Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/l-TYR1GfRfNa55D7uwRtf2ZpLJ8.roa
File: l-TYR1GfRfNa55D7uwRtf2ZpLJ8.roa (raw, json)
Hash identifier: sbmiFbD/IK4X5tCWGsKYwCRe7nad7zaG0OQ63LmIgwE=
Subject key identifier: 97:E4:D8:47:51:9F:45:F3:5A:E7:90:FB:BB:04:6D:7F:66:69:2C:9F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A04375849B982A1DBD1CB624C9E9FFF687
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/l-TYR1GfRfNa55D7uwRtf2ZpLJ8.roa
Signing time: Thu 27 Aug 2026 13:42:50 +0000
ROA not before: Thu 27 Aug 2026 13:42:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 193.187.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:75:84:9b:98:2a:1d:bd:1c:b6:24:c9:e9:ff:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 27 13:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97e4d847519f45f35ae790fbbb046d7f66692c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:e5:ea:28:49:47:e1:04:c1:d4:80:5e:da:
11:4e:25:da:68:e2:17:83:ae:15:7a:9a:af:5c:36:
60:8f:1b:e3:78:ad:39:9a:b0:a6:89:fa:3d:f7:bc:
ef:cf:7d:c4:68:85:5b:67:26:09:7b:14:b2:5e:89:
0c:a2:35:aa:e9:f1:77:4e:5c:4d:fb:b5:76:bc:f3:
73:19:68:2c:6e:ee:25:6a:75:84:51:bd:fd:bc:3c:
57:65:30:ba:b5:ee:cb:2f:d6:f0:ac:57:07:42:63:
46:cd:1f:fc:15:d3:1f:b9:c2:d3:25:f8:ac:1b:3c:
55:29:3e:5d:8c:b0:2f:ff:19:a0:31:e3:29:85:c5:
6c:2f:2a:b1:5a:ef:11:cb:65:77:e7:25:08:f9:3e:
b2:56:dc:c5:ed:04:2d:9b:88:f1:16:dc:e2:2d:79:
61:07:6a:5d:78:8f:71:2a:8b:7d:0d:e8:99:39:28:
85:c2:3a:73:1a:6a:9a:bf:d5:0c:ef:52:71:3a:89:
a4:56:57:86:a2:78:ef:a5:b7:27:91:fb:38:a5:dd:
cd:2d:08:ac:92:30:91:a1:28:34:5d:01:d9:40:e8:
b0:05:a1:db:a3:d5:48:11:e2:33:95:13:2c:66:08:
27:e7:a7:f9:a3:c5:1d:42:2e:88:be:f3:f2:38:53:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:D8:47:51:9F:45:F3:5A:E7:90:FB:BB:04:6D:7F:66:69:2C:9F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/l-TYR1GfRfNa55D7uwRtf2ZpLJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:30:19:e0:07:5c:69:4e:33:ce:eb:85:d7:38:ba:b8:69:
22:d2:5a:67:8d:c1:ac:28:b2:26:e1:07:92:fe:56:f5:23:7d:
58:16:be:34:75:2d:83:ae:6d:06:52:4a:d3:5c:19:5d:d5:b3:
07:3a:7d:fc:c8:fb:b4:24:ba:2f:67:6c:82:f0:39:e2:77:26:
8a:0f:8f:82:ee:0e:9e:bc:e5:6b:c9:2e:96:ea:fa:c2:c3:ed:
bc:73:2b:33:6e:a4:6f:da:67:59:ee:bc:77:20:d0:ab:ba:cc:
9a:d8:39:5f:25:54:28:84:ac:4f:32:be:9b:91:7b:2c:ef:a6:
92:7c:8c:54:f2:70:b2:ca:2f:8e:b5:86:e5:89:e6:4d:1f:c2:
35:5a:18:61:8d:03:b5:d5:80:2a:f2:0c:87:3f:f8:49:10:ae:
50:c4:56:b9:97:a8:ea:d5:76:84:5d:31:dd:3a:80:80:17:fa:
5e:97:0d:88:b3:13:34:89:3a:b2:5c:17:b0:1c:4f:5f:9f:f2:
12:44:3b:95:c2:4b:3f:44:ab:fa:42:f3:c7:87:1b:ec:93:c8:
ae:90:c0:c5:2c:59:71:70:f9:16:de:3e:48:ca:1c:9b:aa:c4:
42:91:88:9f:49:7a:b5:bd:83:28:d7:db:6e:47:b2:1d:60:87:
2f:4e:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:17 2026 by rpki-client