Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/lpQgMlnoyI0Vh3oZuOIk2ZQ2aM0.roa
File: lpQgMlnoyI0Vh3oZuOIk2ZQ2aM0.roa (raw, json)
Hash identifier: /uUbjzJAeKwfTfm6MMksuYG58Mz40JTo10UqVf/YhRY=
Subject key identifier: 96:94:20:32:59:E8:C8:8D:15:87:7A:19:B8:E2:24:D9:94:36:68:CD
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019DDE2ECB2DD7A3AD068CB64CA4DE3314C7
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/lpQgMlnoyI0Vh3oZuOIk2ZQ2aM0.roa
Signing time: Thu 30 Apr 2026 11:38:21 +0000
ROA not before: Thu 30 Apr 2026 11:38:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 185.255.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:2e:cb:2d:d7:a3:ad:06:8c:b6:4c:a4:de:33:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Apr 30 11:38:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9694203259e8c88d15877a19b8e224d9943668cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:8a:c2:5b:7f:75:2f:e7:d8:c0:99:61:29:
d0:18:33:0d:7a:3e:7a:9b:bb:83:3d:45:95:f1:1d:
1d:2e:fe:9b:ea:b0:ff:9c:f4:31:87:27:ee:87:08:
70:58:e0:f0:b3:77:e3:70:ee:be:38:3e:80:09:7a:
57:9f:db:37:9c:65:6c:e5:03:70:64:68:d8:3e:5f:
97:93:35:fe:99:a2:aa:ef:ab:0d:ca:40:9a:3c:f0:
53:0c:36:f9:2d:09:21:ad:c5:ec:d5:cb:5b:47:07:
c3:59:d4:b1:75:b3:5b:1c:9e:3c:94:7c:20:79:4b:
b2:7f:6c:da:d1:69:53:6d:7c:c6:9a:51:4e:b9:20:
20:5a:2a:f4:a7:ec:b4:59:7e:29:6f:95:2f:30:4f:
b8:df:a0:9e:e2:a6:71:f2:4c:15:f3:c2:9d:72:9e:
71:bd:ef:a0:c9:f8:29:2b:42:bc:bc:48:24:64:e6:
86:ae:6e:be:0e:bb:c6:de:2a:40:17:e5:96:ec:18:
d0:4f:0c:ba:06:ea:b3:4e:81:66:82:d7:93:30:cb:
8b:cf:0c:0e:43:dc:b9:89:d7:f0:82:b8:84:d9:bf:
20:58:f2:6f:10:31:4a:4e:5a:8f:01:a7:07:3b:30:
09:92:91:78:e4:60:d0:c1:a9:31:ae:38:17:72:6f:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:20:32:59:E8:C8:8D:15:87:7A:19:B8:E2:24:D9:94:36:68:CD
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/lpQgMlnoyI0Vh3oZuOIk2ZQ2aM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b1:2b:8f:ba:5f:87:e8:55:ea:89:55:81:0d:6a:ca:11:63:
25:8f:56:b0:6a:22:2f:04:70:e3:8b:a6:e4:70:4a:c8:5c:0a:
27:28:f8:bb:b9:47:e4:23:5e:2b:f7:f8:28:aa:da:d3:85:13:
c9:2b:16:26:e9:d5:da:f2:a8:70:ae:ee:8f:be:09:f9:9d:9a:
5f:e3:ac:1b:98:e1:4b:ae:53:7f:d4:45:a3:3f:52:68:36:49:
d6:64:8e:51:81:56:89:3a:a8:bf:c2:e2:90:35:88:62:e5:c2:
6a:06:18:43:e6:b5:fc:6f:0a:a8:67:7f:89:be:81:28:73:73:
f1:40:c3:68:60:9d:5f:8e:03:91:57:3d:36:50:0b:51:55:9e:
2c:b5:ad:12:a4:5a:f1:62:de:ac:33:3d:25:a8:3d:3e:00:d7:
b6:28:8a:0e:ae:12:79:dc:ed:b1:48:09:52:f9:52:76:fe:95:
10:41:54:51:13:2d:f3:94:37:f4:f8:af:1b:4b:f8:c9:cc:fb:
c0:cc:b0:e3:ab:81:85:93:99:0a:8f:79:8e:28:cb:1d:f4:80:
4a:92:8e:1e:30:80:b4:03:4c:73:4f:8a:8c:57:29:4e:8c:84:
29:d2:ee:73:4c:5d:bf:5b:3b:e2:c2:d9:b4:87:14:35:52:97:
15:11:99:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3eLsst16OtBoy2TKTeMxTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz
YjI0YjYwHhcNMjYwNDMwMTEzODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Njk0MjAzMjU5ZThjODhkMTU4NzdhMTliOGUyMjRkOTk0MzY2OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UKKwlt/dS/n2MCZYSnQGDMNej56
m7uDPUWV8R0dLv6b6rD/nPQxhyfuhwhwWODws3fjcO6+OD6ACXpXn9s3nGVs5QNw
ZGjYPl+XkzX+maKq76sNykCaPPBTDDb5LQkhrcXs1ctbRwfDWdSxdbNbHJ48lHwg
eUuyf2za0WlTbXzGmlFOuSAgWir0p+y0WX4pb5UvME+436Ce4qZx8kwV88Kdcp5x
ve+gyfgpK0K8vEgkZOaGrm6+DrvG3ipAF+WW7BjQTwy6BuqzToFmgteTMMuLzwwO
Q9y5idfwgriE2b8gWPJvEDFKTlqPAacHOzAJkpF45GDQwakxrjgXcm+luQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJaUIDJZ6MiNFYd6GbjiJNmUNmjNMB8GA1UdIwQY
MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt
ZGZkZGIxMzY0MzYzLzEvbHBRZ01sbm95STBWaDNvWnVPSWsyWlEyYU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz
LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf84MA0G
CSqGSIb3DQEBCwUAA4IBAQAjsSuPul+H6FXqiVWBDWrKEWMlj1awaiIvBHDji6bk
cErIXAonKPi7uUfkI14r9/goqtrThRPJKxYm6dXa8qhwru6Pvgn5nZpf46wbmOFL
rlN/1EWjP1JoNknWZI5RgVaJOqi/wuKQNYhi5cJqBhhD5rX8bwqoZ3+JvoEoc3Px
QMNoYJ1fjgORVz02UAtRVZ4sta0SpFrxYt6sMz0lqD0+ANe2KIoOrhJ53O2xSAlS
+VJ2/pUQQVRREy3zlDf0+K8bS/jJzPvAzLDjq4GFk5kKj3mOKMsd9IBKko4eMIC0
A0xzT4qMVylOjIQp0u5zTF2/Wzviwtm0hxQ1UpcVEZn4
-----END CERTIFICATE-----
Generated at Thu May 7 05:38:54 2026 by rpki-client