Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/lkChSpn2Pj9BZbhbqhu03FMhDys.roa
File: lkChSpn2Pj9BZbhbqhu03FMhDys.roa (raw, json)
Hash identifier: yYjtG9ThGBjd6+NRNSCZP/C1Ipp2hIAVQCQKfhenN+A=
Subject key identifier: 96:40:A1:4A:99:F6:3E:3F:41:65:B8:5B:AA:1B:B4:DC:53:21:0F:2B
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A03904604DB38BF4B11F70471ED36EDCE2
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/lkChSpn2Pj9BZbhbqhu03FMhDys.roa
Signing time: Tue 25 Aug 2026 13:03:03 +0000
ROA not before: Tue 25 Aug 2026 13:03:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:04:60:4d:b3:8b:f4:b1:1f:70:47:1e:d3:6e:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Aug 25 13:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9640a14a99f63e3f4165b85baa1bb4dc53210f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:cb:ef:d4:52:e8:57:41:49:24:e7:e2:5a:
97:da:88:df:75:2b:5f:24:4a:8a:e3:e5:c1:e9:2f:
db:e9:52:20:48:2a:9c:3e:5e:84:b9:a8:48:52:6e:
a9:50:8b:4c:23:81:5c:32:f3:b0:24:d1:46:72:f3:
bc:70:81:3f:e7:f4:e8:0e:8c:62:1a:c4:d7:14:30:
df:54:95:a9:28:6a:24:f4:f4:fa:6a:96:e1:f1:c0:
2f:2e:21:df:51:79:05:b9:ca:41:ab:96:73:c9:ca:
b0:5c:19:90:cc:7c:06:0a:7f:97:02:55:46:85:ad:
eb:33:d9:22:3b:9e:46:35:e6:15:59:48:fa:d8:51:
1a:49:b3:b1:7c:2b:5a:df:f4:f6:30:46:c6:f7:58:
e5:f3:c1:fe:19:44:32:e2:1c:55:1b:b0:70:21:3d:
31:76:a6:9a:19:35:c5:da:93:2b:b0:6a:ac:36:ac:
7d:c1:4f:88:9c:ff:84:67:49:fb:e2:83:16:8c:c3:
db:f1:44:d8:21:14:0f:da:5a:83:43:08:cc:b2:7e:
7a:bd:f2:16:c2:37:a2:40:a8:e4:25:61:ca:ff:1b:
d9:49:f3:03:df:86:78:b4:b6:1b:44:f2:94:da:f9:
90:a7:a1:4b:29:db:2a:b5:ca:2d:55:e9:00:6f:8b:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:A1:4A:99:F6:3E:3F:41:65:B8:5B:AA:1B:B4:DC:53:21:0F:2B
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/lkChSpn2Pj9BZbhbqhu03FMhDys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/24
185.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:60:49:85:77:c9:f5:96:ca:e2:de:e7:ca:5c:2b:05:05:c7:
a1:63:19:a2:0d:1b:39:08:f6:84:92:3e:15:b3:f9:92:b5:0d:
10:53:bd:f3:3d:1f:ff:19:81:31:9a:15:28:59:34:66:b8:c8:
61:99:98:c8:d7:35:36:81:04:e0:b3:81:b1:b8:8e:27:36:67:
9e:23:e2:c2:2c:c3:76:d7:1f:9c:20:0f:6a:2d:41:cc:41:a9:
e5:c7:00:f9:a7:00:34:49:89:3b:2c:a4:4e:ed:c5:67:cc:9b:
e7:f5:83:99:7e:35:a7:04:cf:f8:c8:f9:fb:59:30:1c:05:8b:
26:b6:c2:c2:86:7e:5e:72:26:97:a2:39:22:95:2d:3e:3c:86:
cb:af:53:9d:80:b5:44:df:c2:e9:dd:9e:46:0f:c6:3f:f1:9a:
a9:f3:af:7b:e9:d6:b7:30:df:62:a5:74:59:58:04:b1:9c:b9:
15:71:14:83:d4:83:e8:4b:5b:4a:06:05:71:51:6d:d5:c1:1c:
c1:b7:d8:ef:65:47:c0:c1:e0:16:09:e7:b3:89:5b:79:37:3a:
2a:c0:fc:35:3a:28:c2:26:66:95:d3:b4:c2:4e:ef:e0:b4:59:
29:df:d5:75:ba:8e:77:d7:c2:70:ab:ed:6f:8d:14:f7:a9:f2:
19:98:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:00 2026 by rpki-client