Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iyoV4oO6ldO3Q-caGsdm-dSnz7c.roa
File: iyoV4oO6ldO3Q-caGsdm-dSnz7c.roa (raw, json)
Hash identifier: xbF6ZierNiq9aJbK0jQx71oCkrWyHB1BS3vhJ4DCFIg=
Subject key identifier: 8B:2A:15:E2:83:BA:95:D3:B7:43:E7:1A:1A:C7:66:F9:D4:A7:CF:B7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A14ACC2343126FE2A8BCCE56D385A2A765
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iyoV4oO6ldO3Q-caGsdm-dSnz7c.roa
Signing time: Sat 17 Oct 2026 16:57:34 +0000
ROA not before: Sat 17 Oct 2026 16:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 94.103.174.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cc:23:43:12:6f:e2:a8:bc:ce:56:d3:85:a2:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 16:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b2a15e283ba95d3b743e71a1ac766f9d4a7cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:ec:a8:48:49:0c:f5:4b:71:94:77:21:d7:
b4:bb:54:85:f2:cb:73:3a:9d:c7:4e:61:28:bf:20:
b8:f3:b2:7e:a0:c4:4b:32:8a:21:ca:4b:fc:30:27:
5d:a4:51:8b:58:f9:e6:d6:d5:66:2d:a4:8f:2d:c2:
c1:eb:73:cd:f7:e8:9e:1a:44:26:0f:07:35:ab:be:
05:6d:83:0f:99:50:ca:12:cd:ad:10:8c:e4:14:9f:
b7:8f:53:6c:c8:27:dc:06:42:8f:d7:ac:f9:65:5c:
c4:d8:4b:b4:63:42:3e:c9:00:2f:3e:2a:e9:26:f2:
4d:a6:b9:84:eb:64:75:51:a3:42:6f:6a:5f:69:b9:
6d:a9:17:b5:fd:bf:d3:1a:2d:20:94:8c:fa:0e:a5:
5c:5f:64:99:52:d6:9c:61:74:4a:ac:da:4d:3b:d1:
69:99:cd:53:4f:d9:41:a6:6d:af:49:31:1f:65:81:
e1:eb:ef:00:77:20:dc:2d:39:b2:5b:f6:6a:3b:cd:
da:ab:6f:9f:f6:42:0a:4c:16:cc:5e:37:ad:76:02:
a0:de:e3:b4:da:56:f7:67:f9:05:f7:9a:f2:66:01:
61:36:9e:d2:5f:9b:42:04:d8:96:fb:98:e1:80:73:
de:d4:8c:e9:e1:84:3d:d2:94:44:eb:2a:a8:a6:27:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:15:E2:83:BA:95:D3:B7:43:E7:1A:1A:C7:66:F9:D4:A7:CF:B7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iyoV4oO6ldO3Q-caGsdm-dSnz7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.174.0/24
94.249.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:82:50:23:0e:e0:14:2d:74:e6:7e:36:3a:7d:16:88:b9:66:
13:29:e0:c8:4b:9b:c4:36:c9:14:fc:d4:6a:e9:7c:76:40:72:
04:e3:aa:b0:51:d9:a0:88:51:47:3e:ab:8f:40:f7:6c:ae:fe:
66:a8:f7:d2:fc:08:94:d3:15:e6:ea:68:74:9c:f8:19:d1:05:
a5:f2:b4:98:a2:f3:70:5f:a7:aa:e0:29:a7:83:e9:5c:64:56:
bb:52:72:59:bb:03:28:c7:53:95:9e:2f:8e:05:79:a7:ed:ea:
3e:9d:1a:d1:ee:90:92:95:bc:08:93:c9:ef:ae:b3:7e:54:c0:
2e:da:6e:13:9c:d9:18:98:24:39:aa:a2:a8:d2:c9:b6:92:40:
ea:e4:6b:3c:f6:89:71:50:cd:b0:64:94:f4:b5:62:22:e4:4e:
90:b4:f4:f4:57:35:18:29:1c:cf:57:20:89:b7:78:15:23:63:
b6:b2:bf:f7:54:fe:ba:f5:18:c3:11:93:66:a1:56:1d:b5:3b:
fd:d6:d6:28:6c:72:4f:01:9d:d8:03:b3:7e:b0:04:f7:cc:60:
2e:85:7e:f6:02:3b:26:46:3a:55:22:e9:49:36:5b:2c:a2:52:
57:69:d4:ce:df:ae:db:03:16:b9:42:d6:29:08:c3:b0:fb:f0:
ab:f3:ad:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFKzCNDEm/iqLzOVtOFoqdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDE3MTY1NzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjJhMTVlMjgzYmE5NWQzYjc0M2U3MWExYWM3NjZmOWQ0YTdjZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWPsqEhJDPVLcZR3Ide0u1SF8stz
Op3HTmEovyC487J+oMRLMoohykv8MCddpFGLWPnm1tVmLaSPLcLB63PN9+ieGkQm
Dwc1q74FbYMPmVDKEs2tEIzkFJ+3j1NsyCfcBkKP16z5ZVzE2Eu0Y0I+yQAvPirp
JvJNprmE62R1UaNCb2pfabltqRe1/b/TGi0glIz6DqVcX2SZUtacYXRKrNpNO9Fp
mc1TT9lBpm2vSTEfZYHh6+8AdyDcLTmyW/ZqO83aq2+f9kIKTBbMXjetdgKg3uO0
2lb3Z/kF95ryZgFhNp7SX5tCBNiW+5jhgHPe1Izp4YQ90pRE6yqopidStQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIsqFeKDupXTt0PnGhrHZvnUp8+3MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaXlvVjRvTzZsZE8zUS1jYUdzZG0tZFNuejdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmeuAwQA
XvnOMA0GCSqGSIb3DQEBCwUAA4IBAQBqglAjDuAULXTmfjY6fRaIuWYTKeDIS5vE
NskU/NRq6Xx2QHIE46qwUdmgiFFHPquPQPdsrv5mqPfS/AiU0xXm6mh0nPgZ0QWl
8rSYovNwX6eq4Cmng+lcZFa7UnJZuwMox1OVni+OBXmn7eo+nRrR7pCSlbwIk8nv
rrN+VMAu2m4TnNkYmCQ5qqKo0sm2kkDq5Gs89olxUM2wZJT0tWIi5E6QtPT0VzUY
KRzPVyCJt3gVI2O2sr/3VP669RjDEZNmoVYdtTv91tYobHJPAZ3YA7N+sAT3zGAu
hX72AjsmRjpVIulJNlssolJXadTO367bAxa5QtYpCMOw+/Cr8601
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:42 2026 by rpki-client