Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yuu6pkLIeW44ejjBMErvhGu5LgI.roa
File: yuu6pkLIeW44ejjBMErvhGu5LgI.roa (raw, json)
Hash identifier: 6xHzo/Vs6bOP6rzLYIi1OSbob9D+BHaYxFHHU+Ycr9E=
Subject key identifier: CA:EB:BA:A6:42:C8:79:6E:38:7A:38:C1:30:4A:EF:84:6B:B9:2E:02
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A085FBCFD47AB144FD4E9A3AE8DD8522A6
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yuu6pkLIeW44ejjBMErvhGu5LgI.roa
Signing time: Wed 09 Sep 2026 11:44:27 +0000
ROA not before: Wed 09 Sep 2026 11:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197196
IP address blocks: 216.195.195.0/24 maxlen: 24
216.195.196.0/24 maxlen: 24
216.235.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:fb:cf:d4:7a:b1:44:fd:4e:9a:3a:e8:dd:85:22:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 9 11:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caebbaa642c8796e387a38c1304aef846bb92e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:79:f8:a7:05:cb:15:eb:51:9d:37:63:5f:
44:6e:6a:ee:d2:37:a0:38:6d:90:ab:5d:05:0f:01:
ca:ed:be:d1:03:c2:a6:98:c1:a4:db:3b:c9:22:ab:
88:7d:d7:a1:f8:57:e2:a2:bf:55:54:82:c0:21:7c:
82:cd:47:4b:79:2b:26:92:a7:6d:ab:5c:78:61:11:
ce:88:0a:7f:d6:d5:3d:16:65:2e:61:ef:b4:bb:11:
0b:b7:d2:be:26:26:2f:a7:d0:88:6f:5d:81:3f:cc:
04:c1:f4:52:ac:b2:8c:e4:7f:48:39:f5:93:4a:ac:
c8:79:11:62:87:4c:4e:d7:72:86:5d:32:c0:0f:3e:
09:da:a7:92:e5:88:a1:f8:45:ab:ad:36:27:73:a1:
3d:ce:f4:91:66:24:1a:06:2d:63:d0:6d:cd:83:d9:
f3:73:a5:4d:09:0a:b9:0d:68:80:4d:92:49:15:5c:
96:83:17:63:f2:bc:d2:6f:8a:be:74:f2:fe:99:ae:
38:ba:c6:8f:a6:97:43:7c:9d:9e:51:0c:f3:04:12:
6d:e9:5e:2f:fc:5a:91:73:65:6d:5a:74:70:17:a6:
ca:dd:42:a6:a2:3a:b8:26:62:f1:66:1c:72:76:fa:
fc:b5:c5:6f:1d:36:4d:3b:67:ec:91:54:29:22:45:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:BA:A6:42:C8:79:6E:38:7A:38:C1:30:4A:EF:84:6B:B9:2E:02
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yuu6pkLIeW44ejjBMErvhGu5LgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.195.0-216.195.196.255
216.235.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:23:a9:1b:72:4a:66:a1:a7:63:5c:da:8c:d8:4d:27:8a:aa:
d7:a4:ec:43:06:60:2d:12:1b:f5:67:14:14:9c:35:f5:37:46:
e9:08:31:bd:b0:b8:31:b2:44:0d:45:6e:8f:67:26:6d:55:0f:
0e:9e:14:4d:34:04:aa:1e:40:41:56:e4:d5:2a:cc:bd:32:4e:
8b:82:7a:8b:04:ed:84:40:cf:a2:60:08:bc:ef:82:91:ff:59:
29:7c:40:a2:9e:c3:4d:f2:da:5c:50:54:49:60:8c:f9:61:3d:
be:41:e6:7c:09:ca:e6:01:d0:61:47:0b:dd:8d:53:51:a8:4e:
e2:54:d7:07:4c:20:89:36:0f:84:17:dd:c9:16:10:09:3a:61:
08:0f:2c:04:c3:32:be:77:0e:ea:0f:d2:20:79:11:27:c9:b5:
1b:58:a3:0b:c1:3f:25:16:f2:9d:76:84:9f:24:ec:4e:54:a8:
9c:8b:76:5f:bd:50:f6:01:76:2a:4d:27:22:eb:b5:1b:06:f2:
f2:6a:67:d3:50:85:78:ea:9e:dd:66:21:e9:d7:2a:01:20:a8:
17:f3:d8:d7:61:68:57:fa:42:be:55:f1:af:f8:4f:cd:1c:fd:
da:7f:ea:68:c0:8e:2f:f3:a0:ae:d8:0f:9e:69:0a:1e:bc:85:
14:80:56:0f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaCF+8/UerFE/U6aOujdhSKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwOTA5MTE0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWViYmFhNjQyYzg3OTZlMzg3YTM4YzEzMDRhZWY4NDZiYjkyZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoV5+KcFyxXrUZ03Y19Ebmru0jeg
OG2Qq10FDwHK7b7RA8KmmMGk2zvJIquIfdeh+Ffior9VVILAIXyCzUdLeSsmkqdt
q1x4YRHOiAp/1tU9FmUuYe+0uxELt9K+JiYvp9CIb12BP8wEwfRSrLKM5H9IOfWT
SqzIeRFih0xO13KGXTLADz4J2qeS5Yih+EWrrTYnc6E9zvSRZiQaBi1j0G3Ng9nz
c6VNCQq5DWiATZJJFVyWgxdj8rzSb4q+dPL+ma44usaPppdDfJ2eUQzzBBJt6V4v
/FqRc2VtWnRwF6bK3UKmojq4JmLxZhxydvr8tcVvHTZNO2fskVQpIkU0EwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMrruqZCyHluOHo4wTBK74RruS4CMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEveXV1NnBrTEllVzQ0ZWpqQk1FcnZoR3U1TGdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADYw8MD
BADYw8QDBADY6/gwDQYJKoZIhvcNAQELBQADggEBABojqRtySmahp2Nc2ozYTSeK
qtek7EMGYC0SG/VnFBScNfU3RukIMb2wuDGyRA1Fbo9nJm1VDw6eFE00BKoeQEFW
5NUqzL0yTouCeosE7YRAz6JgCLzvgpH/WSl8QKKew03y2lxQVElgjPlhPb5B5nwJ
yuYB0GFHC92NU1GoTuJU1wdMIIk2D4QX3ckWEAk6YQgPLATDMr53DuoP0iB5ESfJ
tRtYowvBPyUW8p12hJ8k7E5UqJyLdl+9UPYBdipNJyLrtRsG8vJqZ9NQhXjqnt1m
IenXKgEgqBfz2NdhaFf6Qr5V8a/4T80c/dp/6mjAji/zoK7YD55pCh68hRSAVg8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:19 2026 by rpki-client