Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lDr5_W-U86DmP-RDvCxRRHjNN8k.roa
File: lDr5_W-U86DmP-RDvCxRRHjNN8k.roa (raw, json)
Hash identifier: 9vEm0JjnwVz5FNGEAjnOHkU6ITQjbau+UugMtGj2Qyg=
Subject key identifier: 94:3A:F9:FD:6F:94:F3:A0:E6:3F:E4:43:BC:2C:51:44:78:CD:37:C9
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0432C44B1B3A663EBA188AE6EB4DF5BCE
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lDr5_W-U86DmP-RDvCxRRHjNN8k.roa
Signing time: Thu 27 Aug 2026 12:22:49 +0000
ROA not before: Thu 27 Aug 2026 12:22:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218850
IP address blocks: 185.231.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:2c:44:b1:b3:a6:63:eb:a1:88:ae:6e:b4:df:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 27 12:22:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=943af9fd6f94f3a0e63fe443bc2c514478cd37c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:4c:f2:f5:6d:fa:6e:ee:aa:3d:62:25:f2:
f2:80:9d:57:65:cd:6a:d7:0b:f8:3f:df:44:c6:5c:
f5:96:94:92:0c:5d:88:49:a1:4e:8b:e5:87:be:ba:
0e:7d:38:9c:cd:96:e1:d8:51:53:93:52:d2:3f:3a:
1d:5a:7b:b2:a5:23:3d:03:39:30:ba:3a:f3:7f:b0:
92:d4:40:64:12:7d:44:6e:9e:81:ba:d5:c5:10:34:
c5:e6:5d:d4:98:ec:f3:8d:29:0c:40:23:4e:7e:28:
2f:d9:00:7f:c2:34:29:e3:62:7f:00:73:b2:58:f4:
a0:60:d7:fe:a0:16:bf:b7:d2:1a:71:11:29:28:7a:
ec:f1:cc:3c:f5:05:f8:06:3c:c8:31:38:c6:24:09:
5f:f0:08:a8:0d:72:3d:4e:8e:73:d2:7f:f6:09:bc:
28:d8:c0:21:a0:bf:6e:45:d2:ce:87:37:5f:03:02:
34:6b:65:44:0b:5e:03:0e:79:e3:61:a8:82:7a:b7:
f7:31:7b:55:f2:05:d0:f9:45:1c:23:bc:08:b8:62:
a7:5a:24:e1:f5:d3:92:70:b3:75:22:e8:32:a6:d1:
3a:13:44:04:0c:2f:63:2b:d3:e6:77:f3:3e:33:e2:
7d:53:56:21:c1:61:e0:51:53:ee:4d:66:b6:ba:f7:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:F9:FD:6F:94:F3:A0:E6:3F:E4:43:BC:2C:51:44:78:CD:37:C9
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/lDr5_W-U86DmP-RDvCxRRHjNN8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.226.0/24
Signature Algorithm: sha256WithRSAEncryption
91:98:d4:cb:1f:42:21:ec:e9:4a:51:c4:bb:71:a2:4e:7a:f2:
c7:3c:b5:f0:0a:e3:ff:e2:86:db:db:f6:b4:42:ca:14:97:d7:
10:f9:e0:d4:f6:bf:15:23:79:8e:ad:05:0e:50:e5:2e:d5:22:
27:17:25:58:f8:9d:1c:50:a0:29:42:a5:8a:98:42:ff:62:b4:
b2:cc:60:6d:4b:a8:8e:61:b8:98:73:33:ad:7a:11:ab:f0:96:
ba:af:0d:fe:48:0e:16:13:9e:0a:2a:17:fa:b8:13:5b:65:d2:
18:f0:58:e8:80:0b:b0:91:a5:e4:57:34:03:75:f8:42:bc:4d:
1c:88:a7:ee:be:e9:7a:4d:d7:41:94:34:5f:62:bc:0e:10:55:
d6:7c:e9:36:bc:e2:aa:14:fc:35:2f:84:d0:cf:0b:c7:d3:70:
0f:fe:c3:ba:1c:65:4d:e0:e9:d3:80:79:9d:2a:47:16:8f:92:
6a:88:2c:66:27:ab:ee:f6:2a:f9:db:ec:cf:ae:50:35:b3:78:
bd:d5:5d:9b:05:f3:ba:aa:01:6b:8c:77:ee:5e:b9:ce:db:e0:
14:0b:44:fe:ec:38:64:e9:cf:05:9a:c0:7e:97:75:1c:0e:7f:
7e:40:26:cb:29:aa:de:0e:25:b7:86:68:c2:e5:0f:2e:66:b9:
fa:d5:3f:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBDLESxs6Zj66GIrm6031vOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI3MTIyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDNhZjlmZDZmOTRmM2EwZTYzZmU0NDNiYzJjNTE0NDc4Y2QzN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw9M8vVt+m7uqj1iJfLygJ1XZc1q
1wv4P99Exlz1lpSSDF2ISaFOi+WHvroOfTiczZbh2FFTk1LSPzodWnuypSM9Azkw
ujrzf7CS1EBkEn1Ebp6ButXFEDTF5l3UmOzzjSkMQCNOfigv2QB/wjQp42J/AHOy
WPSgYNf+oBa/t9IacREpKHrs8cw89QX4BjzIMTjGJAlf8AioDXI9To5z0n/2Cbwo
2MAhoL9uRdLOhzdfAwI0a2VEC14DDnnjYaiCerf3MXtV8gXQ+UUcI7wIuGKnWiTh
9dOScLN1IugyptE6E0QEDC9jK9Pmd/M+M+J9U1YhwWHgUVPuTWa2uveexQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQ6+f1vlPOg5j/kQ7wsUUR4zTfJMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvbERyNV9XLVU4NkRtUC1SRHZDeFJSSGpOTjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefiMA0G
CSqGSIb3DQEBCwUAA4IBAQCRmNTLH0Ih7OlKUcS7caJOevLHPLXwCuP/4obb2/a0
QsoUl9cQ+eDU9r8VI3mOrQUOUOUu1SInFyVY+J0cUKApQqWKmEL/YrSyzGBtS6iO
YbiYczOtehGr8Ja6rw3+SA4WE54KKhf6uBNbZdIY8FjogAuwkaXkVzQDdfhCvE0c
iKfuvul6TddBlDRfYrwOEFXWfOk2vOKqFPw1L4TQzwvH03AP/sO6HGVN4OnTgHmd
KkcWj5JqiCxmJ6vu9ir52+zPrlA1s3i91V2bBfO6qgFrjHfuXrnO2+AUC0T+7Dhk
6c8FmsB+l3UcDn9+QCbLKareDiW3hmjC5Q8uZrn61T8z
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:07:14 2026 by rpki-client