Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/lYHYX5psOxKD68wkCQ91Mu2FzMM.roa
File: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (raw, json)
Hash identifier: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=
Subject key identifier: 95:81:D8:5F:9A:6C:3B:12:83:EB:CC:24:09:0F:75:32:ED:85:CC:C3
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019DB4EC8D8339AD2423D653A35094D0A7A5
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/lYHYX5psOxKD68wkCQ91Mu2FzMM.roa
Signing time: Wed 22 Apr 2026 11:21:34 +0000
ROA not before: Wed 22 Apr 2026 11:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61248
IP address blocks: 193.93.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:ec:8d:83:39:ad:24:23:d6:53:a3:50:94:d0:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Apr 22 11:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9581d85f9a6c3b1283ebcc24090f7532ed85ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:89:cd:4a:33:92:ad:c5:f0:c5:60:b6:c2:
a1:36:b4:bc:3f:97:68:85:98:8c:12:1f:d6:ab:79:
f2:1d:af:c3:f4:c9:98:09:83:63:7a:60:50:51:c4:
8a:66:2d:f8:be:06:31:7e:71:bb:97:f4:8d:cc:05:
61:1c:e8:e7:9f:93:3d:96:f1:64:b0:2f:2f:0a:77:
f3:a7:26:1d:75:9c:a4:91:5a:ad:a6:f6:1f:75:e7:
a7:6a:60:9c:42:37:5e:d1:61:56:c5:45:dd:49:74:
64:ef:f5:b3:4f:de:80:83:51:3b:fc:98:29:6e:40:
0e:9e:84:d1:10:a1:a3:f8:26:de:0f:e9:21:dd:e7:
83:47:9a:e9:23:53:ab:f6:18:eb:4b:7f:82:81:67:
2b:75:1b:33:c0:78:df:a1:3f:7e:e6:64:c9:50:7c:
55:97:20:29:96:78:fd:37:28:46:1d:2d:83:e8:d8:
cb:f2:8d:62:bf:85:19:c1:0d:f9:ae:a3:29:5e:d3:
93:08:d2:51:0f:9d:94:d6:cd:f6:ac:fe:91:ff:d5:
b7:7c:b3:42:05:54:d6:c2:1a:4b:5f:af:37:87:9f:
18:7a:bc:d1:6c:cd:ae:c3:9d:65:8e:fe:70:60:ac:
e5:1e:93:38:3c:83:56:67:b2:4d:de:89:2d:20:1f:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:D8:5F:9A:6C:3B:12:83:EB:CC:24:09:0F:75:32:ED:85:CC:C3
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/lYHYX5psOxKD68wkCQ91Mu2FzMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:83:1e:3b:18:e2:41:57:6f:b0:a4:87:9f:26:0e:87:f9:96:
8a:12:b2:cb:a3:c9:41:b8:8a:a0:d7:e4:2b:7c:9c:6f:4d:90:
77:01:32:fc:d4:40:bf:6a:01:47:12:22:b1:7f:ba:71:fc:d1:
6c:ac:a3:74:4a:fd:b3:e0:1e:fd:42:54:cf:29:0a:73:88:2f:
ba:7f:66:31:78:1c:6b:04:a8:32:7e:ed:4a:a5:ea:15:b5:02:
32:75:70:3c:e1:c1:1a:00:a6:3b:69:f1:d1:2e:ba:8a:aa:15:
04:35:95:04:b9:97:dc:d6:4a:79:2c:bd:83:17:c1:c2:30:dd:
c9:3f:52:5f:01:5f:ac:ff:ff:c5:c8:38:38:61:6f:4c:91:3f:
dd:d8:b3:cc:5c:c7:37:07:6e:6f:85:17:d7:b6:13:08:eb:6c:
e1:ba:06:5f:dc:45:8b:c1:8f:c1:f7:b7:1c:8f:88:49:fb:aa:
ee:73:f0:22:a0:bb:86:6e:69:da:8b:c8:49:47:b9:e9:39:91:
15:cb:59:2d:a0:1d:2c:ec:53:b7:15:b0:21:cd:eb:f7:73:44:
7e:9e:25:a9:fc:e3:d3:83:95:db:f4:15:0e:fa:75:04:99:ad:
6c:96:50:59:93:63:57:42:83:bd:b5:7e:1f:fe:46:65:6e:a1:
8d:14:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:00:05 2026 by rpki-client