Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1yL-G5RceJa8XbaLKS0f3z4XPV0.roa
File: 1yL-G5RceJa8XbaLKS0f3z4XPV0.roa (raw, json)
Hash identifier: phg71XlkqYO5UCI4AIYzhTSFJcIFd8YNTxEvdsC4Z7s=
Subject key identifier: D7:22:FE:1B:94:5C:78:96:BC:5D:B6:8B:29:2D:1F:DF:3E:17:3D:5D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A08F290E9A4B1059817EE732E3FB8984FA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1yL-G5RceJa8XbaLKS0f3z4XPV0.roa
Signing time: Fri 11 Sep 2026 06:30:27 +0000
ROA not before: Fri 11 Sep 2026 06:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201738
IP address blocks: 109.238.86.0/24 maxlen: 24
193.178.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:29:0e:9a:4b:10:59:81:7e:e7:32:e3:fb:89:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 11 06:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d722fe1b945c7896bc5db68b292d1fdf3e173d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:cc:c1:07:f4:ec:1a:6c:ff:34:65:6d:58:
2a:95:0d:a8:f3:c4:6b:e6:08:ba:04:cc:bc:83:84:
76:99:1e:8e:9a:6f:03:ac:f5:77:b4:e2:33:a1:4a:
12:f8:63:bf:09:ba:69:dd:a5:f3:d0:81:d7:8e:35:
9a:53:52:db:fe:7a:21:78:f8:95:0a:b8:67:6e:da:
4c:8b:9f:e4:cf:f2:89:19:a2:f7:df:0b:0e:98:08:
a1:06:52:1c:e6:06:7d:93:3e:d0:71:ad:79:4f:1c:
7f:5c:eb:60:08:ab:87:9b:e6:08:53:17:e3:a0:1a:
c0:b7:15:3e:e6:55:c3:80:b2:a6:e7:10:0e:4e:e9:
2c:7e:a4:31:17:5d:2f:d5:d4:68:a9:d9:41:9c:56:
bc:d6:e6:61:bb:c7:0e:35:68:43:46:5d:e0:13:8a:
fb:b6:d0:ae:f4:c8:be:72:5e:b7:21:46:13:57:79:
b8:19:5c:f1:f0:08:76:92:19:68:77:50:00:f0:e5:
9b:29:c6:63:5f:62:8e:bb:92:ca:0e:31:fa:c3:38:
53:82:62:f9:bd:20:c0:af:0d:da:0f:dd:fb:5a:43:
ca:d3:ce:be:8a:62:6a:15:c8:9d:2c:e3:a3:65:0c:
f2:66:12:b9:0e:9a:bc:ec:6c:e8:b8:dd:3b:64:7b:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:FE:1B:94:5C:78:96:BC:5D:B6:8B:29:2D:1F:DF:3E:17:3D:5D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1yL-G5RceJa8XbaLKS0f3z4XPV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.86.0/24
193.178.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3c:f3:2a:9c:fc:cc:d0:5e:4f:07:1c:3b:cc:e2:f6:55:37:
8e:73:44:68:d0:06:fd:c5:4f:5c:41:77:a3:71:ea:0b:02:cf:
f2:b4:79:9d:c0:15:28:cb:26:94:76:ab:d0:84:03:88:08:60:
9a:fc:ab:f0:e5:37:ef:44:03:f0:d7:ab:d8:d9:71:fb:30:26:
1a:90:df:86:58:23:7b:9c:87:8a:28:dc:9a:6d:c8:ee:6e:9b:
8f:3d:de:e2:87:74:9c:c0:96:8f:69:ee:5f:79:c7:cb:f4:e9:
ce:82:e0:81:07:7c:49:c0:59:c4:08:45:ab:a7:45:3a:62:57:
cd:a7:3a:92:aa:61:d5:91:ee:2d:b0:41:62:11:fd:6f:d6:10:
5c:3f:84:08:17:3a:c9:d1:d6:ee:46:18:ec:d3:57:7c:d9:2b:
bf:08:79:10:53:a2:09:46:33:d7:70:4b:9b:a4:ac:f0:4c:ad:
fd:92:ef:c1:49:55:cb:fd:5f:1b:d9:e8:61:89:87:74:86:28:
8e:63:7e:67:de:cc:71:6b:dc:c8:7c:95:86:86:72:e6:64:f8:
6f:2d:fa:35:37:6a:71:ee:ed:e2:96:dc:81:68:b9:46:89:ef:
52:fd:e4:83:b3:88:ba:da:72:26:03:0d:a1:fe:c1:70:dc:70:
fc:90:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:51 2026 by rpki-client