Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/lYmbdszg1HBLjx2ylBZh2Wso6IY.roa
File: lYmbdszg1HBLjx2ylBZh2Wso6IY.roa (raw, json)
Hash identifier: chPEVglQ4S+gXh1FxyXuTaIfdHAJf6Xr/KPrk/m6ou4=
Subject key identifier: 95:89:9B:76:CC:E0:D4:70:4B:8F:1D:B2:94:16:61:D9:6B:28:E8:86
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1DAD19FE03CD2745AC4FA4514127B39D6
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/lYmbdszg1HBLjx2ylBZh2Wso6IY.roa
Signing time: Sat 14 Nov 2026 16:08:53 +0000
ROA not before: Sat 14 Nov 2026 16:08:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 83.98.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:d1:9f:e0:3c:d2:74:5a:c4:fa:45:14:12:7b:39:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 14 16:08:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95899b76cce0d4704b8f1db2941661d96b28e886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:a0:0e:54:62:e6:c9:34:22:1d:67:44:56:
2a:47:62:1a:00:4c:01:f9:44:c8:b1:19:fe:ef:d5:
b1:5f:2d:26:9d:ae:86:86:fb:71:07:95:e3:44:c8:
41:ac:aa:e8:ef:03:11:88:cc:6f:a7:ca:0c:ae:4a:
d9:2e:50:4a:cb:97:33:5b:8d:c4:74:00:6d:36:12:
88:2c:47:40:65:5b:04:b2:4c:2c:14:d9:90:ea:e5:
1b:cb:3e:78:ff:93:9f:cc:93:ff:cb:0b:2f:cc:03:
fc:8e:1c:0a:d8:ca:a0:de:83:a0:7a:3a:35:ce:e0:
33:eb:a1:43:d5:8c:44:bc:4d:40:23:cc:a4:88:32:
91:9d:9f:d8:a2:6e:0d:88:1a:77:e0:1e:e5:99:bb:
b8:d4:09:27:c0:c9:92:dc:4a:2b:69:6c:87:ca:7d:
55:61:74:3e:c5:12:bb:23:d8:3c:da:82:9f:08:2d:
f3:81:0e:44:f6:1e:ab:ff:25:bc:2c:17:02:f8:c2:
ac:bf:6a:99:92:2c:2e:11:59:66:fb:8c:d4:d0:98:
b4:7d:88:e0:e8:eb:9f:e3:cc:de:1e:d3:53:73:d4:
84:ba:6a:1e:4c:b7:f2:4d:7d:00:75:d5:67:a2:d0:
d6:70:02:32:32:f1:f8:de:c4:92:ea:51:92:7f:b3:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:9B:76:CC:E0:D4:70:4B:8F:1D:B2:94:16:61:D9:6B:28:E8:86
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/lYmbdszg1HBLjx2ylBZh2Wso6IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d0:0e:46:cf:a4:11:59:ed:93:8a:37:ee:0c:b4:35:ac:13:
ce:15:73:40:93:01:c8:2a:78:64:75:78:f3:f3:26:18:81:1f:
c2:f2:f6:46:ba:5f:a5:aa:66:3f:b1:ce:5b:ce:19:75:79:21:
47:16:ee:15:6c:96:72:d1:39:16:04:4f:06:28:8c:f4:c4:d4:
8b:a5:41:21:93:a1:dd:32:f2:8d:f8:d4:02:c0:d8:46:fd:59:
aa:67:e7:d6:aa:df:1a:b6:62:7b:0d:6f:ee:f4:3d:fb:3c:75:
17:97:97:b7:a4:84:2a:57:1e:04:8b:66:b3:c4:25:7d:c3:dc:
76:07:64:d4:a6:7b:a4:68:9d:9c:40:a0:3b:6b:01:e1:e6:77:
ee:55:e8:fa:14:77:39:4e:4e:30:e4:c6:79:19:70:24:33:1d:
96:ad:de:c5:ff:6f:48:9a:9d:49:db:cb:2c:82:d4:a1:5b:3f:
51:35:a6:81:ee:07:8a:06:07:95:f7:20:7e:ee:36:ae:c1:cd:
11:5b:59:ba:bf:13:93:9b:fa:be:a8:db:fb:f8:e9:7e:db:54:
ad:b2:f2:08:ed:56:4a:7d:ff:96:c2:b4:b9:30:88:bf:17:d7:
6f:01:10:00:4a:86:2c:69:5d:a4:21:2c:7d:ed:d0:c3:68:1c:
f4:9d:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:28 2026 by rpki-client