:ad:a7:8e:67:81:3b:24:c9:9b:d1:dd:
3c:c0:7d:66:5e:62:0e:9a:24:09:6c:8f:9f:14:f0:17:f1:e8:
20:7a:e4:32:be:92:d9:97:dc:05:36:e1:1e:e9:1c:57:ab:89:
8b:45:29:dd
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZ7PHDkLXnNHRUVvlI2px1tXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi
MzJjZjIwHhcNMjYwNjE2MDYyNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjAzOThkYWY0M2M3OTg4ODgwOTM3N2E2MWM3NjZhMDkzM2Y1MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZBj4/spt/jU2UggY+R2pjWz+0pk
tGUD1dzeyJvcxUkRJEIqSF1WtOJVb/OoFrGr/XmslOmJ1FjF+/lvPudSsQvaKZ9f
BsRGfM2weRZdjb8/MtbqlGon6bTa5pO65vP3KpLibzjNYzyBXEl/ciYv2mpH28Ld
Alutk6TKsXJxqNHPS5h3Fdsl5ZyjhSgRiqv2+Q/EMQcGiyW4i2T+1UCUDYUn65Bf
Kea1dKyPRIQc8SlkD67AwFw72tIOo6j4Af77/yI8RRtjSWhtpZ0Pb2Ct0RoWHN62
ySCowWxPStFWQ9JJyt1fFDa4+i5M5EzP1/oitxYzBQQdI3ulVfNNDGpM1wIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFGIDmNr0PHmIiAk3emHHZqCTP1LdMB8GA1UdIwQY
MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt
YmU0MzRjYjlmOGY4LzEvWWdPWTJ2UThlWWlJQ1RkNlljZG1vSk1fVXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4
LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCVYmkAwQA
V+ySAwQCW7j4AwQAW8eJAwQAW8eTAwQAW8eaAwQAW8egAwQBXD1GAwQBbawIAwQB
be5eAwQCjYWsAwQBvH/2AwQCwXw4MA0EAgACMAcDBQMqETuAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzRmppiJtUlqgN6JTIkjIiVxhVUjbEq3fkqc4wXHjCzXOpRJZw1a3P
rPNFpsSMXL5DImOnH1SQ3iceV/szY26R8tdltt0JNkpplfEPlXJO1kQADeL324n8
u/iNG6g7D9dg1Ia7kZxd1uYTF4Y1jSJv11zofyX8g9kAhMbSGV8GjXL2CbwwLnCv
vZb/irluksRwJAmTbGAjxGh0gxCKQkp0OaA6ScY4Ha581PGN/mIFv+xl0XWkBRf9
J1VM76RfLvhkXp3SohzVW491HFk3raeOZ4E7JMmb0d08wH1mXmIOmiQJbI+fFPAX
8eggeuQyvpLZl9wFNuEe6RxXq4mLRSnd
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:15 2026 by rpki-client