Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa
File: 1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa (raw, json)
Hash identifier: SsTyOm7ChF4zzf7JI9OTShfKGxMJF9oSGPkYYe9SULY=
Subject key identifier: F8:BD:F8:16:26:21:6C:84:2A:FF:66:14:99:EE:0E:06:D5:C9:E3:F9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A07B3B045648A05C49ADA95E0762F001C2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa
Signing time: Mon 07 Sep 2026 09:37:40 +0000
ROA not before: Mon 07 Sep 2026 09:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 212.16.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:3b:04:56:48:a0:5c:49:ad:a9:5e:07:62:f0:01:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 7 09:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8bdf81626216c842aff661499ee0e06d5c9e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:bf:e5:a5:86:26:f2:4a:65:c1:e5:c1:dd:
b1:a1:bd:df:c6:2d:d2:93:32:51:74:4c:78:9d:71:
f3:9a:7a:2a:5b:b0:1e:07:c0:2a:df:c2:08:84:bc:
1b:74:a6:11:50:95:af:22:7a:41:7c:59:b1:0c:54:
74:e5:ef:eb:d2:36:8b:8e:4e:fd:59:de:ba:c1:c3:
2f:1d:3b:98:e2:6b:3b:81:18:65:5e:f7:39:da:eb:
46:4c:3e:f1:e6:bd:e9:22:b7:1f:b5:40:29:06:82:
43:d5:2a:c1:62:37:d5:5d:3c:7b:54:08:83:c0:26:
97:66:99:81:d8:24:71:ff:84:c8:77:d9:b2:74:bb:
0a:79:d6:b6:eb:20:50:0c:fe:d5:00:40:73:98:2c:
91:10:b6:22:59:ce:43:a8:6e:b2:03:11:71:13:40:
b0:a5:fc:f0:3c:85:54:3b:2a:ab:e3:b6:bf:98:4a:
3e:e7:9b:05:36:e9:7a:8d:19:31:64:01:7c:b0:14:
2f:ed:e1:71:4e:2c:24:2d:90:68:94:68:b0:96:2a:
f4:37:06:8d:b4:18:20:34:76:5e:9f:76:b4:3b:0f:
fd:af:6c:12:6a:1a:ba:b2:76:a5:3b:54:72:d8:26:
de:e2:66:16:0c:73:5c:f5:c3:43:31:a3:21:28:b0:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:F8:16:26:21:6C:84:2A:FF:66:14:99:EE:0E:06:D5:C9:E3:F9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:08:5e:a6:d6:2d:2a:7d:86:a4:4d:e9:a7:ea:82:71:30:7f:
8d:b0:7f:47:99:7a:c4:97:2b:be:9b:ab:ef:a0:2d:1b:8a:d7:
50:87:56:3b:b5:fd:09:26:99:76:60:be:02:7f:69:b4:4c:d0:
cf:db:58:52:76:9b:82:7e:b1:f4:2a:14:52:bd:f5:4f:63:15:
a4:d6:4c:a0:4f:7d:5f:6d:db:38:81:77:12:43:70:2c:24:e7:
07:38:51:b7:94:6d:d8:b6:ac:f4:f5:a3:75:96:5d:ec:b4:24:
be:87:d5:6d:a1:d1:ed:29:e4:64:fb:f7:ef:a0:31:b6:df:97:
7a:a4:86:a3:22:36:38:a9:c5:20:06:95:f7:e6:1a:4c:63:3b:
f6:e5:9c:88:06:68:56:ce:9b:28:85:16:8c:d2:04:c2:92:6f:
7f:b2:89:49:36:9b:c0:5f:41:7e:f3:e9:19:23:5b:50:d6:16:
b0:b3:6a:a8:3e:ed:72:a9:04:8d:0a:83:78:6b:8a:3d:03:69:
c5:49:d0:13:fa:f2:f9:75:5e:42:17:57:69:95:7b:26:53:74:
52:1d:b4:db:15:ee:97:05:cc:ae:9d:22:6f:54:5b:e2:a6:35:
2b:47:ca:1c:b0:81:5c:60:09:fa:ec:56:20:51:4c:ce:a7:16:
76:de:bd:ed
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaB7OwRWSKBcSa2pXgdi8AHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwOTA3MDkzNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGJkZjgxNjI2MjE2Yzg0MmFmZjY2MTQ5OWVlMGUwNmQ1YzllM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6+/5aWGJvJKZcHlwd2xob3fxi3S
kzJRdEx4nXHzmnoqW7AeB8Aq38IIhLwbdKYRUJWvInpBfFmxDFR05e/r0jaLjk79
Wd66wcMvHTuY4ms7gRhlXvc52utGTD7x5r3pIrcftUApBoJD1SrBYjfVXTx7VAiD
wCaXZpmB2CRx/4TId9mydLsKeda26yBQDP7VAEBzmCyRELYiWc5DqG6yAxFxE0Cw
pfzwPIVUOyqr47a/mEo+55sFNul6jRkxZAF8sBQv7eFxTiwkLZBolGiwlir0NwaN
tBggNHZen3a0Ow/9r2wSahq6snalO1Ry2Cbe4mYWDHNc9cNDMaMhKLCONQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPi9+BYmIWyEKv9mFJnuDgbVyeP5MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvMS1MMzRGaVloYklRcV8yWVVtZTRPQnRYSjRfay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjEvNWY2OTA2LTNmYjAtNGRmZi04ZDAxLTJhMDljYzUzYTgw
NS8xL3R5bEY5WEVERlRvSGhVNTA0aWZ5cnNIRjlEQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQQXTAN
BgkqhkiG9w0BAQsFAAOCAQEAbQheptYtKn2GpE3pp+qCcTB/jbB/R5l6xJcrvpur
76AtG4rXUIdWO7X9CSaZdmC+An9ptEzQz9tYUnabgn6x9CoUUr31T2MVpNZMoE99
X23bOIF3EkNwLCTnBzhRt5Rt2Las9PWjdZZd7LQkvofVbaHR7SnkZPv376Axtt+X
eqSGoyI2OKnFIAaV9+YaTGM79uWciAZoVs6bKIUWjNIEwpJvf7KJSTabwF9BfvPp
GSNbUNYWsLNqqD7tcqkEjQqDeGuKPQNpxUnQE/ry+XVeQhdXaZV7JlN0Uh202xXu
lwXMrp0ib1Rb4qY1K0fKHLCBXGAJ+uxWIFFMzqcWdt697Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:44 2026 by rpki-client