Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/lyIOq6TA50RExwMG01O0x9KQ_K8.roa
File: lyIOq6TA50RExwMG01O0x9KQ_K8.roa (raw, json)
Hash identifier: upG12PbzyM39hFjrEWs8ykSga/yXg/EqgsBSnOyEtfg=
Subject key identifier: 97:22:0E:AB:A4:C0:E7:44:44:C7:03:06:D3:53:B4:C7:D2:90:FC:AF
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01A023E162EAA16D14A2970418C6D4BE5E2A
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/lyIOq6TA50RExwMG01O0x9KQ_K8.roa
Signing time: Fri 21 Aug 2026 10:32:48 +0000
ROA not before: Fri 21 Aug 2026 10:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 109.237.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:e1:62:ea:a1:6d:14:a2:97:04:18:c6:d4:be:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Aug 21 10:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97220eaba4c0e74444c70306d353b4c7d290fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:47:59:6a:ee:36:96:3c:29:b5:61:4c:9e:
d5:de:61:0f:72:da:ea:46:9b:60:ef:e6:c2:c3:20:
e9:87:2f:20:c6:13:9f:df:cf:a5:9f:1c:68:1c:0f:
39:b1:17:4a:c3:28:66:7c:ba:69:c3:83:9e:67:64:
01:71:9f:61:e2:84:3b:9e:48:47:d1:0f:2a:08:9a:
67:36:9d:24:93:6e:06:2e:92:d5:72:54:a3:cf:b3:
da:0a:ee:d1:50:07:62:bc:e5:b9:16:a4:64:19:78:
78:49:0a:47:d4:74:68:07:89:f6:46:ff:42:6d:70:
5a:dd:1d:5f:d1:f2:8d:5c:a8:8a:f4:61:26:78:cb:
b7:84:25:56:33:24:1a:8d:e1:2b:70:43:8b:4d:57:
7b:17:95:27:09:ba:61:ff:f5:13:9f:2e:da:73:9e:
21:28:e7:50:0a:04:40:30:db:20:5d:88:7f:c5:40:
0e:1e:df:f0:c1:ba:98:c3:45:dc:ab:4b:46:28:b3:
b5:38:fa:aa:f3:9d:c5:88:ea:36:5e:72:b1:00:ac:
b3:b9:04:de:3b:81:74:f6:b3:77:03:f9:d4:71:c7:
c4:d0:bd:91:35:c8:43:dd:49:3c:9a:de:af:4b:db:
73:d4:3c:47:3f:51:3e:8a:f9:5d:f0:b5:fd:6b:b9:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:0E:AB:A4:C0:E7:44:44:C7:03:06:D3:53:B4:C7:D2:90:FC:AF
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/lyIOq6TA50RExwMG01O0x9KQ_K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.98.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a3:dd:22:8b:1b:85:b7:51:a3:94:06:7e:be:f9:62:7f:23:
df:f9:45:9d:58:6e:d6:b7:c8:1f:51:c7:fd:ef:33:af:37:2e:
fd:91:8d:8c:29:3f:f5:0b:b9:a4:43:9e:f0:a5:99:ab:bc:4e:
23:5b:d4:b4:e1:c6:94:5c:73:65:ec:17:6d:4e:45:b1:bc:8a:
77:e6:22:44:db:5f:db:e0:99:f9:89:c0:dd:13:b5:99:7d:62:
26:06:86:05:e6:eb:22:c4:46:a5:67:5e:85:46:94:ad:40:ad:
7d:57:07:6b:20:cb:6e:55:7c:d0:5f:74:99:08:68:e3:02:b5:
c4:01:11:25:e9:bd:ec:fe:a9:d0:c7:95:47:67:d7:f8:4f:f2:
e9:1b:41:d9:24:8e:da:c8:5f:63:81:07:01:5a:27:f9:59:14:
19:5a:24:d9:3c:15:30:8e:f6:a7:97:75:df:70:7b:7e:93:61:
4c:00:85:05:9a:56:51:5c:14:d8:58:b9:83:6c:75:e4:06:83:
36:4c:40:44:00:ce:05:eb:6e:07:04:1f:d1:82:a4:5e:23:0e:
f1:0f:04:1c:7c:24:0e:0f:87:90:ea:17:93:19:61:78:a3:4f:
b3:ce:1f:af:3f:65:75:99:34:59:25:ee:72:01:ac:3a:da:c4:
78:c4:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:29 2026 by rpki-client