Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLQJil3-Q71wF12O7kJFgk9ZeOU.roa
File: rLQJil3-Q71wF12O7kJFgk9ZeOU.roa (raw, json)
Hash identifier: o7KODOZxGk9XTutcg+1DNOBialMLHJcEJbxKvyXrq+4=
Subject key identifier: AC:B4:09:8A:5D:FE:43:BD:70:17:5D:8E:EE:42:45:82:4F:59:78:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0A01BC149F3C5A4DF6A7ED77FCFDC4522
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLQJil3-Q71wF12O7kJFgk9ZeOU.roa
Signing time: Mon 14 Sep 2026 13:29:28 +0000
ROA not before: Mon 14 Sep 2026 13:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 84.54.51.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:1b:c1:49:f3:c5:a4:df:6a:7e:d7:7f:cf:dc:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 14 13:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acb4098a5dfe43bd70175d8eee4245824f5978e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:1d:23:09:36:30:6e:5b:91:6b:9a:5d:a5:
07:95:74:f2:d7:e9:ef:c1:19:eb:c5:73:0c:56:fc:
84:e3:f6:97:de:e2:bb:46:24:60:13:e6:7a:ad:14:
da:bb:cd:23:91:ed:39:58:20:d3:e8:e1:c5:f7:0d:
c8:68:69:d3:a6:ec:da:d4:d5:65:1b:c9:f2:c5:fd:
7c:44:b8:b6:73:f8:d2:50:77:24:39:fe:2f:d8:08:
da:f6:3e:94:65:f0:26:73:76:c9:80:96:27:59:8d:
92:a7:62:57:d6:74:5a:ee:30:93:fc:d0:d6:66:7a:
d1:bf:24:42:27:68:1d:54:3e:dc:97:17:93:58:62:
b5:f5:bb:ec:09:7c:55:aa:37:2a:a9:fb:11:ab:f1:
37:1d:12:b9:89:8a:e4:e8:6b:91:a3:95:09:c9:c0:
77:00:c6:c6:60:02:25:09:10:e3:75:4e:93:87:84:
59:6a:dd:6f:f2:57:d7:32:e2:eb:de:9a:61:f0:65:
f5:9c:9d:bb:67:71:7d:a4:e3:c5:3a:b5:ea:c5:f5:
47:3c:98:49:0e:28:a7:45:26:ea:29:e1:c6:8a:b4:
06:b2:7d:ec:0a:b4:d2:75:6a:8f:18:79:aa:e6:d3:
07:ee:e8:19:59:f6:dd:ac:97:9b:e7:fb:c3:cc:14:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:09:8A:5D:FE:43:BD:70:17:5D:8E:EE:42:45:82:4F:59:78:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLQJil3-Q71wF12O7kJFgk9ZeOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
85.31.44.0/24
92.119.199.0/24
94.103.127.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3b:3a:76:4b:72:75:03:21:6c:4d:c9:80:9d:11:77:98:97:
3c:a7:ff:8c:2b:19:92:93:04:91:be:9c:ba:2b:ee:9c:11:1a:
cb:b7:ba:78:18:36:94:a2:0d:9f:01:69:62:b0:83:69:ed:2a:
8e:72:67:c9:fe:f0:ff:07:53:4f:69:d8:58:84:74:60:eb:c3:
38:e1:1a:90:9d:7a:15:82:cd:8f:2f:9d:38:80:2f:dc:72:56:
21:aa:26:28:10:92:54:86:7a:77:95:d4:8d:ae:44:af:98:d3:
c0:7d:fa:61:74:fe:4a:d2:a3:90:34:ae:b6:80:c9:e4:26:ba:
89:ef:59:e4:a2:70:e4:9f:c3:4f:18:62:d3:93:30:89:3e:e7:
46:b8:5b:16:8a:8d:52:3d:5b:d2:48:c9:50:a2:ca:30:ac:32:
41:f3:9e:d5:0a:ae:35:b8:84:0d:79:a9:09:24:f7:68:21:bc:
2b:6d:8f:f9:00:f7:88:40:13:7a:b5:b7:0f:30:03:ce:9c:a6:
18:84:3f:d8:45:93:8a:76:ce:53:56:a4:1d:c4:b1:a9:20:0d:
4b:86:a8:8a:f2:ed:98:18:e2:23:d6:13:14:30:b5:2e:25:9c:
e7:b6:34:e1:35:4c:4e:30:73:ae:53:09:ad:f2:a0:5c:3e:1f:
d5:f5:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 18:08:40 2026 by rpki-client