Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LrZsRSl37G-3zaiJz4E036vlNQA.roa
File: LrZsRSl37G-3zaiJz4E036vlNQA.roa (raw, json)
Hash identifier: LG3m+yfaFYaZ6idfX7c/qQJsdBWc/HMiyYf3yXZ5TEc=
Subject key identifier: 2E:B6:6C:45:29:77:EC:6F:B7:CD:A8:89:CF:81:34:DF:AB:E5:35:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0866B839D11E3CF52A0F140924F659054
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LrZsRSl37G-3zaiJz4E036vlNQA.roa
Signing time: Wed 09 Sep 2026 13:46:27 +0000
ROA not before: Wed 09 Sep 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.196.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.1.0/24 maxlen: 24
77.67.9.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
77.67.126.0/23 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.2.0/24 maxlen: 24
194.77.4.0/24 maxlen: 24
194.77.56.0/22 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.84.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
195.162.254.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:6b:83:9d:11:e3:cf:52:a0:f1:40:92:4f:65:90:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 9 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb66c452977ec6fb7cda889cf8134dfabe53500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:36:69:6d:10:35:20:4d:f4:ee:84:f1:a7:
a7:c4:a3:3c:d7:a6:1e:8c:9c:e0:7e:51:c2:5e:06:
71:4e:84:19:7f:65:17:8f:e6:a0:68:56:51:22:59:
10:3b:8b:c5:d3:57:15:29:c4:0b:36:a6:14:2e:1e:
c7:2b:00:01:cb:34:38:77:a1:56:b3:cf:9b:98:a3:
97:86:4f:d8:3e:70:18:51:47:20:7d:8c:c2:41:df:
bc:50:62:95:41:ec:9c:00:49:5a:f7:6a:a6:b5:e2:
46:63:f6:9f:16:61:14:db:e2:6c:77:39:0f:47:81:
08:c4:22:d2:39:31:9c:59:dc:25:d9:ba:ce:77:82:
5a:90:e0:17:b8:e4:e3:3e:ca:15:75:20:14:db:33:
ea:8e:7b:0d:14:ca:bd:9f:78:72:43:98:ae:6a:58:
63:41:24:ce:23:ca:f7:f6:85:a2:ac:72:72:14:e3:
22:d6:4d:fe:db:10:4c:76:da:af:e4:4e:bc:0d:f2:
9e:81:4d:e3:2a:78:e0:f9:90:48:25:b0:57:c7:a0:
ae:79:75:42:4c:10:40:b9:b0:a2:e0:f1:fc:3f:78:
81:81:c0:71:01:a5:13:39:e0:1f:dd:46:47:23:6e:
bd:48:e9:63:0a:91:cc:e5:7e:83:c1:12:4d:78:83:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B6:6C:45:29:77:EC:6F:B7:CD:A8:89:CF:81:34:DF:AB:E5:35:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LrZsRSl37G-3zaiJz4E036vlNQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.196.0/24
62.132.116.0/24
77.67.1.0/24
77.67.9.0/24
77.67.125.0-77.67.127.255
194.45.47.0/24
194.77.2.0/24
194.77.4.0/24
194.77.56.0/22
194.77.62.0/24
194.77.192.0/24
194.122.84.0/24
194.231.128.0-194.231.139.255
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.162.254.0/24
212.189.57.0/24
212.189.121.0/24
212.222.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:76:84:9d:ec:f0:79:fb:b3:a7:e0:04:a7:e0:6d:24:ea:
97:3f:8b:bf:31:3b:01:18:64:be:70:66:24:9b:c3:49:de:e9:
f5:fc:5e:a9:38:81:68:56:a0:bd:1b:7b:52:a2:f2:af:0f:48:
08:50:cd:64:71:b7:5e:d6:8f:55:71:5b:c0:cf:15:73:d1:c7:
e3:e0:bf:a8:af:83:20:57:d8:e8:14:9d:1f:90:50:bd:27:b3:
ff:ad:2d:a6:b4:f7:17:d4:fc:bf:9d:80:3d:01:4a:80:98:f0:
b7:5d:6b:57:ec:f3:1f:73:39:d5:d0:d2:16:7b:c4:df:df:b5:
98:b7:8a:f4:3c:0d:8a:0d:05:b7:77:e0:b6:0c:e8:79:60:f7:
75:a4:40:ed:d9:49:46:51:fe:f6:4a:30:ac:32:2d:a5:06:05:
00:22:55:9c:4b:74:4e:1b:68:17:3f:da:b2:db:bb:b6:b4:30:
79:8c:75:67:78:b2:59:d5:e9:63:69:2a:e9:33:e1:34:f7:35:
96:bf:48:7d:d4:73:38:67:34:04:e0:36:6b:1b:8b:93:5b:28:
75:96:f9:44:ae:32:80:6d:db:48:b9:fd:85:23:10:2a:d8:2d:
22:a5:56:8b:a3:50:bb:0b:f5:af:7e:ed:69:71:57:4d:fb:c0:
47:f5:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:53 2026 by rpki-client