Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lm27Bhyoa2dqvvdIvWZ8-6ErU90.roa
File: lm27Bhyoa2dqvvdIvWZ8-6ErU90.roa (raw, json)
Hash identifier: fIOH/3Vbfh8O+SfIOaY9I6Tud3L7iAbtHAKH4fdF1DY=
Subject key identifier: 96:6D:BB:06:1C:A8:6B:67:6A:BE:F7:48:BD:66:7C:FB:A1:2B:53:DD
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A188C9834F9E4464E714A6B42B49CD6051
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lm27Bhyoa2dqvvdIvWZ8-6ErU90.roa
Signing time: Thu 29 Oct 2026 17:51:10 +0000
ROA not before: Thu 29 Oct 2026 17:51:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 62.192.137.0/24 maxlen: 32
194.61.9.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:c9:83:4f:9e:44:64:e7:14:a6:b4:2b:49:cd:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 29 17:51:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=966dbb061ca86b676abef748bd667cfba12b53dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:d9:dc:57:bd:97:0f:22:5a:a9:f2:82:ff:
29:31:26:14:24:15:73:7f:03:87:b1:9b:d6:d1:fd:
91:1f:58:07:93:fa:3d:77:d3:34:b2:11:ab:89:66:
d1:ed:a4:c6:4c:cd:b7:54:d5:69:61:07:0b:6e:67:
36:d8:50:0b:b2:b9:17:1f:9b:e4:22:cf:55:07:af:
ff:91:9d:3c:2d:5e:63:5b:02:9d:75:dd:8d:bd:f2:
1a:46:d7:a9:91:d3:0d:25:95:52:81:5a:c4:4d:02:
af:c9:49:9d:bd:06:48:8a:86:63:e3:47:ef:fb:85:
96:a0:42:80:d2:62:ac:19:21:e2:0d:28:50:fd:0a:
62:b3:6c:fc:b7:c8:f3:f3:6d:ea:72:b8:60:a4:61:
4c:25:b1:63:82:2c:6f:79:c2:df:dc:5c:6e:bc:c5:
7d:08:fc:a3:e8:c4:00:eb:5f:c5:e7:74:73:c6:6e:
23:da:41:8d:b8:da:02:0f:d5:86:d5:32:43:a8:46:
41:64:8e:63:6a:0f:60:ef:83:2c:3c:47:85:2e:45:
f5:74:a6:9c:0b:1f:9f:9c:05:ec:b7:66:96:b7:5c:
85:8c:73:15:cf:7c:dd:21:cd:1c:b7:7b:56:ae:62:
46:7a:7c:01:89:69:a3:b1:2c:d9:e3:df:b7:94:1f:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:BB:06:1C:A8:6B:67:6A:BE:F7:48:BD:66:7C:FB:A1:2B:53:DD
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lm27Bhyoa2dqvvdIvWZ8-6ErU90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.137.0/24
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fb:31:51:89:66:ec:d4:83:1f:97:17:cc:2c:94:43:92:fe:
01:f3:23:bb:ec:a8:8a:7d:7a:87:ad:3e:fb:a2:05:3b:9a:aa:
74:95:77:91:9d:62:72:e6:45:70:87:9f:d3:25:07:fa:84:f5:
4e:9a:8d:3d:17:c6:56:9d:0c:67:9e:34:9f:52:23:d2:c5:50:
45:16:02:d4:e9:fe:b2:7c:2a:99:b3:af:7a:84:d3:d1:d6:5c:
72:e6:53:ba:5f:f9:74:39:64:1e:2c:11:b0:ba:a1:44:a8:b0:
51:15:c6:d5:6f:38:36:e7:97:54:8f:6b:02:88:c7:92:23:0f:
80:c2:40:ed:02:f8:77:6a:1d:a9:9c:13:04:25:64:50:da:61:
be:84:6c:cf:ef:27:11:3e:00:ad:e4:6e:4c:84:34:2a:cc:e6:
ee:e5:c3:1a:5d:bd:0e:eb:28:ff:e0:5e:07:d5:02:63:44:27:
2a:b9:af:03:f6:48:13:0e:e8:11:ff:3b:37:18:7e:6a:85:95:
18:58:b6:66:75:a5:0b:87:03:3d:c5:69:ec:1c:0f:bb:c1:77:
c3:0d:69:4c:8a:6d:eb:85:ec:94:f1:29:e6:e1:e7:48:9d:e7:
f2:7d:e8:87:7c:aa:90:21:78:0d:ac:9f:94:38:52:23:be:4c:
d9:08:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:44 2026 by rpki-client