Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/lsiyM54BBzpQuET-XZoryhgj5Fc.roa
File: lsiyM54BBzpQuET-XZoryhgj5Fc.roa (raw, json)
Hash identifier: D7wAdPXpUkQBrLPttbGEryAEGM/tkPDIMcLbM5iF1RM=
Subject key identifier: 96:C8:B2:33:9E:01:07:3A:50:B8:44:FE:5D:9A:2B:CA:18:23:E4:57
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019D74A4A52CDD58040AE9475DEBFFBB5550
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/lsiyM54BBzpQuET-XZoryhgj5Fc.roa
Signing time: Thu 09 Apr 2026 23:47:20 +0000
ROA not before: Thu 09 Apr 2026 23:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199783
IP address blocks: 141.98.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:a4:a5:2c:dd:58:04:0a:e9:47:5d:eb:ff:bb:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Apr 9 23:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c8b2339e01073a50b844fe5d9a2bca1823e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:6f:7b:13:51:7f:0d:7f:b6:33:d4:4e:a6:
e3:75:e9:5d:07:ed:fd:48:71:a1:2f:7d:8b:bb:d2:
0c:b2:fb:43:e3:32:4e:29:41:13:60:37:87:21:12:
75:ba:19:e5:25:04:6f:f3:b0:d7:68:97:c8:3e:3e:
fd:9f:2e:41:ba:e3:11:bb:ba:f9:12:93:da:61:70:
59:d0:9d:72:55:82:61:5c:07:a0:cd:79:ad:d5:2e:
7e:60:cb:6c:b1:83:51:72:d8:90:40:7c:fb:4e:2a:
9c:1e:13:66:dd:a7:b9:bc:35:e8:e2:01:b3:14:1f:
e9:f4:3e:16:2a:02:34:29:4a:05:bc:8b:78:16:04:
81:55:68:4d:50:42:83:b9:89:c1:57:f0:9e:3c:5d:
ef:86:5b:46:f3:e0:39:7a:21:0d:c9:05:72:37:28:
cc:da:35:32:ac:6a:af:89:07:0b:a0:d7:3e:af:5c:
c5:10:37:1b:fa:a4:c7:d3:bb:ea:c7:39:bd:c4:7a:
af:d9:15:39:61:cf:19:a2:9a:2a:5a:58:0b:db:42:
36:9c:7c:8b:f8:1a:99:91:57:7f:91:2d:ad:59:13:
d0:e6:90:ec:1a:6b:5e:a2:1b:8e:21:04:b9:c3:db:
59:d3:6e:1b:bf:b4:56:1c:7f:2a:a1:4e:97:fb:61:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:B2:33:9E:01:07:3A:50:B8:44:FE:5D:9A:2B:CA:18:23:E4:57
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/lsiyM54BBzpQuET-XZoryhgj5Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
00:99:4e:c1:a6:cb:58:80:96:13:41:f7:92:00:c1:08:0b:33:
70:3b:0a:bf:9a:0e:ab:95:99:8d:c0:72:e3:f6:ef:9e:ee:b8:
49:d8:d6:74:92:11:d5:ae:d4:61:27:1d:a2:ed:ea:56:2b:d4:
c4:ec:fd:34:3a:de:d3:c9:14:10:97:eb:9b:d4:00:b9:46:70:
db:25:01:1c:62:7c:de:b4:0b:64:04:b5:04:94:25:29:97:0c:
18:6f:a2:d3:d1:f4:41:70:be:8e:cc:a3:9a:cd:2c:59:9d:01:
ae:d0:c6:7a:c5:6f:67:3e:d4:30:75:81:a9:0b:26:2a:de:36:
be:f4:f2:83:f9:16:7c:c9:4f:1d:a5:b8:92:44:ce:9b:6c:04:
46:52:6d:7c:be:6f:b5:84:60:a0:55:74:24:cb:a1:35:b7:21:
01:f0:f3:f7:6f:ca:9c:e1:af:e4:ac:1e:03:34:70:c9:73:0b:
0b:95:88:94:1b:1c:2a:0e:63:40:75:96:b8:fe:a0:dd:58:5e:
02:2d:cc:4b:c0:f4:90:a4:67:ef:1d:36:b9:d5:48:d6:f8:c1:
ac:4e:e9:3d:26:c8:82:ed:ad:73:ad:4c:20:d4:74:15:a3:5b:
ce:37:7c:44:a6:c6:68:5a:1c:b1:03:8f:47:42:ab:51:4b:fc:
fc:b4:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:51 2026 by rpki-client