Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/1lY-CsGva2obFTlBMU3iZDfCreA.roa
File: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (raw, json)
Hash identifier: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=
Subject key identifier: D6:56:3E:0A:C1:AF:6B:6A:1B:15:39:41:31:4D:E2:64:37:C2:AD:E0
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019D70CD5D088ECA81EA83CA53C60B35B5C7
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/1lY-CsGva2obFTlBMU3iZDfCreA.roa
Signing time: Thu 09 Apr 2026 05:53:19 +0000
ROA not before: Thu 09 Apr 2026 05:53:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49683
IP address blocks: 89.33.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:cd:5d:08:8e:ca:81:ea:83:ca:53:c6:0b:35:b5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 9 05:53:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6563e0ac1af6b6a1b153941314de26437c2ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:1f:3f:80:66:66:fa:b8:68:d8:ad:d3:04:
c0:5d:ff:e5:3a:3d:c3:5d:dd:e7:dc:4c:f7:d3:68:
a3:5b:07:7f:3b:c5:cf:d7:fa:75:fa:05:2c:b5:15:
c3:2e:f8:b0:af:77:a6:df:1f:02:d9:59:23:ad:ff:
4d:6b:19:4c:44:3f:96:ae:f6:61:95:48:98:5c:4a:
9f:2f:8e:2d:d7:d7:ee:00:7d:7a:a3:d0:da:3d:09:
ca:42:93:11:30:07:fd:1b:9d:fe:91:01:ba:2f:94:
b7:ae:b8:c4:a6:48:30:9d:e1:e1:e3:87:4e:24:e5:
17:ef:cd:44:30:46:29:fb:cd:76:aa:bd:a7:11:e2:
d8:c9:5d:c9:38:5c:c8:4e:e8:30:ff:8f:28:15:bd:
f3:df:ce:2c:62:90:15:09:a8:84:ce:c6:71:04:54:
be:b3:3d:55:a9:45:4e:e4:12:d9:34:6d:89:a5:14:
67:73:1f:04:99:61:cc:c7:31:a5:44:1c:b1:a0:20:
76:54:dd:27:30:68:98:b1:5f:01:3e:6f:03:9a:b6:
f3:1e:74:37:94:34:e0:61:42:ab:1a:27:f1:9c:9d:
5b:28:3f:2a:a3:aa:4a:d2:1b:3b:8c:7d:71:92:30:
d5:1d:38:19:fa:d1:f6:32:b0:24:5d:9a:23:ed:42:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:3E:0A:C1:AF:6B:6A:1B:15:39:41:31:4D:E2:64:37:C2:AD:E0
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/1lY-CsGva2obFTlBMU3iZDfCreA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:47:55:29:24:54:65:3b:72:51:c9:87:ac:e2:8c:77:93:87:
60:5b:87:0e:0d:94:f6:12:d9:71:fb:31:36:67:b9:e9:cb:ff:
96:24:31:f2:d9:39:10:6e:72:e8:b0:e7:70:8f:42:d8:ca:ea:
04:6e:56:ff:ca:a4:3e:76:5c:7a:bf:05:1c:fd:0d:19:ff:7c:
d9:13:36:6c:66:ac:18:17:d7:96:df:66:ce:50:6e:92:35:15:
18:83:6d:aa:32:56:8a:04:a1:e4:2b:34:91:d0:aa:5a:96:b9:
04:cc:34:b4:27:0a:b4:c5:90:4d:97:94:e5:9e:a1:50:1c:2a:
9c:10:93:50:18:e9:28:23:be:6f:8a:9a:f3:fb:c9:db:37:bc:
88:26:5b:f0:e3:81:9b:12:91:7f:bc:5e:f3:a1:0d:3c:b6:12:
08:89:6d:60:89:5b:cb:cf:6e:2d:42:8a:58:aa:4e:80:28:65:
9d:16:78:67:38:48:14:17:32:2a:98:06:af:d2:7c:db:ad:ed:
5f:31:5e:b2:0d:0c:26:bb:30:db:5b:99:f7:1e:de:e8:46:df:
20:ec:a7:1d:4b:ff:3c:23:cf:1f:ca:e9:a4:88:c3:71:cc:f4:
12:c0:8a:06:c9:c8:07:4b:28:a3:19:cb:46:f4:13:df:72:fb:
1a:c7:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:59 2026 by rpki-client