Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LCkOxNFHyt_2X-OJi1OxLx0WKl0.roa
File: LCkOxNFHyt_2X-OJi1OxLx0WKl0.roa (raw, json)
Hash identifier: Y4vARe03kzNNClmUb2h6dLXzVj/G4FGf3R/CFoD9mXY=
Subject key identifier: 2C:29:0E:C4:D1:47:CA:DF:F6:5F:E3:89:8B:53:B1:2F:1D:16:2A:5D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1156B781E716929AA6F5502D74E5A8739
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LCkOxNFHyt_2X-OJi1OxLx0WKl0.roa
Signing time: Wed 07 Oct 2026 08:12:06 +0000
ROA not before: Wed 07 Oct 2026 08:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:6b:78:1e:71:69:29:aa:6f:55:02:d7:4e:5a:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 7 08:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c290ec4d147cadff65fe3898b53b12f1d162a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:70:82:0b:05:2a:f6:01:57:70:77:8d:b8:
7f:19:5e:23:d4:02:e7:6f:7d:a5:e4:5a:79:7a:1c:
f0:7b:e1:38:f4:a3:b7:11:3d:59:10:e3:a1:39:6f:
d6:18:0e:40:90:83:7e:ce:fc:fb:80:7c:05:b5:4a:
a1:b9:9f:c7:d0:6e:aa:d8:af:cd:d5:b3:97:c0:2d:
5f:92:fc:59:17:5d:55:64:06:83:69:b0:9b:ed:6b:
1c:81:c0:e7:d7:74:f1:b4:f6:f9:10:27:ef:ba:a3:
2a:f3:13:47:5a:e6:51:fe:f1:84:9a:64:f2:00:9d:
91:d8:84:f5:0e:a5:b4:ca:0b:b1:11:39:04:f1:02:
eb:ff:f2:1e:33:75:eb:16:c5:bf:16:19:89:c2:a5:
fb:6c:70:c9:89:9f:85:37:77:14:7e:22:ac:05:c9:
85:c9:30:d3:24:0f:48:93:2b:fe:46:8a:37:3f:91:
ef:f1:b6:69:63:0a:32:54:ce:e7:f4:b5:48:b2:8b:
93:5e:1a:40:54:d4:0b:2f:48:91:94:6d:33:9b:60:
e4:f7:43:5e:a8:3d:5a:ff:16:df:92:aa:95:d7:c3:
05:30:3a:fd:9d:fe:b4:de:5c:7c:f7:7f:e7:df:3f:
bf:77:c6:5b:11:9c:18:64:60:9d:e1:81:3f:dd:da:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:0E:C4:D1:47:CA:DF:F6:5F:E3:89:8B:53:B1:2F:1D:16:2A:5D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LCkOxNFHyt_2X-OJi1OxLx0WKl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.140.0/24
89.43.143.0/24
89.46.3.0/24
89.47.117.0/24
89.47.125.0-89.47.126.255
93.113.181.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6d:c8:df:62:d9:e5:4b:01:e5:fe:f4:f6:cb:6d:bb:9a:ee:
52:8e:81:03:1f:27:ab:64:5a:e1:ce:d3:0e:27:05:de:f8:fb:
e9:e0:16:23:77:b3:ec:8f:64:c9:bb:6f:4e:51:64:64:df:0a:
4e:79:9d:c6:d7:82:b7:20:d1:3c:b5:d2:24:3f:e6:f1:49:67:
9d:f1:b9:7f:20:4c:c1:84:7a:5d:00:9b:6c:f4:8f:65:05:ee:
b8:6b:0a:a9:85:85:79:aa:67:8d:c1:1d:53:65:d7:1d:64:4d:
1e:65:21:7e:b4:37:c1:5b:01:ea:a4:cf:c6:84:57:84:86:21:
ae:83:1d:b2:76:1a:ba:70:dd:ab:1b:db:1e:b0:8b:ae:9d:a3:
e6:64:a4:66:22:a4:41:33:fb:d5:b7:ee:6e:6d:dc:8e:21:62:
7c:f6:11:4b:a7:eb:e1:6d:62:f4:92:09:a7:34:e3:41:18:9c:
97:46:c0:1b:a2:dd:e2:34:ed:2d:28:34:f1:da:ae:1b:89:85:
1b:62:49:2d:17:a8:ff:2f:c5:1e:81:d2:e6:cf:11:73:f3:f8:
d0:2f:5c:f9:e2:ff:ad:45:f9:d0:e0:ad:b1:ff:f9:40:70:35:
fb:06:a6:ab:fc:2a:1c:6c:3f:9e:0e:a1:d1:f8:49:85:ae:b5:
65:68:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:58 2026 by rpki-client