Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/lrxW-68xMEjuQOGQtmcz2oD98IQ.roa
File: lrxW-68xMEjuQOGQtmcz2oD98IQ.roa (raw, json)
Hash identifier: Aj4NQFWqkGRsVLSnM+GlHUa3QlgiT+8/Rte7ZwlNNS8=
Subject key identifier: 96:BC:56:FB:AF:31:30:48:EE:40:E1:90:B6:67:33:DA:80:FD:F0:84
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A0451F3B1E876C7A051684873126171195
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/lrxW-68xMEjuQOGQtmcz2oD98IQ.roa
Signing time: Thu 27 Aug 2026 21:27:49 +0000
ROA not before: Thu 27 Aug 2026 21:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211908
IP address blocks: 185.194.8.0/22 maxlen: 24
2a0c:3440::/29 maxlen: 48
2a0c:3440::/48 maxlen: 48
2a0c:3440:1::/48 maxlen: 48
2a0c:3440:3::/48 maxlen: 48
2a0c:3440:4::/48 maxlen: 48
2a0c:3440:5::/48 maxlen: 48
2a0c:3440:6::/48 maxlen: 48
2a0c:3440:7::/48 maxlen: 48
2a0c:3440:8::/48 maxlen: 48
2a0c:3440:9::/48 maxlen: 48
2a0c:3440:a::/48 maxlen: 48
2a0c:3440:b::/48 maxlen: 48
2a0c:3440:c::/48 maxlen: 48
2a0c:3440:d::/48 maxlen: 48
2a0c:3440:e::/48 maxlen: 48
2a0c:3440:f::/48 maxlen: 48
2a0c:3440:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:1f:3b:1e:87:6c:7a:05:16:84:87:31:26:17:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Aug 27 21:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96bc56fbaf313048ee40e190b66733da80fdf084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:f5:88:2d:56:46:68:fa:e2:99:e9:d0:20:
84:86:6c:d6:56:22:55:49:9e:30:5a:13:c8:d0:22:
a3:db:1c:b7:56:da:d3:c9:7b:47:db:96:c2:75:3c:
bc:01:2e:45:d2:3a:9b:a8:f1:39:c9:7c:ff:4f:df:
bd:98:6f:e9:a3:5f:5f:e6:1d:7e:f4:2c:5d:bb:fc:
39:a1:7d:df:87:43:32:85:52:ed:49:34:1a:2b:c1:
f1:9b:97:37:e1:c0:29:87:24:2a:2f:a6:9c:33:53:
47:58:be:d4:7c:16:48:cc:17:78:26:02:c7:8d:fd:
c2:75:be:0a:14:2c:db:99:b1:b2:36:ac:6b:9a:02:
90:ed:78:b8:d9:78:4a:a3:12:29:25:f1:c5:eb:7f:
62:9e:f3:6c:6b:2c:5b:3b:a1:37:df:f1:0e:7e:5f:
a5:ca:67:d7:bb:d6:e5:4c:b0:28:81:d0:22:04:68:
79:b1:20:ec:56:f6:1a:68:2b:32:dd:0d:e5:e5:f8:
63:9e:cb:38:19:ed:dd:71:af:5d:da:fb:5e:3f:f1:
31:3a:84:94:38:8e:c0:78:69:42:53:a2:38:2f:e9:
38:96:37:db:fc:88:3d:64:4b:60:c3:70:d0:60:e4:
3c:ab:cb:03:49:33:3d:2c:07:6a:81:56:3a:e7:a0:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:56:FB:AF:31:30:48:EE:40:E1:90:B6:67:33:DA:80:FD:F0:84
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/lrxW-68xMEjuQOGQtmcz2oD98IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
IPv6:
2a0c:3440::/29
Signature Algorithm: sha256WithRSAEncryption
31:e5:44:4e:32:92:0e:2e:2d:f7:e6:30:68:dd:dc:83:64:1f:
48:55:32:f9:26:d4:ea:ae:e9:a8:ba:3b:9b:9f:13:93:6a:ca:
ff:c1:cd:99:04:7b:40:61:b1:6c:0f:9f:e5:15:ce:16:fe:18:
3f:cc:3a:8a:b3:58:7f:01:42:b4:27:8f:b1:e2:a6:68:72:f4:
35:41:0e:c3:05:d8:5f:5b:9b:bb:20:0a:3a:19:c0:d3:c2:4c:
dd:3b:9f:94:16:55:fc:04:5c:35:4e:d4:9e:25:15:2f:81:14:
dc:08:ca:25:a3:bf:74:42:dd:8f:bd:70:84:33:58:33:b3:a4:
9c:4e:2f:aa:ec:02:d4:01:62:08:cd:1f:8c:c2:9c:b7:8f:83:
d0:d6:ee:ff:7b:d8:bc:f7:c2:46:d8:a6:f2:f6:68:a7:60:1b:
ca:0c:81:1d:bd:12:71:6a:ec:94:d3:f0:27:29:41:1c:33:77:
56:9f:51:35:fe:9c:d8:79:a4:a7:a4:35:78:ff:33:e6:8f:bf:
33:a8:f3:b7:0d:1a:7d:49:9f:f3:86:e6:0c:e7:c0:d4:72:69:
58:16:7f:4b:16:53:8f:dd:e5:d7:80:00:b2:16:ce:0c:ec:9d:
aa:37:5a:20:6f:f1:60:6b:cb:b6:db:dd:da:98:4d:07:13:59:
e5:99:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:54 2026 by rpki-client