Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/lyhzGP2lRIA2gYIgG_dmNDJ1wN8.roa
File: lyhzGP2lRIA2gYIgG_dmNDJ1wN8.roa (raw, json)
Hash identifier: 3KmIRXWheKk/1ZXn4d13dgEM0bFoDA9q79pY4S+9K4w=
Subject key identifier: 97:28:73:18:FD:A5:44:80:36:81:82:20:1B:F7:66:34:32:75:C0:DF
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A1689C9247A11A2FBC90E1269B2BE2158B
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/lyhzGP2lRIA2gYIgG_dmNDJ1wN8.roa
Signing time: Fri 23 Oct 2026 11:54:13 +0000
ROA not before: Fri 23 Oct 2026 11:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198010
IP address blocks: 2a01:a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:9c:92:47:a1:1a:2f:bc:90:e1:26:9b:2b:e2:15:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Oct 23 11:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97287318fda54480368182201bf766343275c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:84:c6:4b:a0:11:42:91:d6:57:79:65:9f:
99:a8:b6:32:d6:fe:25:cb:db:af:8e:93:9e:43:8c:
5e:9b:e3:57:b0:73:e7:09:18:eb:3b:ce:b4:43:3a:
34:58:3d:cd:61:25:0c:86:98:1e:b4:f9:64:69:da:
e5:51:b4:0f:48:8d:35:db:e2:cb:2b:b2:01:c3:66:
ae:2e:7b:86:f5:b7:89:6f:04:fa:63:e1:48:7c:ab:
c9:ab:a3:f0:09:6e:1b:d3:7d:b0:a2:2c:03:a6:44:
ce:b8:51:f7:b5:3c:5e:0f:e4:11:19:b2:81:f2:b3:
4a:a7:08:2c:ab:36:d6:06:48:fe:ab:60:1d:8d:94:
5e:88:8b:13:fb:04:48:72:a9:09:7e:a9:43:ba:04:
59:6b:1c:ef:9f:42:8d:38:90:54:89:55:b3:16:ce:
e8:b0:2c:fc:a8:86:53:a3:22:c1:a8:da:02:8b:00:
42:ca:70:ad:50:ae:94:70:74:b3:88:37:13:6b:d7:
02:70:44:21:11:2f:b2:53:0a:0f:0e:dc:6c:3d:9a:
a3:e2:c4:93:8b:56:7e:e7:af:88:d6:25:28:56:45:
02:5a:e9:09:f1:d7:bf:6d:0c:5b:f3:eb:7b:4c:57:
a6:87:54:9c:27:f3:39:5f:83:d3:1b:3b:6c:e3:64:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:73:18:FD:A5:44:80:36:81:82:20:1B:F7:66:34:32:75:C0:DF
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/lyhzGP2lRIA2gYIgG_dmNDJ1wN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:a40::/29
Signature Algorithm: sha256WithRSAEncryption
78:32:ab:80:06:6c:98:81:98:41:42:d5:85:e0:f5:03:f0:b9:
48:e0:cc:47:96:26:1d:11:c2:91:5a:03:c2:2e:42:36:3c:d8:
93:e7:b6:53:b4:cb:9e:31:5e:0b:72:53:59:6c:53:46:10:6e:
ff:45:a6:c8:7b:45:7c:3f:77:5d:95:a6:4d:2b:a0:ca:f5:2c:
73:37:7a:8b:bb:e1:7e:d3:fc:6d:bd:5b:20:16:b1:22:75:97:
b2:21:d2:5e:a3:b1:4a:bc:7a:41:a9:2c:25:8a:3f:b7:91:72:
9d:f3:b8:ab:bb:72:8a:c7:18:f4:54:b8:de:06:d7:59:05:fb:
94:d6:76:06:ed:7a:24:e3:a9:6e:81:de:36:8d:1e:69:23:52:
76:8d:d5:b6:23:48:1e:7c:ca:39:0e:8d:bb:b6:b2:7a:86:0e:
8e:a4:3c:5b:17:18:42:26:93:50:e8:92:0c:b4:90:0f:16:c2:
02:b9:af:44:94:6c:83:67:2b:79:70:87:c1:57:e1:63:65:20:
f7:de:5f:21:1f:f7:ba:df:ec:ec:b7:7d:42:55:be:e0:0e:58:
3c:1d:cd:49:35:a8:e0:45:d5:3a:02:da:3e:6d:2a:bb:9d:d7:
b5:ca:67:2c:b8:b6:e8:37:26:33:b6:84:50:af:ab:cc:e5:f3:
bd:f1:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:59:57 2026 by rpki-client