Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lCPUedxqba5H9r_8TR_YXQtB5UY.roa
File: lCPUedxqba5H9r_8TR_YXQtB5UY.roa (raw, json)
Hash identifier: dUqb2z5CotN/pXt26b5SphRqj3LP9egV47G+QjRTAwc=
Subject key identifier: 94:23:D4:79:DC:6A:6D:AE:47:F6:BF:FC:4D:1F:D8:5D:0B:41:E5:46
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A02441458023A680CDD3EADADEA868EDFB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lCPUedxqba5H9r_8TR_YXQtB5UY.roa
Signing time: Fri 21 Aug 2026 12:17:32 +0000
ROA not before: Fri 21 Aug 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 89.202.232.0/23 maxlen: 23
89.202.236.0/23 maxlen: 23
92.71.32.0/20 maxlen: 24
92.71.64.0/18 maxlen: 24
213.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:41:45:80:23:a6:80:cd:d3:ea:da:de:a8:68:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 21 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9423d479dc6a6dae47f6bffc4d1fd85d0b41e546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:ea:2f:0f:55:37:1e:26:37:d9:4d:29:0a:
37:b3:70:1d:6a:f2:69:25:62:f0:83:c9:ef:c2:d8:
1a:f4:70:43:62:fc:b4:49:64:df:0b:ea:72:1d:34:
85:32:e5:48:2b:30:97:24:85:3a:50:b6:a0:88:d4:
c7:aa:e6:77:fd:de:0c:21:74:2d:c5:87:ca:dd:a7:
f8:9c:d7:3a:26:85:0f:78:a5:f2:26:3b:65:6b:cc:
fc:64:36:03:89:5d:57:a2:82:1b:ab:b9:3d:74:49:
bf:da:10:12:44:ff:1b:59:7a:a1:c1:6b:10:87:c7:
42:68:e0:5d:81:ac:f3:7e:1d:b6:2f:f6:95:74:e1:
34:0b:4f:ef:10:5b:43:4e:f9:36:de:4d:c5:46:32:
c9:3c:0f:2d:02:2e:c4:3c:f7:25:c5:71:a0:51:4d:
7d:e1:70:09:89:2a:4b:6b:80:8b:cc:b8:3e:c0:c4:
e8:3d:41:af:5b:1e:7c:31:87:5f:ed:46:9d:a5:c6:
77:4c:ff:40:88:7b:4f:bd:1a:00:d7:c0:45:e7:4a:
1d:8d:b2:4c:5d:b8:7f:52:9a:b5:d2:3a:d2:15:49:
8c:da:9d:7a:51:b2:9f:47:c7:50:2c:13:06:c9:57:
3f:09:d0:e9:75:f8:65:ae:95:9c:25:7b:c1:4a:31:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:D4:79:DC:6A:6D:AE:47:F6:BF:FC:4D:1F:D8:5D:0B:41:E5:46
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lCPUedxqba5H9r_8TR_YXQtB5UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.202.232.0/23
89.202.236.0/23
92.71.32.0/20
92.71.64.0/18
213.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
45:00:d6:2b:5a:f6:fb:fa:81:90:5d:43:4f:2a:77:43:98:ff:
ce:4b:69:bd:ab:84:57:c6:d6:3f:09:fb:07:73:e1:80:22:27:
d2:e1:18:96:c5:f6:0e:3c:08:cd:00:f9:8b:90:50:b6:53:54:
9e:05:71:b3:75:c5:7c:c6:99:a8:e9:7d:bd:f7:be:c2:6a:b8:
2a:a4:6b:d8:1b:c7:f6:7f:25:a8:42:bb:7e:96:d6:3c:30:fa:
96:bc:21:cd:da:85:1a:aa:29:c2:ea:f5:79:54:3d:16:06:4f:
87:8a:89:3c:df:29:ae:9f:2c:f2:0d:bf:d0:8d:63:97:02:05:
1b:7d:4f:88:d8:07:6b:32:da:4a:29:54:29:84:c9:04:dd:e3:
bb:af:bf:62:40:24:da:71:34:b5:e5:f7:f8:63:15:35:a1:b7:
18:e8:b4:89:2f:92:0d:9a:97:d0:c5:dd:2b:1d:8d:00:c5:3c:
aa:68:cf:bf:38:81:4a:79:fb:1d:6c:73:15:71:4e:be:4c:1d:
08:52:71:71:99:0a:63:5e:f7:59:e8:05:50:8b:04:d9:67:5a:
94:08:0c:32:06:25:48:eb:6a:7a:f6:45:d2:4c:c0:3d:dd:21:
e2:35:75:37:54:2d:2e:44:ba:1f:41:6b:21:1d:4f:8e:5b:30:
90:ca:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:24 2026 by rpki-client