Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/lDFtsbALGfgFN-KrmlEBLtt2u4s.roa
File: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (raw, json)
Hash identifier: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=
Subject key identifier: 94:31:6D:B1:B0:0B:19:F8:05:37:E2:AB:9A:51:01:2E:DB:76:BB:8B
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 019F23684F022D9F46C4F8FFE291161F47BC
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/lDFtsbALGfgFN-KrmlEBLtt2u4s.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25248
IP address blocks: 82.99.128.0/18 maxlen: 18
84.244.64.0/18 maxlen: 18
85.207.0.0/16 maxlen: 16
85.207.220.0/22 maxlen: 22
212.158.128.0/19 maxlen: 19
2a02:a40::/32 maxlen: 32
2a02:a41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:02:2d:9f:46:c4:f8:ff:e2:91:16:1f:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94316db1b00b19f80537e2ab9a51012edb76bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:90:2e:6a:64:7e:1a:df:a1:11:5c:6b:78:
2c:5a:18:07:82:50:72:54:ed:af:6c:2f:53:4c:e3:
f3:c6:d1:00:b6:7d:5c:6c:a2:98:35:af:3b:38:34:
31:01:4c:a5:4d:23:d8:48:90:79:59:7f:0f:ee:b3:
0f:bd:f7:ec:90:7f:12:03:27:36:3e:66:4f:98:d3:
85:cf:15:95:53:3c:e6:1f:1f:57:0e:d2:3f:0f:9e:
42:5d:fd:02:60:25:22:29:63:b0:f8:ea:65:4c:0f:
75:99:f2:4b:0a:30:81:1b:81:fd:91:75:ed:e9:27:
f5:26:b3:69:47:19:ff:25:dd:49:c3:e1:0e:29:3a:
29:5e:13:f1:4d:08:75:d1:6d:6c:17:2a:16:91:36:
13:b0:1d:3b:4a:b9:1a:2a:50:00:de:7b:8f:13:68:
9d:c3:49:2e:10:0a:9d:e0:35:f7:88:28:c5:3e:3c:
a5:7f:a5:60:2e:a6:64:80:a5:4a:b9:87:0e:db:32:
27:6f:22:1e:cb:95:43:fa:56:1b:96:97:1f:42:30:
39:1d:27:2b:7b:7a:6d:09:a9:b2:5e:02:5e:af:9b:
42:bd:71:3c:61:d1:93:d1:a2:65:81:60:d9:b8:de:
37:e8:cd:b0:06:1d:0d:f0:94:26:f7:68:3e:5c:db:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:6D:B1:B0:0B:19:F8:05:37:E2:AB:9A:51:01:2E:DB:76:BB:8B
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/lDFtsbALGfgFN-KrmlEBLtt2u4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.99.128.0/18
84.244.64.0/18
85.207.0.0/16
212.158.128.0/19
IPv6:
2a02:a40::/31
Signature Algorithm: sha256WithRSAEncryption
60:86:5c:7d:2d:cc:a6:f1:03:ae:5e:6c:7d:55:98:9b:fc:d0:
df:6d:64:06:ed:02:f6:78:56:0c:af:a7:58:a1:a8:49:f5:72:
0e:e6:6e:93:c0:5a:36:52:be:f2:2e:99:ab:dd:cc:f4:e6:e0:
88:7a:b5:20:be:be:ec:cf:bd:24:b6:ec:02:8b:31:0a:c1:d3:
fb:da:25:6d:aa:88:ac:1e:ca:ea:04:bd:34:7a:d2:26:07:1b:
59:b2:ec:39:4c:5c:5f:da:d9:14:28:15:e5:0a:b7:44:3b:73:
3f:fd:76:cb:28:6e:ab:ab:22:4f:b2:74:92:c4:4b:c6:ec:4d:
83:0d:e9:60:89:96:e7:c0:e8:d9:ec:ed:35:1c:e6:17:7e:17:
cd:3d:2e:35:45:6a:b1:60:fc:29:d1:9c:d2:c2:14:19:fd:8d:
6d:b4:ba:1a:ae:03:aa:28:00:06:86:2c:1a:31:4f:82:36:ad:
6b:8c:8d:88:98:2f:9f:25:eb:82:97:bd:8c:aa:57:6b:3f:c3:
00:68:56:88:ae:62:2f:24:64:2f:ae:1e:d5:ba:2a:5b:be:a7:
a2:9b:fa:91:e4:0d:29:dc:5d:aa:ab:48:e4:be:24:45:bb:2e:
b0:44:37:b7:33:6b:f8:54:40:0b:80:da:f2:57:e2:03:e0:5e:
d9:31:40:6a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ8jaE8CLZ9GxPj/4pEWH0e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmMwOWJhZWJjYmFmNjNmNWU5YTgyYzBhMWQ5ZDdiM2Vh
NzdhNjUwHhcNMjYwNzAyMTUxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDMxNmRiMWIwMGIxOWY4MDUzN2UyYWI5YTUxMDEyZWRiNzZiYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmGQLmpkfhrfoRFca3gsWhgHglBy
VO2vbC9TTOPzxtEAtn1cbKKYNa87ODQxAUylTSPYSJB5WX8P7rMPvffskH8SAyc2
PmZPmNOFzxWVUzzmHx9XDtI/D55CXf0CYCUiKWOw+OplTA91mfJLCjCBG4H9kXXt
6Sf1JrNpRxn/Jd1Jw+EOKTopXhPxTQh10W1sFyoWkTYTsB07SrkaKlAA3nuPE2id
w0kuEAqd4DX3iCjFPjylf6VgLqZkgKVKuYcO2zInbyIey5VD+lYblpcfQjA5HScr
e3ptCamyXgJer5tCvXE8YdGT0aJlgWDZuN436M2wBh0N8JQm92g+XNsDxQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJQxbbGwCxn4BTfiq5pRAS7bdruLMB8GA1UdIwQY
MBaAFLS8Cbrry69j9emoLAodnXs+p3plMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvbERGdHNiQUxHZmdGTi1Lcm1sRUJMdHQydTRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQGUmOAAwQG
VPRAAwMAVc8DBAXUnoAwDQQCAAIwBwMFASoCCkAwDQYJKoZIhvcNAQELBQADggEB
AGCGXH0tzKbxA65ebH1VmJv80N9tZAbtAvZ4Vgyvp1ihqEn1cg7mbpPAWjZSvvIu
mavdzPTm4Ih6tSC+vuzPvSS27AKLMQrB0/vaJW2qiKweyuoEvTR60iYHG1my7DlM
XF/a2RQoFeUKt0Q7cz/9dssobqurIk+ydJLES8bsTYMN6WCJlufA6Nns7TUc5hd+
F809LjVFarFg/CnRnNLCFBn9jW20uhquA6ooAAaGLBoxT4I2rWuMjYiYL58l64KX
vYyqV2s/wwBoVoiuYi8kZC+uHtW6Klu+p6Kb+pHkDSncXaqrSOS+JEW7LrBEN7cz
a/hUQAuA2vJX4gPgXtkxQGo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:58 2026 by rpki-client