Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/8Y0frUuyylGYF0JAkx3HfLpxO3Y.roa
File: 8Y0frUuyylGYF0JAkx3HfLpxO3Y.roa (raw, json)
Hash identifier: fOiapGzEdBHB85kSUiPme4t8/6GQIzy9nkoFJ7Ffyug=
Subject key identifier: F1:8D:1F:AD:4B:B2:CA:51:98:17:42:40:93:1D:C7:7C:BA:71:3B:76
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A0E27D419EA504F0C6DD31C87BFE9E560B
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/8Y0frUuyylGYF0JAkx3HfLpxO3Y.roa
Signing time: Sun 27 Sep 2026 10:50:54 +0000
ROA not before: Sun 27 Sep 2026 10:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209783
IP address blocks: 91.108.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:7d:41:9e:a5:04:f0:c6:dd:31:c8:7b:fe:9e:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Sep 27 10:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f18d1fad4bb2ca5198174240931dc77cba713b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:da:28:16:36:da:9f:c0:ed:c6:ed:5c:54:
96:ce:62:ef:ca:66:ae:5a:70:d1:a7:c7:8d:e6:40:
69:0b:db:15:f9:d6:02:d0:0d:b2:5d:33:e8:d7:89:
37:2f:29:66:f5:8a:f5:13:4e:de:0f:01:24:65:ce:
f0:02:f3:c2:b5:e3:46:9c:01:0d:ae:02:c1:70:9b:
17:a4:bf:6a:6d:bb:95:97:1f:f8:96:b3:19:98:34:
e3:8d:c9:1a:e1:fa:a4:da:d6:32:0f:42:a9:d2:35:
3e:3b:90:e1:86:c7:92:a5:6e:a1:35:ea:1e:3d:c6:
25:d6:3d:73:fc:e2:50:0c:f3:f1:53:0a:37:f2:5e:
18:b8:90:27:6f:56:a2:3e:66:65:99:a5:9e:68:13:
12:57:0b:ab:cc:45:66:a4:50:02:07:7e:7e:1a:06:
3f:03:0a:ba:c0:cf:4c:9a:93:13:64:24:48:74:d3:
34:f1:e7:27:d9:e6:50:52:c7:84:95:5b:c7:01:d7:
b1:0c:5f:36:06:99:10:81:34:9e:8e:16:80:6c:b4:
4d:9f:81:9c:22:fc:32:6b:f8:54:03:1c:23:51:82:
7e:61:6d:26:ec:54:17:26:2a:30:c5:47:be:a4:8f:
d7:71:1b:5b:25:1b:80:dd:e2:aa:d5:b7:9a:e5:8c:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:1F:AD:4B:B2:CA:51:98:17:42:40:93:1D:C7:7C:BA:71:3B:76
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/8Y0frUuyylGYF0JAkx3HfLpxO3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.137.0/24
Signature Algorithm: sha256WithRSAEncryption
56:13:30:1f:09:bc:5d:96:7e:a1:a1:41:55:d4:56:43:d2:a2:
e8:21:74:1b:12:b2:25:29:8e:aa:1d:6e:07:7d:52:35:bf:65:
73:46:60:28:00:9e:10:d0:50:bb:71:90:43:16:40:0a:23:88:
63:c6:c6:37:00:fa:59:5d:3b:08:61:27:36:37:d1:0d:11:d8:
0a:e5:fb:8c:22:0c:fa:06:61:4e:70:12:fa:b2:82:5e:e8:c5:
69:d0:58:d0:b4:14:7d:8e:9c:1c:0e:7d:8e:97:91:bc:00:e4:
30:b8:f0:3d:3f:e1:c4:72:5e:b3:d3:c4:21:b9:ea:a2:0a:2d:
5e:73:73:6c:67:ab:32:1c:36:a0:c6:68:f5:47:1a:f4:bf:fa:
b7:e8:21:ee:41:b2:b2:c7:cd:ff:91:87:18:c2:a2:73:92:39:
f1:2a:ab:43:b2:4d:81:ba:96:f5:12:76:c3:71:f4:37:4b:f0:
ee:8a:10:57:20:52:3a:52:64:bb:f4:78:3b:0c:bf:ed:c3:de:
69:95:03:06:57:2c:6b:83:65:23:52:32:f5:69:f4:7c:7c:9e:
29:e8:c9:21:54:28:2e:4f:e6:04:11:03:40:27:05:31:4f:20:
0e:04:91:73:ff:0f:d7:f1:5c:8f:aa:01:c2:02:89:ef:ad:99:
a0:5d:03:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDifUGepQTwxt0xyHv+nlYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Y2JjZjJlOTU3Y2E4ZDk0MjQ3MmE3YjAwNDQyODViMjZk
YjZiMjIwHhcNMjYwOTI3MTA1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMThkMWZhZDRiYjJjYTUxOTgxNzQyNDA5MzFkYzc3Y2JhNzEzYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue3aKBY22p/A7cbtXFSWzmLvymau
WnDRp8eN5kBpC9sV+dYC0A2yXTPo14k3Lylm9Yr1E07eDwEkZc7wAvPCteNGnAEN
rgLBcJsXpL9qbbuVlx/4lrMZmDTjjcka4fqk2tYyD0Kp0jU+O5DhhseSpW6hNeoe
PcYl1j1z/OJQDPPxUwo38l4YuJAnb1aiPmZlmaWeaBMSVwurzEVmpFACB35+GgY/
Awq6wM9MmpMTZCRIdNM08ecn2eZQUseElVvHAdexDF82BpkQgTSejhaAbLRNn4Gc
Ivwya/hUAxwjUYJ+YW0m7FQXJiowxUe+pI/XcRtbJRuA3eKq1bea5YyV1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGNH61LsspRmBdCQJMdx3y6cTt2MB8GA1UdIwQY
MBaAFJbLzy6VfKjZQkcqewBEKFsm22siMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEt
MTNiNDMxMzQyYWI4LzEvOFkwZnJVdXl5bEdZRjBKQWt4M0hmTHB4TzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEtMTNiNDMxMzQyYWI4
LzEvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2yJMA0G
CSqGSIb3DQEBCwUAA4IBAQBWEzAfCbxdln6hoUFV1FZD0qLoIXQbErIlKY6qHW4H
fVI1v2VzRmAoAJ4Q0FC7cZBDFkAKI4hjxsY3APpZXTsIYSc2N9ENEdgK5fuMIgz6
BmFOcBL6soJe6MVp0FjQtBR9jpwcDn2Ol5G8AOQwuPA9P+HEcl6z08QhueqiCi1e
c3NsZ6syHDagxmj1Rxr0v/q36CHuQbKyx83/kYcYwqJzkjnxKqtDsk2Bupb1EnbD
cfQ3S/DuihBXIFI6UmS79Hg7DL/tw95plQMGVyxrg2UjUjL1afR8fJ4p6MkhVCgu
T+YEEQNAJwUxTyAOBJFz/w/X8VyPqgHCAonvrZmgXQOU
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:55 2026 by rpki-client