Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/lhVeZQZpdP80NLJweMv-J52SRu4.roa
File: lhVeZQZpdP80NLJweMv-J52SRu4.roa (raw, json)
Hash identifier: q+SU74pcp0OTQ2H8mBUZ7+Emk1UFPbb7YvdPcrQdj3c=
Subject key identifier: 96:15:5E:65:06:69:74:FF:34:34:B2:70:78:CB:FE:27:9D:92:46:EE
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 01A0DFB5E2710FAD2C7455969A4C796C7F7E
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/lhVeZQZpdP80NLJweMv-J52SRu4.roa
Signing time: Sat 26 Sep 2026 21:53:54 +0000
ROA not before: Sat 26 Sep 2026 21:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210045
IP address blocks: 85.159.23.0/24 maxlen: 24
217.28.133.0/24 maxlen: 24
2a12:2140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:b5:e2:71:0f:ad:2c:74:55:96:9a:4c:79:6c:7f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Sep 26 21:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96155e65066974ff3434b27078cbfe279d9246ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:c8:14:03:ee:a9:9e:3d:8d:85:ac:f2:1f:
f5:a2:3f:26:d0:b6:7f:6e:91:84:f2:79:ce:ae:18:
8a:20:3d:41:dc:66:ad:2a:d8:46:4c:29:78:ad:95:
85:8a:35:dd:34:e1:3f:a3:fc:0e:45:d2:e6:71:9f:
23:f4:07:db:3e:bd:1f:d1:af:0f:d7:32:90:98:ce:
25:31:16:12:83:6c:29:43:a1:39:a7:bd:e7:cc:d1:
b3:c6:5b:b2:c3:56:60:cb:ca:65:58:73:93:f8:a0:
98:b1:d4:95:8a:37:85:53:25:e2:44:36:cf:c0:85:
20:a3:c9:0a:ad:72:ca:88:d3:93:06:68:88:3e:f3:
3c:fb:83:94:f0:ef:50:60:8b:6e:a6:f9:b6:32:4d:
c8:a4:b3:09:53:5b:db:90:5e:f3:56:74:a2:07:ea:
8c:3e:70:9b:b0:1d:c8:b0:6e:4e:dc:30:fc:e4:45:
b8:0a:bf:d9:77:16:bf:c9:f9:73:e3:1b:91:46:d3:
d4:a8:e8:1a:4a:a2:92:76:38:ca:30:f3:a5:e4:01:
ea:d3:6f:fc:ec:28:c4:2b:f2:69:dc:ac:2d:0a:0c:
b1:10:f6:92:28:23:27:dc:bc:d9:4f:af:b3:e6:d9:
0c:b6:99:40:1a:47:63:c2:4d:8e:0d:08:b5:35:bc:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:5E:65:06:69:74:FF:34:34:B2:70:78:CB:FE:27:9D:92:46:EE
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/lhVeZQZpdP80NLJweMv-J52SRu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.23.0/24
217.28.133.0/24
IPv6:
2a12:2140::/29
Signature Algorithm: sha256WithRSAEncryption
9b:46:2d:ad:6f:54:bb:d1:ab:89:42:78:dd:60:b7:80:c4:d6:
77:7c:18:69:57:77:9c:7d:e9:c4:4c:72:cc:ca:e9:43:59:f0:
02:ea:29:18:a3:b3:fa:ba:77:60:d9:74:6e:05:00:66:33:a9:
4c:95:48:5a:ca:41:d5:60:45:94:da:ed:85:28:66:99:b3:e9:
fe:7f:cd:f4:2d:09:41:b2:a8:4f:2b:6b:13:3d:24:56:20:9d:
2f:c7:fa:80:9b:b7:30:8c:78:34:c4:63:3e:bb:ca:76:da:03:
46:37:73:31:3b:02:72:17:a7:1f:7c:02:12:78:b4:eb:fe:d4:
63:46:49:0d:05:ef:40:cd:d8:a7:8f:ba:4a:2a:48:2a:a8:e8:
03:59:6b:66:5a:19:04:d7:06:c1:e7:3e:e2:d4:d8:47:3e:57:
20:d6:aa:7e:5c:03:71:75:ab:e7:68:02:bf:ed:39:a8:07:8e:
3c:59:43:13:71:8e:3b:19:5e:b1:52:c5:93:24:5c:93:90:b9:
4b:b0:4f:da:f5:c2:9f:2a:ed:f6:06:28:e7:56:88:1e:fc:73:
19:1a:4e:a0:57:c1:62:8b:68:56:4c:7a:60:18:72:97:73:b3:
75:db:47:5e:0e:5e:eb:77:2d:2e:f2:ba:28:5b:eb:35:7d:24:
cd:70:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:31:41 2026 by rpki-client