Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LoPh70ik-KAjzfxg3ijKa4O9uCo.roa
File: LoPh70ik-KAjzfxg3ijKa4O9uCo.roa (raw, json)
Hash identifier: J4tLyY6WlCMdEiWvOe/fJ7pBCBoYgF1kFGT6/S4Azo8=
Subject key identifier: 2E:83:E1:EF:48:A4:F8:A0:23:CD:FC:60:DE:28:CA:6B:83:BD:B8:2A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0B0B0BCCD35898D86B217443B87B35974
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LoPh70ik-KAjzfxg3ijKa4O9uCo.roa
Signing time: Thu 17 Sep 2026 18:46:07 +0000
ROA not before: Thu 17 Sep 2026 18:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a11:2a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:b0:bc:cd:35:89:8d:86:b2:17:44:3b:87:b3:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 17 18:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e83e1ef48a4f8a023cdfc60de28ca6b83bdb82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:56:c2:ab:b5:c4:e7:ec:cf:4b:64:94:9c:
9c:07:60:0e:e7:c8:d0:1b:a6:21:df:bb:80:39:37:
b4:a5:73:1e:f1:fb:b9:34:50:21:25:f0:2d:43:b3:
8e:60:6b:fd:9f:04:8a:ba:b5:3f:3c:6d:7d:2e:41:
23:b9:37:fc:2c:f6:4a:20:5c:82:14:55:3c:d8:d7:
bd:5f:ab:e3:c5:44:b7:62:96:0e:bd:e4:f8:a1:ce:
be:55:75:fc:4e:40:83:01:59:33:ff:83:3a:d4:6c:
58:ce:ee:a0:b1:32:23:86:a4:64:b8:ae:d1:21:d9:
43:2d:39:71:92:ec:c1:54:b3:22:fe:74:c2:5a:f5:
ee:10:4d:0f:cf:5b:91:08:3a:48:a2:e7:e8:ca:b4:
e9:99:f2:c2:a8:95:cf:f0:71:76:42:fa:86:41:cf:
b7:ee:78:f1:94:78:b5:10:84:05:3c:d3:17:03:75:
1a:b0:08:bb:48:63:e0:ae:16:73:0d:71:d8:9a:46:
7f:78:6b:cd:50:a6:43:18:a4:13:c3:11:c5:db:44:
b4:f2:f5:ce:42:b2:dd:1c:d8:bb:cb:01:aa:63:ef:
f6:c1:a7:5d:2c:f5:3e:32:06:5c:32:11:29:b7:c6:
7f:3b:ec:68:a2:ee:27:39:18:12:aa:82:5b:db:bb:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:E1:EF:48:A4:F8:A0:23:CD:FC:60:DE:28:CA:6B:83:BD:B8:2A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LoPh70ik-KAjzfxg3ijKa4O9uCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.94.171.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/24
195.177.94.0/23
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
a2:4c:c4:ef:88:8e:b0:ad:f6:d9:c1:f5:2a:ce:33:92:fa:15:
c0:8a:18:5c:fa:79:e5:14:6d:1d:e3:da:44:53:09:2c:de:2c:
3a:cd:c5:62:c4:55:c7:fb:ce:ec:04:8b:6a:f7:14:a3:34:77:
1c:1f:1e:54:d4:9a:4f:f5:d2:59:3e:fe:f1:c0:85:60:93:18:
43:2f:2d:e4:53:6d:06:49:c9:fe:62:dd:d4:07:a5:58:49:ed:
5e:2f:83:ac:0c:8c:cb:44:62:94:f1:8d:47:34:d5:88:3f:d8:
bf:8a:d0:22:a5:1f:0e:ae:30:0d:d7:c2:55:70:5c:6f:7d:46:
ec:e6:be:42:d2:46:3f:36:92:6f:90:37:8b:31:0b:6c:9c:1c:
46:98:6a:f7:36:08:7a:f8:65:0f:e9:0b:c4:f9:79:0c:76:85:
7d:93:b2:53:fc:49:88:38:5e:35:83:75:eb:e9:13:ae:be:c0:
69:13:ac:21:cf:9a:1a:ac:f0:19:b4:3a:2e:e0:f3:0c:fa:9e:
df:c0:6a:da:cf:44:7d:f2:e7:3c:22:90:e7:d9:b8:43:b1:cc:
55:a8:43:b0:10:df:d7:f1:19:af:d7:99:f5:97:6a:30:e9:71:
78:86:87:c6:25:12:63:9f:48:38:09:88:97:f2:8f:1a:52:60:
c8:41:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:16:06 2026 by rpki-client