Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-Y1CLeQ-Cjp68gKza_emSXGJ4ZE.roa
File: 1-Y1CLeQ-Cjp68gKza_emSXGJ4ZE.roa (raw, json)
Hash identifier: jQk1xGsra+mpydHtGmUoEiesMtafIWbafkkUNFl5s5Q=
Subject key identifier: F9:8D:42:2D:E4:3E:0A:3A:7A:F2:02:B3:6B:F7:A6:49:71:89:E1:91
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0AF27F838FB34F93BEC2682F51A624B97
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-Y1CLeQ-Cjp68gKza_emSXGJ4ZE.roa
Signing time: Thu 17 Sep 2026 11:37:07 +0000
ROA not before: Thu 17 Sep 2026 11:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 94.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:27:f8:38:fb:34:f9:3b:ec:26:82:f5:1a:62:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 17 11:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f98d422de43e0a3a7af202b36bf7a6497189e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:d9:62:8e:31:22:54:c2:65:19:ee:aa:70:
3a:86:2a:c8:c7:33:f0:1f:e8:39:29:e3:99:34:4b:
26:79:a5:9e:d8:30:e3:72:b7:46:a2:e0:a6:01:cf:
ce:13:df:20:85:29:2e:bc:97:62:a4:f5:a3:9d:0c:
6f:d5:98:61:fa:38:6f:32:c4:e7:86:ba:a5:9f:a9:
0d:4a:8c:c9:46:bc:0f:4b:b6:45:42:57:45:ad:7a:
b7:62:cb:b7:94:dc:cd:c4:24:bb:70:aa:da:4e:b7:
ea:0a:39:56:32:99:c6:f0:e9:4d:ef:6d:e8:ae:ca:
6f:80:64:34:e7:41:e3:2e:fd:51:42:c6:4f:2b:08:
d3:c7:93:81:2a:fb:58:74:28:51:91:2f:16:1d:b8:
02:cf:30:45:23:2a:3b:97:27:f6:a8:87:65:2a:e8:
fa:ac:fc:07:f8:f3:1a:73:91:13:b0:05:3d:af:49:
29:05:5d:34:e9:e9:a3:d9:70:0f:33:17:f0:e5:a2:
c4:93:db:9d:20:f5:dd:63:4b:cc:e9:25:bd:01:8c:
d1:83:5e:59:f7:82:b7:c7:3e:db:2f:4b:da:ea:76:
6f:ff:e3:11:34:0d:03:93:88:8a:ce:a3:01:20:cb:
11:10:13:24:d3:75:92:37:ff:4e:63:58:30:3a:bd:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:42:2D:E4:3E:0A:3A:7A:F2:02:B3:6B:F7:A6:49:71:89:E1:91
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-Y1CLeQ-Cjp68gKza_emSXGJ4ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b4:4e:df:16:51:e0:2d:f6:1d:f5:e3:96:4d:ac:65:88:cd:
2a:d8:f8:af:bc:7b:d8:5e:bc:5e:68:80:39:93:4c:48:4c:a6:
7f:ea:aa:37:8a:4f:5f:50:94:d1:a2:af:25:78:43:23:b8:1c:
00:98:fe:1c:04:80:2c:f1:30:83:39:51:5d:ad:00:79:ef:6b:
d5:08:c7:2e:e4:cb:bc:75:db:e1:7f:1e:59:e1:67:60:c3:e7:
57:ac:a3:b9:d4:7d:3c:fa:8a:0b:28:c6:49:7f:9e:62:0b:26:
99:e7:a6:be:6e:66:cb:67:50:a2:90:cc:62:03:34:ea:8f:66:
32:74:50:07:47:03:ab:56:02:48:23:9b:ef:a4:0c:f0:8a:31:
f2:ca:5c:30:3e:4f:ef:68:8e:f3:e6:b0:8d:0c:08:63:b3:0c:
07:c3:fb:8f:c9:ff:34:cb:be:9b:6e:57:ca:16:e6:49:d9:56:
fe:5d:9d:96:76:3c:a3:0b:b3:6b:69:0b:22:2f:c9:c9:b6:d3:
dc:d1:93:00:ba:ca:f6:f3:0f:23:cb:df:63:11:bd:2e:a5:57:
83:59:f5:17:68:ab:68:58:7d:32:0f:f5:98:d7:c4:28:89:6f:
7a:11:6f:99:1e:4f:2c:35:fd:4c:f9:2e:76:e8:ef:1b:89:f6:
fd:4f:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:46 2026 by rpki-client