Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa
File: k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa (raw, json)
Hash identifier: WWrThQ244IWu8OYVTPeLpxaxBpbHuCRQtgMgtXzO41g=
Subject key identifier: 93:52:D9:F9:41:4D:5F:E1:98:0B:F0:9B:20:20:B9:BC:0C:A1:A8:65
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 019F319165EE17CBCE019BA6A04228D61966
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa
Signing time: Sun 05 Jul 2026 09:17:20 +0000
ROA not before: Sun 05 Jul 2026 09:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:91:65:ee:17:cb:ce:01:9b:a6:a0:42:28:d6:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jul 5 09:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9352d9f9414d5fe1980bf09b2020b9bc0ca1a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:42:20:c9:63:83:f0:b0:93:29:96:2b:36:
fc:d3:c3:27:f1:25:55:2f:f6:2c:cc:42:de:38:2d:
ad:0a:7a:b0:ba:80:82:c2:cf:7c:a9:8a:89:c6:ff:
82:dd:d5:c9:75:79:fc:01:c1:38:7b:9e:46:12:5d:
e9:ae:de:3c:50:32:5c:17:6f:ad:0a:18:fb:59:c2:
c0:1b:96:79:1c:ac:ad:ba:55:3a:f8:a9:f1:eb:63:
2e:9d:9f:81:d1:ec:32:5b:a2:d4:1e:06:a3:19:33:
dc:f5:3c:1f:0e:f0:b7:18:54:a8:1d:c2:cb:f1:10:
b9:62:22:e3:02:54:29:1f:c5:81:86:6d:54:9a:67:
c2:a5:46:24:03:b6:f0:4f:23:90:70:8f:06:54:01:
80:f8:ee:03:57:ab:c8:c9:a8:34:62:b4:e8:8b:cc:
e5:fd:8a:76:08:0f:a8:60:f6:0c:02:b0:da:2d:93:
51:4d:bb:81:32:de:fc:c4:fa:70:85:70:ab:26:68:
e1:eb:08:41:65:15:51:1b:45:f0:e5:4b:8d:51:a7:
59:e7:3e:40:88:bd:00:90:90:b3:df:13:97:bd:55:
de:df:67:3c:6b:6c:0d:59:00:70:71:ba:1d:96:dd:
f5:dc:60:09:16:04:51:9a:72:6f:54:e0:85:8c:c5:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:D9:F9:41:4D:5F:E1:98:0B:F0:9B:20:20:B9:BC:0C:A1:A8:65
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
185.239.177.0/24
195.69.228.0/24
195.69.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:80:0a:f5:9e:d6:eb:1f:91:44:7b:48:ab:f7:0d:2b:47:48:
11:df:fd:2c:63:49:c2:37:d9:9a:e9:1d:80:fa:c5:e5:2c:5c:
4c:a4:a3:1e:e7:a9:e7:17:13:c8:0e:b0:9c:bd:f4:97:9b:42:
17:1b:fb:89:18:66:bb:43:49:1e:53:75:e1:92:32:7b:39:50:
9b:c5:11:18:49:4c:95:c0:70:05:2b:34:06:24:6c:fa:b4:12:
f8:91:fe:2a:16:7c:18:6b:d9:47:66:60:af:74:4e:24:8d:f5:
26:98:17:2b:49:73:3d:11:1f:27:09:5c:64:8e:b4:98:f7:44:
2c:d8:eb:a1:b3:d2:b0:02:2d:f0:a7:a4:b0:25:79:df:36:db:
fc:49:70:b5:9b:0a:d9:87:c6:59:12:70:b1:42:ec:90:8d:e4:
b6:a6:bc:71:f0:46:a5:f2:ab:4c:7e:0c:94:71:13:20:5c:71:
a5:95:be:3a:7b:eb:4c:20:f4:dc:7e:5a:a0:18:89:e2:c9:ab:
aa:2e:11:78:53:a1:90:49:49:b4:be:31:58:ca:b9:a5:a6:27:
2a:4f:b2:b8:28:6f:26:33:77:1d:c6:7f:9e:6b:51:5b:71:b5:
e9:ad:2f:36:e1:36:c6:d9:e7:e1:9b:92:84:3a:3f:64:55:da:
db:da:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:51 2026 by rpki-client