Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lyI9Mh7-H0i_IQKN85J4ac8P6wU.roa
File: lyI9Mh7-H0i_IQKN85J4ac8P6wU.roa (raw, json)
Hash identifier: KMfHXxOKr+7D9cS20NU+9qZaf5X1J5C/klgBUEwKvQY=
Subject key identifier: 97:22:3D:32:1E:FE:1F:48:BF:21:02:8D:F3:92:78:69:CF:0F:EB:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A03E3B9D5B5A7A647D37AEDECA8F0D3B4F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lyI9Mh7-H0i_IQKN85J4ac8P6wU.roa
Signing time: Wed 26 Aug 2026 13:21:29 +0000
ROA not before: Wed 26 Aug 2026 13:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218963
IP address blocks: 2a0e:97c0:d90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:3b:9d:5b:5a:7a:64:7d:37:ae:de:ca:8f:0d:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 26 13:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97223d321efe1f48bf21028df3927869cf0feb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:0f:3d:08:b3:7a:7e:e1:79:21:a3:59:51:
f7:05:58:3c:aa:5e:c5:c2:03:f5:4a:f8:f1:9d:25:
12:b0:6d:3f:af:e4:7d:36:79:41:1d:75:6d:9d:17:
6d:18:ff:5a:53:75:f2:61:5b:d5:27:5e:a0:b5:17:
e8:45:35:1e:de:85:e8:61:33:48:42:1f:03:a6:51:
e1:98:ed:e4:a0:8e:09:6f:c3:fc:1c:12:e3:be:e1:
30:f3:b8:34:28:08:dc:b1:3c:fc:96:a9:dc:63:31:
0d:32:f9:ac:09:eb:42:66:16:7b:32:e6:d0:96:19:
f4:35:51:f1:b4:93:27:da:55:45:39:6f:c0:fa:80:
55:0a:ae:20:fb:9c:af:58:df:93:f3:5b:7f:e4:30:
9a:08:b1:85:1f:ff:ee:51:2c:f6:b8:57:4d:57:28:
24:bd:2f:cc:4b:92:d4:12:20:ec:71:40:c1:ea:d3:
ba:5e:0a:1b:f1:b0:f2:f0:4e:21:3a:5e:ac:f3:3f:
bd:68:17:bc:2e:d0:ae:b6:a6:6c:1f:ac:bc:6b:80:
02:6a:83:57:f6:4d:c0:de:48:15:1f:f6:3d:a6:7b:
37:47:cd:de:7a:09:85:fd:d7:36:44:c6:60:98:e9:
e6:79:09:7b:cc:77:a9:cc:f9:b8:13:46:08:16:5a:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:3D:32:1E:FE:1F:48:BF:21:02:8D:F3:92:78:69:CF:0F:EB:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lyI9Mh7-H0i_IQKN85J4ac8P6wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d90::/44
Signature Algorithm: sha256WithRSAEncryption
b2:b5:e1:c8:e9:0b:98:28:7d:0a:5e:63:85:36:23:ef:1a:28:
8f:8d:b6:33:54:64:00:71:f3:19:c8:82:5d:b7:1d:f2:73:b1:
8b:8e:5f:a9:15:d5:43:4f:6b:59:2b:b4:f2:ac:d8:8a:ae:5a:
09:f6:6b:e1:44:37:86:c8:ea:20:e1:e4:7f:ca:47:50:ff:65:
9e:e7:56:75:c2:de:f9:b3:2f:7e:84:5e:ec:0a:79:75:8a:a4:
9c:f1:ca:7e:ea:12:93:5e:7b:13:a2:5e:fa:76:46:ba:b7:47:
f0:dd:0b:0d:56:e4:76:5a:12:6f:43:0b:36:ef:4a:2b:24:af:
ad:1b:93:f8:1b:7b:1b:1c:73:0a:5b:25:0b:2a:e0:59:91:b6:
0d:b4:c3:1e:9c:ce:e0:49:f4:f6:03:59:6f:7d:55:f4:bc:70:
7b:f5:22:2f:16:82:3a:b9:08:80:cb:aa:67:7e:19:63:8f:d0:
b4:22:4a:7b:48:23:f8:48:cd:9d:6e:de:6f:ba:94:38:f1:6b:
6e:88:40:dd:38:01:91:7f:5c:5a:81:a6:37:ba:03:31:13:b4:
40:7a:77:7c:43:f1:88:c6:37:d5:a2:ba:5b:c3:81:0a:f8:3d:
7a:7c:58:79:12:7c:5d:17:73:9d:f4:1a:c6:8d:40:a3:fe:55:
fa:8c:dd:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaA+O51bWnpkfTeu3sqPDTtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwODI2MTMyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzIyM2QzMjFlZmUxZjQ4YmYyMTAyOGRmMzkyNzg2OWNmMGZlYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06QPPQizen7heSGjWVH3BVg8ql7F
wgP1SvjxnSUSsG0/r+R9NnlBHXVtnRdtGP9aU3XyYVvVJ16gtRfoRTUe3oXoYTNI
Qh8DplHhmO3koI4Jb8P8HBLjvuEw87g0KAjcsTz8lqncYzENMvmsCetCZhZ7MubQ
lhn0NVHxtJMn2lVFOW/A+oBVCq4g+5yvWN+T81t/5DCaCLGFH//uUSz2uFdNVygk
vS/MS5LUEiDscUDB6tO6Xgob8bDy8E4hOl6s8z+9aBe8LtCutqZsH6y8a4ACaoNX
9k3A3kgVH/Y9pns3R83eegmF/dc2RMZgmOnmeQl7zHepzPm4E0YIFlrQPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJciPTIe/h9IvyECjfOSeGnPD+sFMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbHlJOU1oNy1IMGlfSVFLTjg1SjRhYzhQNndVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA2Q
MA0GCSqGSIb3DQEBCwUAA4IBAQCyteHI6QuYKH0KXmOFNiPvGiiPjbYzVGQAcfMZ
yIJdtx3yc7GLjl+pFdVDT2tZK7TyrNiKrloJ9mvhRDeGyOog4eR/ykdQ/2We51Z1
wt75sy9+hF7sCnl1iqSc8cp+6hKTXnsTol76dka6t0fw3QsNVuR2WhJvQws270or
JK+tG5P4G3sbHHMKWyULKuBZkbYNtMMenM7gSfT2A1lvfVX0vHB79SIvFoI6uQiA
y6pnfhljj9C0Ikp7SCP4SM2dbt5vupQ48WtuiEDdOAGRf1xagaY3ugMxE7RAend8
Q/GIxjfVorpbw4EK+D16fFh5EnxdF3Od9BrGjUCj/lX6jN3I
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:49 2026 by rpki-client