Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/lYl9yxjDF6VxSrgBn4yjaDH5SwY.roa
File: lYl9yxjDF6VxSrgBn4yjaDH5SwY.roa (raw, json)
Hash identifier: fcmZZ7N8sDJSydAsE/hNjCWPStlJ+vYz8kgfdGPI4ew=
Subject key identifier: 95:89:7D:CB:18:C3:17:A5:71:4A:B8:01:9F:8C:A3:68:31:F9:4B:06
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A047B49758C8E0D0B444D38655B69301F4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/lYl9yxjDF6VxSrgBn4yjaDH5SwY.roa
Signing time: Fri 28 Aug 2026 09:30:12 +0000
ROA not before: Fri 28 Aug 2026 09:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 109.66.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:b4:97:58:c8:e0:d0:b4:44:d3:86:55:b6:93:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 28 09:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95897dcb18c317a5714ab8019f8ca36831f94b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:c7:79:55:17:ab:4c:b4:ad:86:ac:e6:8e:
4a:b6:13:ab:2a:92:1c:5c:84:17:05:42:a4:67:b0:
e0:99:c9:4e:c8:db:44:fb:48:38:df:06:db:23:5b:
5d:4f:12:d7:c2:32:a7:b7:d6:76:ff:28:31:f9:54:
93:48:80:65:b2:32:99:72:c2:f8:a7:25:ce:f2:a1:
ce:97:54:f9:2b:57:0f:a5:53:90:ef:69:0a:c1:9a:
e4:5c:c4:36:63:a5:74:29:f9:f2:9f:12:65:97:40:
d9:6f:1b:77:b5:fe:bd:be:09:b7:dc:80:21:9b:c3:
7c:ba:f1:19:ed:0a:5e:56:bb:05:81:7c:08:f9:e7:
47:02:85:4f:48:79:87:83:81:46:c2:83:56:3d:a6:
4b:3e:4a:b8:e2:41:3c:89:59:e3:ca:5e:a7:c5:b4:
ed:46:07:39:b9:c6:29:c6:4a:ae:53:fc:a1:54:9d:
a1:fd:bb:5f:55:0e:70:f5:ba:20:73:9e:48:df:19:
50:19:fb:0c:b7:ba:fa:ab:9c:52:d5:9e:28:f7:d0:
04:00:da:b0:e7:39:cd:d5:ea:94:f4:0b:1c:ca:53:
de:9d:f1:9f:85:16:12:70:66:4f:ba:5d:d8:77:c9:
c7:6e:80:8d:62:86:17:c5:90:6c:b4:37:d4:d8:52:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:7D:CB:18:C3:17:A5:71:4A:B8:01:9F:8C:A3:68:31:F9:4B:06
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/lYl9yxjDF6VxSrgBn4yjaDH5SwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:21:3c:86:aa:c8:4b:5a:4f:81:9e:19:ae:5e:26:0e:3e:43:
ab:43:89:24:99:de:bd:1a:f4:4e:31:f8:5f:fa:6b:52:9e:01:
ba:2a:43:90:af:0d:e1:33:42:4a:da:31:3c:e3:e3:29:71:e4:
fd:00:bb:ef:f2:58:97:3b:b0:95:01:d0:0e:ba:cf:9c:9b:98:
3a:d1:6a:fe:a3:17:27:b9:c3:de:2b:4a:67:19:51:59:3d:6d:
71:8d:eb:b7:25:18:1d:74:54:ae:09:0d:8c:01:40:85:a4:28:
27:7c:4b:17:b0:a5:46:37:7b:f7:b3:3b:64:60:7f:a4:08:d2:
4c:38:54:15:6b:04:94:dd:b6:32:6e:bb:49:99:0a:c0:90:84:
5b:22:fd:1e:07:11:76:d4:10:cd:0a:6a:80:ef:c3:4a:69:14:
ab:fd:1b:11:35:af:2d:33:34:43:95:bc:d8:cc:9c:d6:cf:df:
d7:57:ef:d7:d2:f7:85:92:b7:7e:6b:b8:18:b9:0e:a9:ba:27:
e1:4d:f3:ed:3b:5a:8f:3b:a6:77:af:bf:78:65:60:f5:8d:de:
52:7b:d0:0d:f4:06:47:1a:f5:f3:9a:75:2c:35:e9:9e:03:d6:
2e:a9:c5:8c:af:e6:c0:57:9f:aa:4f:e0:c5:e8:28:47:1b:ff:
a5:b2:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:24 2026 by rpki-client