Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ly6dXPpWH8nsDbUGeNnJ7xOszRY.roa
File: ly6dXPpWH8nsDbUGeNnJ7xOszRY.roa (raw, json)
Hash identifier: md9l+oF9m7UgSYGwdzldAqOqjq7k5r7C3lfIbgJH8Rc=
Subject key identifier: 97:2E:9D:5C:FA:56:1F:C9:EC:0D:B5:06:78:D9:C9:EF:13:AC:CD:16
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A0A5A4F9DA2612F747701DFFAE10379108
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ly6dXPpWH8nsDbUGeNnJ7xOszRY.roa
Signing time: Tue 15 Sep 2026 15:17:27 +0000
ROA not before: Tue 15 Sep 2026 15:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 80.71.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:a4:f9:da:26:12:f7:47:70:1d:ff:ae:10:37:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 15 15:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=972e9d5cfa561fc9ec0db50678d9c9ef13accd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:f7:b5:1a:3e:15:21:a4:dd:65:7e:21:34:
29:a9:1a:59:ee:71:e3:ae:ec:bf:68:cd:97:81:f0:
c5:96:b7:a3:0a:fc:64:cf:36:02:3b:4f:1d:8c:e0:
e1:3a:8d:ea:80:e3:4c:f7:e0:ce:d8:99:e0:bf:01:
be:d5:d8:7e:c3:85:9c:17:7e:3f:87:2d:78:f3:a4:
ff:b3:e1:70:7f:d1:cc:a5:71:f5:25:35:33:ca:d6:
3e:6f:cc:6f:10:1a:75:75:7e:c9:05:9e:98:70:43:
d0:bf:05:4c:34:46:7d:11:3d:56:95:92:ca:90:c1:
b9:a1:11:9d:6e:9c:95:f8:18:a7:eb:f0:66:d3:bd:
e8:41:7d:89:a1:df:59:b1:61:33:f4:a1:cb:24:b5:
a2:dd:9b:cc:14:f4:fa:f5:5b:12:fa:d5:d9:ae:a1:
b0:2b:ce:4f:34:e3:36:f2:56:6a:be:a7:f1:b8:56:
36:33:9e:24:54:8a:f0:60:e1:45:3e:64:96:a6:de:
fa:7e:18:a2:7a:9c:8f:07:6b:2d:fb:61:53:72:e3:
87:af:d3:0c:5c:f3:d1:cb:4d:03:94:a0:8b:02:7a:
70:02:7b:ad:ec:40:21:65:41:9c:8d:dd:7c:cf:51:
6f:5f:18:48:e6:49:6b:2b:54:ae:6a:9f:61:c1:be:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:9D:5C:FA:56:1F:C9:EC:0D:B5:06:78:D9:C9:EF:13:AC:CD:16
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ly6dXPpWH8nsDbUGeNnJ7xOszRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f7:a3:8a:ed:24:88:5e:53:25:cd:bf:5e:10:37:19:fa:90:
79:b5:4f:64:f0:55:74:ab:38:de:7b:08:95:c4:f3:ad:50:8e:
51:ca:fb:cb:68:ad:c6:02:50:09:2a:f4:77:76:6e:aa:98:0a:
6c:93:a8:a5:2c:29:b4:c9:3b:13:5e:17:8f:e2:0f:7b:9f:86:
fb:26:ea:89:d2:08:ff:4d:14:67:d9:d4:ac:0d:58:31:d1:94:
df:0d:0b:a2:20:65:63:eb:b4:98:e5:eb:30:aa:cf:9a:06:34:
06:ef:58:06:15:a8:19:e6:ec:45:aa:bd:13:1e:4d:3f:3e:c6:
dd:da:c5:37:83:40:43:08:cf:d5:03:7f:35:09:1f:d9:30:0f:
8f:ed:3b:c2:31:be:ef:58:a1:f9:23:2a:ae:98:ba:81:8f:90:
ac:5c:5f:05:5c:dc:53:15:ff:4d:7c:d2:78:23:bc:bc:64:65:
e4:4c:28:97:50:58:96:f8:eb:6d:23:32:41:63:9c:00:f4:ed:
37:45:64:be:c7:4b:2e:fd:89:f9:01:5b:45:d7:66:90:e0:84:
3f:0e:f4:ff:ac:3a:f7:e7:7d:22:a2:04:b0:ef:05:e2:f4:2b:
07:2a:31:6c:fa:9c:fe:e5:d0:50:6b:ec:22:0b:7e:6d:11:b0:
c1:8d:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:48 2026 by rpki-client