Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/0dLSCB-inIUtTe-M54gXO_yzuII.roa
File: 0dLSCB-inIUtTe-M54gXO_yzuII.roa (raw, json)
Hash identifier: SwePqxqD6sgj7VhfscnreEQxLeyXUwp843laCUNr5O0=
Subject key identifier: D1:D2:D2:08:1F:A2:9C:85:2D:4D:EF:8C:E7:88:17:3B:FC:B3:B8:82
Certificate issuer: /CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Certificate serial: 01A0E7CAFA2F337B81619A185A47821C530E
Authority key identifier: D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/0dLSCB-inIUtTe-M54gXO_yzuII.roa
Signing time: Mon 28 Sep 2026 11:33:54 +0000
ROA not before: Mon 28 Sep 2026 11:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394192
IP address blocks: 85.236.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ca:fa:2f:33:7b:81:61:9a:18:5a:47:82:1c:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Validity
Not Before: Sep 28 11:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1d2d2081fa29c852d4def8ce788173bfcb3b882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:eb:a6:4e:f9:8b:4e:a9:cd:e5:50:1e:03:
f3:f9:5a:0b:bc:81:9d:65:5f:46:a8:0c:42:af:48:
2a:03:e3:88:e9:e0:d8:f3:fa:1f:65:8e:75:7a:16:
33:7f:a9:9b:05:d1:c6:a0:75:4e:3d:44:16:02:30:
50:3a:0f:83:46:06:f9:15:ee:8d:80:9d:dc:e5:8c:
4f:87:53:33:20:9f:5e:07:08:50:87:71:51:a9:c9:
36:eb:42:2d:57:68:f4:65:f7:3f:2b:44:60:29:81:
c2:44:f9:e0:ef:da:b1:b8:d2:17:26:20:79:c9:98:
09:62:eb:b9:ed:c9:77:e1:9c:3b:e8:59:6c:89:93:
64:e5:3f:f6:c7:1c:f2:d7:d3:8f:d9:4c:b0:ec:24:
c6:1e:5d:42:b5:e1:1d:0e:c8:fd:13:d5:36:73:fb:
90:4b:d9:51:0e:c2:e0:40:70:02:08:0b:46:af:7f:
f6:8a:32:e2:c9:ed:16:87:de:b5:af:d5:63:4f:60:
ca:47:87:0c:53:48:f0:98:c2:07:8a:c2:a4:16:05:
84:10:3f:5a:98:cf:06:b4:34:73:2a:6a:99:f6:10:
4f:b8:81:71:d5:c7:82:02:b0:f0:bf:7a:7d:f4:88:
f0:6e:0e:db:ca:90:77:b4:f9:03:28:d4:0d:3f:79:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:D2:08:1F:A2:9C:85:2D:4D:EF:8C:E7:88:17:3B:FC:B3:B8:82
X509v3 Authority Key Identifier:
keyid:D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/0dLSCB-inIUtTe-M54gXO_yzuII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:21:dd:f1:7e:ab:e5:77:36:f4:b0:f9:ca:cd:1e:26:9b:25:
69:08:e1:20:21:38:ca:a5:c0:11:0b:a0:ca:19:69:00:72:f0:
fc:22:e6:32:34:d9:e4:c2:35:e1:2d:a0:7d:94:ed:6b:bd:aa:
8e:9e:44:e2:a7:0f:0b:2c:29:65:86:74:15:11:8f:4f:51:5d:
47:98:18:e5:41:9e:54:75:02:37:26:ad:39:d4:47:b0:af:12:
5b:09:89:cd:a8:fe:b2:54:af:7d:5a:19:e0:4c:87:b5:22:1f:
36:16:35:ac:bb:95:5d:5d:95:ac:79:24:19:89:8c:0b:79:26:
19:22:c5:c2:b8:9a:8f:cc:10:2b:d9:ef:66:fe:77:5b:13:68:
00:20:cd:c5:30:4e:40:39:9d:b4:2e:64:b5:3f:4c:e6:9f:ce:
99:d8:81:1e:83:7f:3c:53:7f:79:6a:b4:f9:b0:91:f9:c1:d2:
48:64:98:99:40:80:fd:ca:d3:97:46:80:42:71:a8:d3:a7:8f:
6d:35:b9:b0:75:3f:dc:01:02:ae:6e:f3:67:41:af:f2:d5:d1:
6e:c5:42:02:f0:eb:31:fc:bd:d7:b9:71:12:42:95:eb:69:ef:
5f:e2:ca:dc:9a:12:16:b9:01:6e:e7:ab:da:81:ec:5e:f7:0a:
45:b6:f9:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDnyvovM3uBYZoYWkeCHFMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OWVjOGM2NDNhM2I1MTZlODRjNGE3ZWE1YzI3Y2ZjYzlh
YjIyYzIwHhcNMjYwOTI4MTEzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWQyZDIwODFmYTI5Yzg1MmQ0ZGVmOGNlNzg4MTczYmZjYjNiODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOXrpk75i06pzeVQHgPz+VoLvIGd
ZV9GqAxCr0gqA+OI6eDY8/ofZY51ehYzf6mbBdHGoHVOPUQWAjBQOg+DRgb5Fe6N
gJ3c5YxPh1MzIJ9eBwhQh3FRqck260ItV2j0Zfc/K0RgKYHCRPng79qxuNIXJiB5
yZgJYuu57cl34Zw76FlsiZNk5T/2xxzy19OP2Uyw7CTGHl1CteEdDsj9E9U2c/uQ
S9lRDsLgQHACCAtGr3/2ijLiye0Wh961r9VjT2DKR4cMU0jwmMIHisKkFgWEED9a
mM8GtDRzKmqZ9hBPuIFx1ceCArDwv3p99Ijwbg7bypB3tPkDKNQNP3lMdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHS0ggfopyFLU3vjOeIFzv8s7iCMB8GA1UdIwQY
MBaAFNSeyMZDo7UW6ExKfqXCfPzJqyLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUo3SXhrT2p0UmJvVEVwLXBjSjhfTW1ySXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZDlhZWMtMTBhMC00MjAyLThmNGQt
ZDgwNmQ4ZTRkNDMzLzEvMGRMU0NCLWluSVV0VGUtTTU0Z1hPX3l6dUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZDlhZWMtMTBhMC00MjAyLThmNGQtZDgwNmQ4ZTRkNDMz
LzEvMUo3SXhrT2p0UmJvVEVwLXBjSjhfTW1ySXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVexqMA0G
CSqGSIb3DQEBCwUAA4IBAQAPId3xfqvldzb0sPnKzR4mmyVpCOEgITjKpcARC6DK
GWkAcvD8IuYyNNnkwjXhLaB9lO1rvaqOnkTipw8LLCllhnQVEY9PUV1HmBjlQZ5U
dQI3Jq051EewrxJbCYnNqP6yVK99WhngTIe1Ih82FjWsu5VdXZWseSQZiYwLeSYZ
IsXCuJqPzBAr2e9m/ndbE2gAIM3FME5AOZ20LmS1P0zmn86Z2IEeg388U395arT5
sJH5wdJIZJiZQID9ytOXRoBCcajTp49tNbmwdT/cAQKubvNnQa/y1dFuxUIC8Osx
/L3XuXESQpXrae9f4srcmhIWuQFu56vagexe9wpFtvlz
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:25 2026 by rpki-client