Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/lryR68l5TnLXKwmhaYf1dB3R6o4.roa
File: lryR68l5TnLXKwmhaYf1dB3R6o4.roa (raw, json)
Hash identifier: eCU03eXSIu/ci/54K3qCEE9em5KaQccDkpAIfjk+/iU=
Subject key identifier: 96:BC:91:EB:C9:79:4E:72:D7:2B:09:A1:69:87:F5:74:1D:D1:EA:8E
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01A1691CBEFDDA61CACA55D5C7C737B8EFA5
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/lryR68l5TnLXKwmhaYf1dB3R6o4.roa
Signing time: Fri 23 Oct 2026 14:14:13 +0000
ROA not before: Fri 23 Oct 2026 14:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:1c:be:fd:da:61:ca:ca:55:d5:c7:c7:37:b8:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Oct 23 14:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96bc91ebc9794e72d72b09a16987f5741dd1ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:b9:b4:1a:7d:3f:5c:82:c4:1a:8c:37:72:
cf:ea:4c:7b:87:15:a0:b5:91:5c:8b:ed:6c:54:6c:
41:96:50:ff:d0:3d:de:2c:e5:a2:72:cd:79:2a:75:
f0:5d:a2:67:63:4c:1f:74:e3:da:d9:d3:ae:9d:1e:
f1:2c:9d:1a:ca:d0:3c:15:2b:67:4d:ae:e7:1d:e2:
19:73:9c:30:44:57:92:dd:da:06:90:eb:57:8a:ca:
50:ca:a0:a6:38:65:74:9c:b1:34:39:f2:4e:65:9f:
64:72:fb:b9:3f:45:34:20:b2:96:f9:d9:77:c1:25:
49:c5:da:c7:b6:43:7d:46:51:d2:73:29:fe:e6:41:
cc:49:3b:00:8d:0f:af:45:1f:8d:fd:2b:3a:63:46:
4c:23:f9:6f:ae:28:d3:d6:f4:03:7e:e5:5f:65:02:
47:37:50:f8:c7:48:6f:16:2f:3c:5a:5e:d2:5e:26:
e0:b2:d8:f2:87:f7:4c:e0:82:1c:5a:54:b4:c2:4a:
c8:7f:c0:76:39:fb:0d:16:3a:f0:03:28:8d:48:9b:
1b:76:c4:6e:e8:0b:a7:bd:36:5f:0d:44:87:6c:db:
ab:3f:6e:09:86:49:a9:38:33:4d:97:aa:cd:50:70:
23:d9:88:5c:e3:41:be:db:e0:58:79:ee:28:fb:90:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:91:EB:C9:79:4E:72:D7:2B:09:A1:69:87:F5:74:1D:D1:EA:8E
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/lryR68l5TnLXKwmhaYf1dB3R6o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c1:65:d4:06:5d:56:b9:87:6d:a7:ba:02:e1:41:c8:2a:bd:
8c:04:97:4c:6d:8f:69:a9:a6:53:b2:92:ef:b8:e7:b2:15:ad:
ad:b0:bb:09:fa:a4:29:ff:d0:e8:9a:ed:2a:70:0d:7a:4d:b5:
98:96:e9:6a:ab:84:f7:f5:91:59:0c:23:26:52:32:42:ce:ff:
5d:8d:93:9f:78:0e:c2:30:11:5e:6d:e3:47:2d:09:16:17:8d:
ea:ce:a3:d1:5b:e2:43:54:34:c5:db:83:a4:d4:ed:b0:94:47:
66:15:02:b9:ad:16:ef:3b:07:9d:9f:32:ef:ec:f1:7a:23:37:
85:1c:5d:dc:9e:6a:a9:ea:b2:a1:25:1c:2a:d1:6f:13:11:8f:
54:a2:65:74:7a:5c:cf:85:1e:6e:b1:95:50:66:9a:3c:59:95:
b8:27:79:01:9e:21:86:6a:82:d8:d3:c9:26:72:af:12:0a:af:
2c:18:ad:d6:9c:d5:c6:56:86:ea:8d:a1:c6:74:28:91:7e:74:
f3:2e:ae:29:aa:38:1d:38:b2:63:bc:7f:72:75:b2:e4:50:ed:
38:16:83:17:fa:1c:5d:d9:bd:26:98:2f:f8:c4:ad:e3:43:96:
7a:d6:36:2c:c6:fc:e0:c9:e6:6c:8e:76:60:f7:22:d6:52:9e:
1d:e4:22:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFpHL792mHKylXVx8c3uO+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjYxMDIzMTQxNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmJjOTFlYmM5Nzk0ZTcyZDcyYjA5YTE2OTg3ZjU3NDFkZDFlYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc25tBp9P1yCxBqMN3LP6kx7hxWg
tZFci+1sVGxBllD/0D3eLOWics15KnXwXaJnY0wfdOPa2dOunR7xLJ0aytA8FStn
Ta7nHeIZc5wwRFeS3doGkOtXispQyqCmOGV0nLE0OfJOZZ9kcvu5P0U0ILKW+dl3
wSVJxdrHtkN9RlHScyn+5kHMSTsAjQ+vRR+N/Ss6Y0ZMI/lvrijT1vQDfuVfZQJH
N1D4x0hvFi88Wl7SXibgstjyh/dM4IIcWlS0wkrIf8B2OfsNFjrwAyiNSJsbdsRu
6AunvTZfDUSHbNurP24JhkmpODNNl6rNUHAj2Yhc40G+2+BYee4o+5DvtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJa8kevJeU5y1ysJoWmH9XQd0eqOMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvbHJ5UjY4bDVUbkxYS3dtaGFZZjFkQjNSNm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemlMA0G
CSqGSIb3DQEBCwUAA4IBAQCfwWXUBl1WuYdtp7oC4UHIKr2MBJdMbY9pqaZTspLv
uOeyFa2tsLsJ+qQp/9Domu0qcA16TbWYlulqq4T39ZFZDCMmUjJCzv9djZOfeA7C
MBFebeNHLQkWF43qzqPRW+JDVDTF24Ok1O2wlEdmFQK5rRbvOwednzLv7PF6IzeF
HF3cnmqp6rKhJRwq0W8TEY9UomV0elzPhR5usZVQZpo8WZW4J3kBniGGaoLY08km
cq8SCq8sGK3WnNXGVobqjaHGdCiRfnTzLq4pqjgdOLJjvH9ydbLkUO04FoMX+hxd
2b0mmC/4xK3jQ5Z61jYsxvzgyeZsjnZg9yLWUp4d5CIH
-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:45 2026 by rpki-client