Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/lsNa8WGkjqw-2QeHw6xi153KojQ.roa
File: lsNa8WGkjqw-2QeHw6xi153KojQ.roa (raw, json)
Hash identifier: O8k6qkGdvwOuhJzAia2EWINvWn1JugSqc9BD1ttJIck=
Subject key identifier: 96:C3:5A:F1:61:A4:8E:AC:3E:D9:07:87:C3:AC:62:D7:9D:CA:A2:34
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED4B783953FE1FA6881C1ED7CAB3C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/lsNa8WGkjqw-2QeHw6xi153KojQ.roa
Signing time: Mon 28 Sep 2026 13:57:55 +0000
ROA not before: Mon 28 Sep 2026 13:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207795
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d4:b7:83:95:3f:e1:fa:68:81:c1:ed:7c:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c35af161a48eac3ed90787c3ac62d79dcaa234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:e7:8b:61:a7:5a:75:54:07:76:66:e7:35:
28:d5:fb:f9:46:2d:72:2a:b9:36:2a:1c:b6:ed:57:
4f:fd:90:55:3e:51:39:69:b4:a5:e5:9a:ae:af:0c:
96:20:88:48:87:d2:df:9b:06:87:f8:7c:9a:8b:da:
61:de:ea:49:8b:03:fe:9d:84:d6:fe:79:de:3d:2b:
a9:92:40:9d:b9:53:d7:d1:1d:41:3c:1d:ce:07:ae:
80:f3:9d:f6:3a:c3:0a:4d:06:76:66:48:44:8b:b7:
90:b1:e3:f1:d2:ed:bd:7f:cb:bc:05:bf:70:69:7d:
db:c1:fa:0f:6a:8a:9a:f2:ef:dc:99:66:0c:57:77:
3d:a0:a0:3f:fc:d2:97:40:91:5e:20:7a:f1:97:64:
3d:73:dc:2a:36:e1:eb:1f:86:0d:32:55:35:f1:a0:
a8:cd:9c:55:61:2a:db:49:b9:41:81:3d:6d:84:8f:
1e:23:bb:01:db:72:81:9c:d3:73:37:24:dd:05:26:
63:f8:52:0a:03:b9:7d:d7:54:b9:4f:b1:29:75:33:
21:75:a5:1b:51:46:4f:89:1f:03:d7:42:32:19:e4:
fe:88:a4:33:e9:35:a3:2a:c1:83:76:50:6d:05:3b:
b8:4b:b3:0a:92:1d:fe:69:63:e5:1f:69:cc:22:13:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:5A:F1:61:A4:8E:AC:3E:D9:07:87:C3:AC:62:D7:9D:CA:A2:34
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/lsNa8WGkjqw-2QeHw6xi153KojQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.133.0/24
Signature Algorithm: sha256WithRSAEncryption
61:76:08:41:10:0d:8c:c3:60:48:bf:a2:8b:8f:11:6c:67:d4:
36:93:05:b3:50:71:85:f9:68:e8:3d:28:ef:cc:b4:2b:60:be:
8e:73:01:4f:12:47:0e:bf:35:d0:19:bb:ad:0a:73:87:1e:28:
c3:90:07:5f:50:39:c2:93:82:8b:80:22:6b:63:a2:39:7f:d7:
85:f2:17:88:ee:d0:39:48:9f:c5:a3:a4:f3:a7:d3:aa:b4:39:
c5:a7:0e:bd:7a:66:87:32:5f:c5:a6:e8:ae:4e:70:db:96:61:
1f:15:e0:23:d0:94:ea:81:42:61:84:3b:c9:26:b4:33:db:cc:
5e:ed:f5:23:01:f4:59:dd:bc:3a:10:9a:e5:92:dc:47:bf:2c:
1c:8e:12:68:e7:86:0f:19:8d:f3:e4:0c:7b:77:d2:e0:88:d3:
de:07:62:38:ff:ba:60:43:60:8f:5e:5a:52:92:a8:de:de:0b:
44:16:6b:a2:c3:60:d1:af:46:4f:85:f3:b4:85:6c:f8:84:1f:
5f:c8:a4:f6:e8:16:f6:21:2c:09:49:69:69:59:5e:98:86:85:
2e:12:39:c1:fd:bc:d9:8f:50:8c:6c:ef:dd:25:da:79:a0:aa:
fe:01:85:46:7b:1f:0c:7c:7c:f7:0e:42:a1:d1:cb:d5:e6:33:
5e:20:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:08:04 2026 by rpki-client