Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa
File: Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa (raw, json)
Hash identifier: 1VID+VxCbvu/x4LUFWGdXKIYuEKVOmm6njJ+kAa8PjY=
Subject key identifier: 2E:7B:3C:58:CC:26:79:A8:43:04:0B:5F:8F:56:21:5C:D0:BD:62:94
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 01A05CFDCE66FA4866B4E3BB649628CB2CF9
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa
Signing time: Tue 01 Sep 2026 12:42:12 +0000
ROA not before: Tue 01 Sep 2026 12:42:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35506
IP address blocks: 84.205.192.0/24 maxlen: 24
84.205.193.0/24 maxlen: 24
84.205.194.0/24 maxlen: 24
84.205.195.0/24 maxlen: 24
84.205.196.0/24 maxlen: 24
84.205.197.0/24 maxlen: 24
84.205.198.0/24 maxlen: 24
84.205.199.0/24 maxlen: 24
84.205.200.0/24 maxlen: 24
84.205.201.0/24 maxlen: 24
84.205.202.0/24 maxlen: 24
84.205.203.0/24 maxlen: 24
84.205.204.0/24 maxlen: 24
84.205.205.0/24 maxlen: 24
84.205.206.0/24 maxlen: 24
84.205.207.0/24 maxlen: 24
84.205.211.0/24 maxlen: 24
84.205.212.0/23 maxlen: 23
84.205.212.0/24 maxlen: 24
84.205.213.0/24 maxlen: 24
84.205.214.0/24 maxlen: 24
84.205.215.0/24 maxlen: 24
84.205.216.0/24 maxlen: 24
84.205.217.0/24 maxlen: 24
84.205.218.0/24 maxlen: 24
84.205.219.0/24 maxlen: 24
84.205.220.0/24 maxlen: 24
84.205.221.0/24 maxlen: 24
84.205.222.0/24 maxlen: 24
84.205.223.0/24 maxlen: 24
84.205.224.0/24 maxlen: 24
84.205.225.0/24 maxlen: 24
84.205.226.0/24 maxlen: 24
84.205.227.0/24 maxlen: 24
84.205.228.0/24 maxlen: 24
84.205.229.0/24 maxlen: 24
84.205.230.0/24 maxlen: 24
84.205.231.0/24 maxlen: 24
84.205.232.0/24 maxlen: 24
84.205.233.0/24 maxlen: 24
84.205.234.0/24 maxlen: 24
84.205.235.0/24 maxlen: 24
84.205.236.0/24 maxlen: 24
84.205.237.0/24 maxlen: 24
84.205.238.0/24 maxlen: 24
84.205.239.0/24 maxlen: 24
84.205.240.0/24 maxlen: 24
84.205.241.0/24 maxlen: 24
84.205.242.0/24 maxlen: 24
84.205.243.0/24 maxlen: 24
84.205.244.0/24 maxlen: 24
84.205.245.0/24 maxlen: 24
84.205.246.0/24 maxlen: 24
84.205.247.0/24 maxlen: 24
84.205.248.0/24 maxlen: 24
84.205.249.0/24 maxlen: 24
84.205.250.0/24 maxlen: 24
84.205.251.0/24 maxlen: 24
84.205.252.0/23 maxlen: 23
84.205.254.0/24 maxlen: 24
84.205.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:fd:ce:66:fa:48:66:b4:e3:bb:64:96:28:cb:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Sep 1 12:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e7b3c58cc2679a843040b5f8f56215cd0bd6294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:de:e8:2b:7b:b3:53:d2:f2:58:3f:4b:ba:
7e:fe:95:8c:2e:e4:e6:2a:b2:f1:0f:d0:62:07:9a:
a7:ca:c1:18:c8:82:06:5f:fe:2e:f2:81:f9:41:5e:
7a:ef:b1:60:21:9f:b1:bc:8f:5c:c2:8e:c9:9f:b4:
16:93:42:7c:a8:98:95:b9:20:f2:7d:d6:5a:1f:f9:
29:2f:f3:17:87:06:9f:79:5f:27:58:66:c5:38:45:
5d:05:b0:65:16:79:2a:f5:ed:a7:f2:87:b5:2c:2a:
d1:4e:87:9b:a1:68:e9:08:7b:32:8e:0c:b9:b7:52:
1c:c2:0f:e4:0a:97:91:15:0e:fb:db:b7:3c:a6:66:
25:d3:cf:dd:b3:7a:89:30:1b:a8:cc:40:09:82:4c:
28:2f:24:8e:98:0e:88:c6:d8:dc:16:c1:48:51:d7:
55:70:49:7b:8f:5c:6a:79:8c:7e:fc:3e:e7:e1:25:
f0:0d:3a:55:b3:55:fc:17:ef:aa:28:f2:9f:b8:ab:
bc:10:3d:d3:fa:81:20:fb:d4:89:99:06:30:cb:48:
0d:9c:0b:f0:01:58:39:dd:a6:ff:70:8a:97:7c:82:
da:fa:17:c6:d9:44:67:30:95:65:ea:ca:8c:24:e4:
16:6d:ad:ec:e7:a3:56:7c:2a:d5:f9:ff:b3:f7:8d:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:3C:58:CC:26:79:A8:43:04:0B:5F:8F:56:21:5C:D0:BD:62:94
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.192.0/20
84.205.211.0-84.205.255.255
Signature Algorithm: sha256WithRSAEncryption
61:e3:ce:48:4f:c7:94:9a:31:97:47:a9:72:8b:3f:e5:07:34:
da:32:59:a0:c7:75:6b:a8:e6:27:83:45:77:a5:e9:6a:12:07:
72:2c:8e:79:76:ee:0e:f9:39:c0:48:3f:c7:e4:92:6e:2f:e1:
3e:c4:38:42:26:e9:03:b5:47:ae:2e:9f:61:f4:02:2b:f9:3c:
fc:91:4f:2f:a1:30:86:f3:3f:a6:66:55:fd:62:3e:26:bc:d5:
83:2e:8a:20:13:8a:ac:91:87:b3:e5:f4:72:0f:bf:a4:fc:d5:
32:59:4a:9f:64:6f:a8:1a:8c:6d:6f:2c:a6:12:f5:7b:23:22:
64:2f:7e:50:a6:56:1e:52:34:8d:93:3c:10:11:f4:da:dc:17:
86:7e:30:e2:2e:5e:23:27:6a:02:b2:e7:e4:c3:ea:17:64:a7:
56:a7:8e:e7:db:95:62:94:b5:b2:12:99:73:19:81:cd:77:c2:
c1:1f:88:2f:00:20:84:5b:c0:3c:21:7a:91:d6:72:53:e4:17:
dc:ee:bf:7d:b7:1c:4f:ec:d6:5a:e1:94:27:59:87:88:37:a0:
a2:66:18:34:0b:db:6e:13:8c:d5:65:76:4c:97:24:b1:da:1f:
b3:24:7b:29:9b:61:7a:7e:e8:ad:3b:a5:d0:2a:ee:c5:0e:6c:
ff:f2:26:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 04:04:35 2026 by rpki-client