Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/lY1GBZ0h_D6Nad3T73A7996pppE.roa
File: lY1GBZ0h_D6Nad3T73A7996pppE.roa (raw, json)
Hash identifier: oddByeoXBspHArAOTjct3jAkxiZljdHZeF0l/d8IWbc=
Subject key identifier: 95:8D:46:05:9D:21:FC:3E:8D:69:DD:D3:EF:70:3B:F7:DE:A9:A6:91
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01A069209DA3343E21D7DE329CF74C5FDC72
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/lY1GBZ0h_D6Nad3T73A7996pppE.roa
Signing time: Thu 03 Sep 2026 21:15:40 +0000
ROA not before: Thu 03 Sep 2026 21:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 185.103.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:20:9d:a3:34:3e:21:d7:de:32:9c:f7:4c:5f:dc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Sep 3 21:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=958d46059d21fc3e8d69ddd3ef703bf7dea9a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:03:4f:0c:1c:6c:d6:aa:4f:af:e2:24:1c:
7c:bf:8e:63:ba:c5:dd:5b:25:22:58:80:3e:94:68:
08:80:1e:28:ff:12:5e:16:10:df:0d:b6:11:98:9e:
de:42:1a:07:87:5a:2f:0e:c9:37:7e:64:97:37:d5:
0a:a4:c0:d0:be:c1:7d:53:48:f5:4c:f1:70:a6:bb:
bf:5b:0c:6c:43:ce:21:ae:b9:a8:6c:d8:6b:af:73:
d2:77:26:0b:f2:b0:c1:39:18:0f:2f:2b:ba:b2:3f:
78:18:bf:9c:68:d3:db:f6:e2:41:aa:72:4a:0a:3f:
b0:94:f2:c1:1f:6b:87:e5:ac:43:c9:af:7c:e3:1f:
40:33:25:f8:35:19:a7:27:6a:54:32:7c:85:71:83:
6f:c1:e6:31:f2:85:d6:8a:59:d1:cf:05:2d:b8:59:
09:46:3f:c6:cb:9f:67:5a:f6:ee:6e:b8:1c:90:91:
09:67:71:13:a5:a5:49:4c:9c:09:16:c3:db:43:d0:
6a:07:1c:c4:71:a3:e3:52:f0:39:48:8a:cb:1e:9f:
4f:83:30:f5:fa:44:fd:f1:a2:51:1a:4c:33:c3:09:
ba:3e:43:35:80:6f:9f:86:bc:f6:2d:cc:95:16:b7:
50:ff:1d:f4:ec:4a:c0:69:38:8d:66:c2:41:5e:d7:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:46:05:9D:21:FC:3E:8D:69:DD:D3:EF:70:3B:F7:DE:A9:A6:91
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/lY1GBZ0h_D6Nad3T73A7996pppE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:62:a1:5a:01:b9:c2:cb:60:10:73:25:22:54:38:c7:ee:16:
c2:ec:9b:9b:69:ea:00:0c:e7:da:8f:03:8e:67:7c:15:91:96:
ef:17:43:b5:69:fd:15:53:95:6a:72:52:14:a1:c6:fe:b3:06:
b9:12:99:5e:ca:89:af:9b:5e:0e:bc:53:5e:1e:6a:60:46:e4:
3f:7b:ee:60:29:03:1e:ca:b3:2f:1f:0e:4a:6f:14:70:0f:ff:
7f:b0:04:7a:a4:5a:2b:08:42:ca:7b:6a:1e:c0:55:df:ef:27:
01:61:e4:e7:77:99:eb:a4:5e:26:24:58:2a:45:c0:44:f2:9b:
38:f9:51:6a:62:14:d4:ff:d3:ff:b1:86:e3:b2:9c:59:16:5f:
8c:01:44:a3:bd:81:23:3d:2b:e0:40:bf:eb:f6:30:35:70:18:
77:34:25:e3:3a:84:5a:34:42:02:8b:da:17:f0:8f:06:3d:67:
2d:36:56:da:82:1d:a2:ac:dc:ac:e2:9b:f1:24:ec:c9:23:44:
2f:7a:56:e5:f1:1e:6e:96:1f:9b:ed:64:b3:c7:6e:de:7d:75:
5a:d1:72:99:d9:7d:d5:bf:e2:e9:00:88:ba:e7:ad:06:d6:e3:
85:c3:b1:6e:ed:01:6c:b4:29:db:c4:ab:94:6e:21:e9:97:b2:
63:b5:58:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBpIJ2jND4h194ynPdMX9xyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw
Y2Q1NmYwHhcNMjYwOTAzMjExNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NThkNDYwNTlkMjFmYzNlOGQ2OWRkZDNlZjcwM2JmN2RlYTlhNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0UDTwwcbNaqT6/iJBx8v45jusXd
WyUiWIA+lGgIgB4o/xJeFhDfDbYRmJ7eQhoHh1ovDsk3fmSXN9UKpMDQvsF9U0j1
TPFwpru/WwxsQ84hrrmobNhrr3PSdyYL8rDBORgPLyu6sj94GL+caNPb9uJBqnJK
Cj+wlPLBH2uH5axDya984x9AMyX4NRmnJ2pUMnyFcYNvweYx8oXWilnRzwUtuFkJ
Rj/Gy59nWvbubrgckJEJZ3ETpaVJTJwJFsPbQ9BqBxzEcaPjUvA5SIrLHp9PgzD1
+kT98aJRGkwzwwm6PkM1gG+fhrz2LcyVFrdQ/x307ErAaTiNZsJBXtfMjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWNRgWdIfw+jWnd0+9wO/feqaaRMB8GA1UdIwQY
MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct
ZDBjODJhM2NmNGI2LzEvbFkxR0JaMGhfRDZOYWQzVDczQTc5OTZwcHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2
LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWcGMA0G
CSqGSIb3DQEBCwUAA4IBAQDWYqFaAbnCy2AQcyUiVDjH7hbC7JubaeoADOfajwOO
Z3wVkZbvF0O1af0VU5VqclIUocb+swa5Epleyomvm14OvFNeHmpgRuQ/e+5gKQMe
yrMvHw5KbxRwD/9/sAR6pForCELKe2oewFXf7ycBYeTnd5nrpF4mJFgqRcBE8ps4
+VFqYhTU/9P/sYbjspxZFl+MAUSjvYEjPSvgQL/r9jA1cBh3NCXjOoRaNEICi9oX
8I8GPWctNlbagh2irNys4pvxJOzJI0Qvelbl8R5ulh+b7WSzx27efXVa0XKZ2X3V
v+LpAIi6560G1uOFw7Fu7QFstCnbxKuUbiHpl7JjtVjw
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:40:45 2026 by rpki-client