Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LY1Imffq4Tcht5lhn85h0T6M9rU.roa
File: LY1Imffq4Tcht5lhn85h0T6M9rU.roa (raw, json)
Hash identifier: E8Ebqp/NAXsQVPhPFl6lWRLOqdKF4bgvi6IDAVvWdyI=
Subject key identifier: 2D:8D:48:99:F7:EA:E1:37:21:B7:99:61:9F:CE:61:D1:3E:8C:F6:B5
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A08625027CDEA896CE6BE6F9059D4F4CA1
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LY1Imffq4Tcht5lhn85h0T6M9rU.roa
Signing time: Wed 09 Sep 2026 12:29:27 +0000
ROA not before: Wed 09 Sep 2026 12:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 987
IP address blocks: 144.56.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:25:02:7c:de:a8:96:ce:6b:e6:f9:05:9d:4f:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 9 12:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d8d4899f7eae13721b799619fce61d13e8cf6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:38:3e:3c:c2:cb:a8:1b:31:51:cb:7c:29:
59:4b:39:1a:a4:9b:2d:a6:c8:41:74:b6:a6:a5:9f:
ff:81:f2:e8:0e:95:de:b3:9e:44:7a:c1:e2:71:27:
eb:d3:5c:93:fb:da:8b:2d:fe:76:b0:23:0f:df:53:
28:19:5a:44:c8:4f:3b:17:ef:5c:de:87:82:99:6a:
00:b3:ba:66:1d:e6:d0:8d:7b:a6:70:a8:7f:d2:9e:
3b:3d:3b:4f:f8:ae:47:c3:8e:33:fc:f4:a4:53:a4:
b0:2b:83:6f:38:e4:0e:a8:15:e7:1c:61:27:1b:df:
31:8b:1a:64:f0:55:84:0f:ef:7d:fb:86:52:f2:9e:
95:07:6c:75:84:8a:83:a6:c4:30:51:43:fc:6e:57:
d4:60:ce:01:84:d3:f5:19:b0:5d:01:cb:32:11:81:
a8:5c:78:3c:f6:0a:2d:76:3c:c6:05:42:e7:86:e0:
08:32:a2:b3:a9:b3:e8:7a:62:16:d8:b0:e2:1a:37:
35:56:24:09:04:71:e6:c2:65:6f:87:51:bc:ad:e5:
a7:c0:8e:c3:56:e7:0c:ed:e4:0e:31:b5:09:14:f5:
24:95:60:8d:b7:df:26:78:d7:d0:cc:39:8a:8c:62:
d8:af:20:fa:34:18:02:45:c0:41:c6:aa:2d:c3:93:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8D:48:99:F7:EA:E1:37:21:B7:99:61:9F:CE:61:D1:3E:8C:F6:B5
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/LY1Imffq4Tcht5lhn85h0T6M9rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:06:62:33:a6:dd:35:9d:3c:e3:ae:3b:2e:3f:d3:d7:cd:e1:
e5:b4:66:3a:f9:42:64:10:7e:9c:4e:8f:80:f9:89:49:3d:b0:
6e:77:3d:22:cd:91:c0:36:b6:cf:59:d8:6c:98:0c:24:99:78:
4e:84:ed:e6:82:85:a0:0b:b7:c9:82:bd:56:23:a5:54:4d:32:
96:38:46:87:c6:39:8d:36:d0:65:54:8a:53:65:32:77:aa:97:
99:fd:ea:f7:76:bc:40:5d:89:d9:a5:e9:46:3e:c9:de:bd:10:
8e:0a:9e:50:86:0e:46:43:60:ab:2c:1e:30:e6:46:63:74:1f:
3b:5f:c5:78:44:2b:8e:dc:12:9f:0d:3e:ae:5e:1f:9a:eb:9d:
37:6f:ae:ee:75:e2:72:df:40:07:23:af:ed:dd:df:a3:f2:fb:
7c:46:21:a9:0a:6d:93:76:78:c7:6d:a9:fe:e7:eb:0e:d3:9e:
8f:9d:fe:d5:b4:1f:15:5e:cb:22:0f:41:73:3e:d6:ad:6e:a2:
0e:c0:fd:15:4f:ad:32:fc:8e:ec:66:6e:86:8d:a5:ec:a7:62:
d7:4a:e9:03:7b:c9:da:3b:b5:dc:55:7b:ae:b9:8a:f0:93:1b:
a1:59:fc:45:4b:79:85:49:ba:7c:81:f8:5a:a2:41:c2:0a:9e:
a4:8a:3c:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCGJQJ83qiWzmvm+QWdT0yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwOTA5MTIyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhkNDg5OWY3ZWFlMTM3MjFiNzk5NjE5ZmNlNjFkMTNlOGNmNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqw4PjzCy6gbMVHLfClZSzkapJst
pshBdLampZ//gfLoDpXes55EesHicSfr01yT+9qLLf52sCMP31MoGVpEyE87F+9c
3oeCmWoAs7pmHebQjXumcKh/0p47PTtP+K5Hw44z/PSkU6SwK4NvOOQOqBXnHGEn
G98xixpk8FWED+99+4ZS8p6VB2x1hIqDpsQwUUP8blfUYM4BhNP1GbBdAcsyEYGo
XHg89gotdjzGBULnhuAIMqKzqbPoemIW2LDiGjc1ViQJBHHmwmVvh1G8reWnwI7D
VucM7eQOMbUJFPUklWCNt98meNfQzDmKjGLYryD6NBgCRcBBxqotw5OXHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2NSJn36uE3IbeZYZ/OYdE+jPa1MB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvTFkxSW1mZnE0VGNodDVsaG44NWgwVDZNOXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDg4MA0G
CSqGSIb3DQEBCwUAA4IBAQA/BmIzpt01nTzjrjsuP9PXzeHltGY6+UJkEH6cTo+A
+YlJPbBudz0izZHANrbPWdhsmAwkmXhOhO3mgoWgC7fJgr1WI6VUTTKWOEaHxjmN
NtBlVIpTZTJ3qpeZ/er3drxAXYnZpelGPsnevRCOCp5Qhg5GQ2CrLB4w5kZjdB87
X8V4RCuO3BKfDT6uXh+a6503b67udeJy30AHI6/t3d+j8vt8RiGpCm2TdnjHban+
5+sO056Pnf7VtB8VXssiD0FzPtatbqIOwP0VT60y/I7sZm6GjaXsp2LXSukDe8na
O7XcVXuuuYrwkxuhWfxFS3mFSbp8gfhaokHCCp6kijwH
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:32 2026 by rpki-client