Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/LJwMNAoddFUvzpN6T8k-8rbjOKY.roa
File: LJwMNAoddFUvzpN6T8k-8rbjOKY.roa (raw, json)
Hash identifier: B2HxHsNXBHiudzjhLg1NzvTriQ3OOiMthM6mYYRuKxk=
Subject key identifier: 2C:9C:0C:34:0A:1D:74:55:2F:CE:93:7A:4F:C9:3E:F2:B6:E3:38:A6
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01A0E7655AF7664042D02B002B0F8DCDBBCD
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/LJwMNAoddFUvzpN6T8k-8rbjOKY.roa
Signing time: Mon 28 Sep 2026 09:42:54 +0000
ROA not before: Mon 28 Sep 2026 09:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61098
IP address blocks: 85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
89.145.160.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
89.145.166.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
92.39.56.0/22 maxlen: 24
92.39.60.0/22 maxlen: 24
138.124.208.0/22 maxlen: 24
138.124.212.0/22 maxlen: 24
138.124.216.0/22 maxlen: 24
138.124.220.0/22 maxlen: 24
151.145.192.0/22 maxlen: 24
151.145.196.0/22 maxlen: 22
151.145.200.0/21 maxlen: 22
151.145.200.0/22 maxlen: 22
151.145.208.0/22 maxlen: 24
151.145.212.0/22 maxlen: 24
151.145.216.0/22 maxlen: 24
151.145.220.0/22 maxlen: 24
159.100.240.0/22 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.248.0/21 maxlen: 24
161.104.192.0/19 maxlen: 24
161.104.192.0/22 maxlen: 24
185.19.28.0/22 maxlen: 24
185.150.8.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.176.0/22 maxlen: 24
194.182.180.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
2a04:c41::/32 maxlen: 48
2a04:c42::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c45::/32 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc0:10::/44 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:20::/44 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc0:30::/44 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:40::/44 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a07:6cc0:50::/44 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:60::/44 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:70::/44 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a07:6cc0:80::/44 maxlen: 48
2a07:6cc0:80::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a07:6cc2:f11::/48 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
2a07:6cc3::/32 maxlen: 48
2a07:6cc3:f11::/48 maxlen: 48
2a07:6cc3:f12::/48 maxlen: 48
2a07:6cc4::/32 maxlen: 48
2a07:6cc5::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:65:5a:f7:66:40:42:d0:2b:00:2b:0f:8d:cd:bb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Sep 28 09:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c9c0c340a1d74552fce937a4fc93ef2b6e338a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:50:41:4f:9d:e9:36:05:83:2f:e4:41:ac:
17:9e:0e:96:04:e8:76:45:ff:ed:66:78:ea:f7:59:
46:67:0f:f5:b1:ec:47:90:c8:b9:05:b2:e5:f7:1e:
fa:7c:08:f7:68:91:a5:9e:4f:99:80:b0:d8:0d:d5:
b4:3f:f0:8e:bb:00:a5:a2:53:7b:4a:d4:e0:10:3f:
13:3a:d3:fc:19:19:76:1b:10:08:f5:fd:bf:c0:07:
e8:ec:07:01:7a:e1:c2:1a:0f:67:f2:b0:7a:f9:98:
28:06:8d:bc:43:6e:18:1e:7d:09:9b:80:10:fa:b4:
af:46:a3:c8:c3:51:60:3a:2d:b6:85:af:36:20:fe:
6e:32:2b:de:87:9f:1c:6c:09:ff:00:45:f3:cd:b1:
35:6e:99:36:c2:69:4c:b2:df:b6:ad:d3:8a:f3:06:
1d:83:6e:49:21:cc:5d:a8:29:79:14:40:f5:49:a0:
17:d3:45:84:d3:19:39:b8:22:1b:82:ad:f1:6a:ff:
00:ac:c7:05:75:bc:32:6d:62:08:39:be:f9:c3:db:
37:88:35:dd:7a:de:df:e7:88:e5:3f:48:d3:03:4e:
b2:4f:3c:73:93:84:d2:b0:ea:95:bd:27:fb:20:c8:
a1:ec:cd:e4:6a:d9:e1:a2:0e:0f:6f:c9:fc:b5:37:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:0C:34:0A:1D:74:55:2F:CE:93:7A:4F:C9:3E:F2:B6:E3:38:A6
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/LJwMNAoddFUvzpN6T8k-8rbjOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
92.39.56.0/21
138.124.208.0/20
151.145.192.0/19
159.100.240.0/20
161.104.192.0/19
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:8f:ffff:ffff:ffff:ffff:ffff
2a07:6cc1::-2a07:6cc5:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:ff:b7:ef:48:fd:3c:ec:f0:01:06:08:62:ac:b8:6e:f0:c7:
04:39:ee:92:da:5a:9a:3d:6a:d1:cd:83:33:5d:78:7d:24:ab:
8c:b8:fe:d8:a1:91:27:c4:85:08:90:2d:94:af:25:36:7a:ad:
69:25:5f:8d:77:b4:cb:18:08:a3:85:16:25:56:b1:d7:ef:c5:
53:f9:c9:4d:1d:23:2f:6a:bf:cd:cc:f8:e2:f4:6c:19:31:f0:
9f:8a:6f:36:1e:f8:78:4d:c5:8f:f1:ec:b7:38:80:b0:56:38:
7d:af:cc:90:22:78:a5:72:71:30:2c:0a:bb:0f:be:1a:98:7f:
d8:fb:52:04:95:95:53:1c:d9:25:f3:3a:63:a4:7e:b2:e9:c3:
db:f7:b1:84:8f:42:ff:d2:3c:0b:78:c7:0a:c4:7d:1f:a7:ad:
d9:a1:27:69:46:d5:4c:d0:8f:6a:ce:e4:24:96:6e:c5:98:c7:
d5:4b:85:7d:7b:ef:26:89:1d:6b:6a:80:c6:81:ed:68:be:cc:
05:d6:03:7b:c6:73:21:a1:1a:1b:20:0c:90:45:3d:72:56:14:
e8:a6:3d:dd:86:69:0a:4f:7f:d9:c9:17:ef:08:ab:6d:6e:a1:
f0:08:2d:59:39:90:a5:c1:48:e5:cc:71:fd:87:97:9e:4d:62:
c2:2d:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:26 2026 by rpki-client