Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-yl3MI5CvtG2YUYFt9hI6tI7tmQ.roa
File: 1-yl3MI5CvtG2YUYFt9hI6tI7tmQ.roa (raw, json)
Hash identifier: 8glwlSFSJLr9+PY8aWne/6Xu38XqmFBfSqk8s0f5bGg=
Subject key identifier: FB:29:77:30:8E:42:BE:D1:B6:61:46:05:B7:D8:48:EA:D2:3B:B6:64
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019F04517ACAB513D7B54E97A798AE3958FC
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-yl3MI5CvtG2YUYFt9hI6tI7tmQ.roa
Signing time: Fri 26 Jun 2026 14:24:36 +0000
ROA not before: Fri 26 Jun 2026 14:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201153
IP address blocks: 93.177.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:51:7a:ca:b5:13:d7:b5:4e:97:a7:98:ae:39:58:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 26 14:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb2977308e42bed1b6614605b7d848ead23bb664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:56:62:cc:44:88:a9:92:8b:a4:1f:ae:9c:
fb:07:62:f1:35:13:1f:b7:72:0f:7c:e3:a2:ce:18:
d2:2b:ef:f4:fb:3f:0b:b2:9f:6a:d7:1f:3b:d7:dc:
d0:d1:2c:35:4f:d4:06:03:5e:16:23:ab:f2:4c:51:
3a:98:ac:a5:ca:0c:11:c4:dc:e2:e9:ed:d7:0d:c4:
d1:ed:1c:ca:90:84:37:e8:23:39:1f:52:78:bf:21:
2f:24:29:47:e4:16:12:29:d3:7b:32:cc:ba:73:c6:
de:ba:eb:bb:b3:3d:ea:6a:a9:eb:b3:e5:22:a2:92:
8e:55:17:95:67:ae:4c:3a:59:11:6f:72:5c:9e:59:
95:43:6d:43:02:d9:f1:39:67:8b:ba:24:2c:39:ad:
74:06:05:cf:b8:d4:19:8e:14:25:4f:a8:22:6b:9e:
2a:56:0d:2d:c1:7b:db:a1:fb:cc:77:7f:1e:77:ba:
0e:cd:42:7b:58:c1:21:09:25:84:36:43:86:ba:52:
24:9f:86:f2:89:43:24:df:6f:6b:73:9f:96:9d:5f:
3e:9e:5d:2d:63:a4:bf:59:cb:3f:77:75:65:a7:e1:
7f:91:81:50:b1:b8:7f:54:4b:08:27:77:93:8b:9a:
dd:ed:2c:09:8a:73:33:3c:7a:64:cc:ad:f0:6c:f1:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:77:30:8E:42:BE:D1:B6:61:46:05:B7:D8:48:EA:D2:3B:B6:64
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-yl3MI5CvtG2YUYFt9hI6tI7tmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e2:26:2e:b2:63:c2:36:eb:6c:96:fb:82:7b:9e:df:6b:66:
d3:7f:47:55:ab:ff:01:b6:db:d6:2e:05:8a:84:e9:88:24:51:
3b:d1:02:48:57:85:67:5a:79:4f:57:05:57:15:17:59:67:4b:
7b:7d:16:08:bc:e1:60:5d:28:c3:79:5d:71:e9:f4:83:cc:c3:
9d:e8:96:c4:00:40:2f:df:b6:93:80:aa:49:f2:04:59:69:32:
4e:3e:7c:0c:8d:b9:8f:20:ae:cf:96:54:a9:06:3b:78:cd:5a:
08:d4:24:f6:4a:16:c4:00:29:94:d1:f2:9a:66:9d:9b:b9:a1:
70:cb:66:06:6a:b0:5d:21:aa:96:36:3a:de:9a:98:e3:3c:67:
bf:f4:de:93:56:79:8d:e9:fa:d1:1d:15:bc:fe:84:48:ff:e5:
54:90:ec:31:3b:ad:d0:75:7c:fc:91:0e:55:5f:ce:61:f4:2d:
14:18:b4:2f:14:1c:80:fc:4e:27:e9:b0:bc:aa:92:65:b8:e5:
67:45:f9:aa:a1:99:38:c2:bb:a0:ba:93:a8:ad:1f:e3:49:fe:
58:0e:5f:81:16:f5:35:55:ae:14:29:a6:64:8c:b4:5b:17:fc:
ed:42:84:55:63:54:1f:f0:6c:8c:ac:f2:24:c1:ec:a9:bc:96:
cc:f3:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 01:16:27 2026 by rpki-client