Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y-Hz5wEDxZ2gHpkPXSqRhFkVuxg.roa
File: Y-Hz5wEDxZ2gHpkPXSqRhFkVuxg.roa (raw, json)
Hash identifier: 1WY4joRazwQ0W2wQQ3eRL9YyAvnJAy3tVzDBp503XTM=
Subject key identifier: 63:E1:F3:E7:01:03:C5:9D:A0:1E:99:0F:5D:2A:91:84:59:15:BB:18
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01A1109987F2038E25495D631539675C4B2C
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y-Hz5wEDxZ2gHpkPXSqRhFkVuxg.roa
Signing time: Tue 06 Oct 2026 09:44:19 +0000
ROA not before: Tue 06 Oct 2026 09:44:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198627
IP address blocks: 188.95.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:99:87:f2:03:8e:25:49:5d:63:15:39:67:5c:4b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Oct 6 09:44:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63e1f3e70103c59da01e990f5d2a91845915bb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:af:4f:35:b0:17:f0:8e:f3:66:bb:50:00:
95:a6:7a:05:17:c6:2a:bb:f0:31:f5:8f:8d:e5:96:
e3:e6:63:fd:d6:a0:17:d8:c5:39:50:d7:63:c5:92:
22:1a:63:e7:75:df:77:73:9b:0e:f3:85:3b:12:8f:
a6:82:28:c8:dd:f4:a5:5c:9d:90:6b:41:34:18:9d:
23:40:95:5e:7b:32:9f:47:51:8e:ea:7d:c7:f1:3c:
17:53:5e:03:aa:37:4d:85:93:98:ea:86:5f:00:76:
d5:38:fd:5f:42:84:45:8f:89:0b:e4:e7:68:e0:bd:
b6:df:0e:b7:05:cf:7a:f7:e2:a9:f0:e4:15:9e:54:
ac:b7:0e:e7:5b:a6:c5:da:8b:8a:c3:b6:de:54:6e:
96:07:5c:4d:f2:5c:b6:96:20:bb:67:a2:df:67:d7:
cd:35:b2:29:4c:78:6f:3f:e6:43:e6:c9:c9:b4:b4:
d7:02:1a:87:c9:d9:39:fe:c6:41:bd:47:85:3e:0f:
82:1e:aa:d3:d6:d9:af:77:75:a0:09:47:04:7f:93:
83:cb:18:79:80:7b:bc:04:a1:79:b0:98:6b:2a:a8:
c4:36:82:1d:25:ab:9b:26:bd:10:e8:20:9a:cd:56:
a4:b6:7e:cf:41:4d:a4:73:20:9a:8d:14:1e:e7:17:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:F3:E7:01:03:C5:9D:A0:1E:99:0F:5D:2A:91:84:59:15:BB:18
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y-Hz5wEDxZ2gHpkPXSqRhFkVuxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d1:98:87:b8:24:93:68:73:81:15:12:93:25:e7:de:81:13:
df:c5:b5:3f:b5:87:87:84:d0:4d:75:60:c0:1c:df:0b:35:1a:
8d:67:3f:cc:fc:75:25:81:79:e0:24:c0:06:e0:8e:2f:84:b0:
de:4d:2e:78:7a:73:c4:fa:5e:6e:86:88:d0:41:04:1b:c7:df:
81:ca:38:c1:af:76:3a:06:16:13:cb:60:dc:a1:3b:8e:39:fd:
1b:43:c4:aa:fb:fb:4e:13:89:02:1d:64:61:b6:55:dd:28:26:
86:52:34:c4:85:2b:ae:da:5a:10:dd:6c:ba:69:cd:e5:e2:b1:
0f:17:17:67:9e:72:e0:8b:39:72:af:9f:c0:7d:62:8d:ca:e3:
a4:32:2b:ed:88:e0:d3:08:e7:af:c8:bd:b0:d3:2a:26:5b:17:
92:ca:81:12:24:a2:9b:31:7b:7c:e4:5d:04:dd:ac:1f:6f:94:
87:a4:ce:15:40:20:24:14:6d:8b:c3:de:0f:00:67:22:71:66:
51:a1:9f:1e:6d:ac:36:c5:2a:e5:36:96:a2:48:8e:c3:de:1a:
a8:5b:3e:62:d7:03:28:e5:51:76:7e:62:52:35:2a:61:38:c1:
19:8a:05:c9:44:8e:cd:89:c8:37:3f:f5:88:66:88:ec:de:58:
78:a3:82:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEQmYfyA44lSV1jFTlnXEssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjYxMDA2MDk0NDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2UxZjNlNzAxMDNjNTlkYTAxZTk5MGY1ZDJhOTE4NDU5MTViYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFqvTzWwF/CO82a7UACVpnoFF8Yq
u/Ax9Y+N5Zbj5mP91qAX2MU5UNdjxZIiGmPndd93c5sO84U7Eo+mgijI3fSlXJ2Q
a0E0GJ0jQJVeezKfR1GO6n3H8TwXU14DqjdNhZOY6oZfAHbVOP1fQoRFj4kL5Odo
4L223w63Bc969+Kp8OQVnlSstw7nW6bF2ouKw7beVG6WB1xN8ly2liC7Z6LfZ9fN
NbIpTHhvP+ZD5snJtLTXAhqHydk5/sZBvUeFPg+CHqrT1tmvd3WgCUcEf5ODyxh5
gHu8BKF5sJhrKqjENoIdJaubJr0Q6CCazVaktn7PQU2kcyCajRQe5xePBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPh8+cBA8WdoB6ZD10qkYRZFbsYMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvWS1IejV3RUR4WjJnSHBrUFhTcVJoRmtWdXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9eMA0G
CSqGSIb3DQEBCwUAA4IBAQB80ZiHuCSTaHOBFRKTJefegRPfxbU/tYeHhNBNdWDA
HN8LNRqNZz/M/HUlgXngJMAG4I4vhLDeTS54enPE+l5uhojQQQQbx9+ByjjBr3Y6
BhYTy2DcoTuOOf0bQ8Sq+/tOE4kCHWRhtlXdKCaGUjTEhSuu2loQ3Wy6ac3l4rEP
FxdnnnLgizlyr5/AfWKNyuOkMivtiODTCOevyL2w0yomWxeSyoESJKKbMXt85F0E
3awfb5SHpM4VQCAkFG2Lw94PAGcicWZRoZ8ebaw2xSrlNpaiSI7D3hqoWz5i1wMo
5VF2fmJSNSphOMEZigXJRI7Nicg3P/WIZojs3lh4o4LH
-----END CERTIFICATE-----
Generated at Wed Oct 21 18:54:54 2026 by rpki-client