Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa
File: lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa (raw, json)
Hash identifier: lr8Q0BYtKVvTJjMgHZk4vVtiuhJT4h3L6oT8ft8o5Tw=
Subject key identifier: 97:1F:E6:F2:52:1F:D5:D1:F0:F8:80:1C:60:A2:BF:47:E1:ED:F1:09
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019B7758DF9378D2C299A80FE36A51E6AAFF
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa
Signing time: Thu 01 Jan 2026 02:17:51 +0000
ROA not before: Thu 01 Jan 2026 02:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56827
IP address blocks: 91.227.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:df:93:78:d2:c2:99:a8:0f:e3:6a:51:e6:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Jan 1 02:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=971fe6f2521fd5d1f0f8801c60a2bf47e1edf109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:99:a1:ce:8c:61:22:ae:98:3d:ed:50:64:
f5:13:10:46:51:0c:3e:f5:37:5c:a0:1c:50:6a:80:
5d:65:6f:ae:6b:51:d3:77:15:5d:15:15:c2:b7:18:
c4:55:d5:70:89:4f:d3:4c:96:f6:a2:61:eb:c4:2a:
5a:ec:17:f9:21:2e:2a:d7:93:08:23:71:79:9c:31:
36:1a:5b:1a:54:3b:98:0c:d8:07:d1:10:4f:42:f8:
e5:13:23:05:29:dd:ad:91:26:70:48:80:90:26:e4:
9b:59:2d:c0:50:ec:9a:32:b1:f5:01:60:87:22:cf:
e6:bc:f0:79:79:21:49:7b:f0:ed:7e:f9:81:38:c0:
78:d0:c9:42:06:5b:0d:bb:28:08:80:52:e3:87:66:
c8:7a:5c:92:5e:58:13:c6:a9:f7:b8:05:e8:01:0a:
d5:16:28:3d:4e:83:7b:df:70:a6:68:13:fe:d6:bd:
f3:fc:aa:19:50:40:73:fc:1b:99:96:20:e8:1c:09:
19:ba:6e:b1:70:94:0e:f5:4a:0e:29:0d:a9:f3:e0:
35:23:67:42:ce:df:17:b7:9c:2a:f6:aa:7d:1c:b9:
5f:4c:5d:12:05:6c:53:76:e3:4f:78:70:d0:03:cd:
8b:3a:2c:9c:28:ac:13:63:08:e5:47:66:69:e1:45:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:E6:F2:52:1F:D5:D1:F0:F8:80:1C:60:A2:BF:47:E1:ED:F1:09
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:05:51:ca:e2:b4:47:4e:4c:a1:52:ee:fd:76:f4:49:94:bb:
21:b0:5b:b5:ed:6d:d2:98:9c:6b:0a:ac:b9:a9:76:b0:d9:f5:
68:7e:f6:b0:3e:a7:0d:fe:af:66:f4:53:2d:62:64:c0:d9:b7:
31:b1:e0:cd:e3:6e:63:17:b8:3b:a9:6f:5b:9a:3c:bd:d9:e8:
25:17:fc:8e:c9:47:a1:cd:cb:4d:86:cc:5f:7d:df:93:79:6f:
0a:f7:d9:54:d9:23:3d:e0:43:41:86:9f:ac:66:4e:f6:11:96:
52:22:86:7b:a2:1a:de:b8:0a:f8:91:40:da:4b:c6:0f:4c:08:
d4:cd:de:ce:4c:d6:09:8e:54:5e:ba:b8:20:1e:c2:1a:17:cf:
c1:6b:9a:70:6a:09:1a:fe:83:fe:23:e5:cf:13:c4:18:a7:2f:
cf:8a:52:05:10:31:28:89:93:5f:51:cb:b5:17:ec:b7:91:b6:
4d:f8:b4:4f:8e:e8:08:ac:aa:20:fa:7c:07:b5:c3:d1:52:3b:
aa:9b:39:ba:15:aa:89:ff:cd:c6:df:96:00:4f:55:9b:27:26:
11:14:71:f7:eb:36:17:87:4e:82:fa:19:34:f1:ec:99:e4:0d:
aa:86:fb:7d:39:96:8d:b6:37:a0:ba:2e:54:c9:b2:c5:f5:ad:
3d:55:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:13 2026 by rpki-client