Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/L1yVupc3DfndcUlEiHPDlfhn89M.roa
File: L1yVupc3DfndcUlEiHPDlfhn89M.roa (raw, json)
Hash identifier: cvlc9qfCv9MnQUhbcbVlLz4aLS/R8n4yjeuHIpRH+V8=
Subject key identifier: 2F:5C:95:BA:97:37:0D:F9:DD:71:49:44:88:73:C3:95:F8:67:F3:D3
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB6725BFFD158B341D8F987C15EE033CC
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/L1yVupc3DfndcUlEiHPDlfhn89M.roa
Signing time: Fri 31 Jul 2026 04:32:55 +0000
ROA not before: Fri 31 Jul 2026 04:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 91.132.85.0/24 maxlen: 24
185.145.45.0/24 maxlen: 24
193.176.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:72:5b:ff:d1:58:b3:41:d8:f9:87:c1:5e:e0:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 31 04:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f5c95ba97370df9dd7149448873c395f867f3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:16:90:b7:f1:b4:6b:65:c2:64:e3:15:b9:
dd:35:c3:0b:5c:85:d5:18:0f:87:3d:36:ea:34:2f:
b1:98:82:d2:61:31:9d:4d:05:0d:b9:97:9e:87:13:
e9:81:44:47:a3:43:60:79:cd:93:b6:b6:1c:1f:8d:
b9:e7:c9:3f:63:31:c1:ea:24:1f:9f:e5:92:60:26:
07:78:c6:fa:26:6e:85:d7:4a:b9:da:bc:dc:ab:0a:
73:65:a6:d9:3c:cf:a6:84:98:48:79:e5:b1:75:5d:
e9:a3:b5:6d:99:9c:2f:9c:8f:6f:c5:1b:e1:80:9a:
ea:63:2e:fc:65:ff:95:f5:af:92:63:c5:08:bc:03:
1d:5b:a7:e3:1e:86:27:2b:ee:70:ea:4e:d8:1f:7b:
8d:b1:81:0e:c9:ca:2b:a3:c5:67:7a:56:c4:91:22:
c8:a2:5f:08:3b:f2:7b:31:d8:b7:5f:13:bb:21:98:
73:4f:48:06:9e:70:ff:5a:cf:cc:03:f6:c0:9e:1d:
10:ed:46:7c:95:0b:77:d4:53:07:2e:ac:26:aa:5c:
f3:e7:5c:c9:01:83:d7:05:cb:d7:1d:3c:e1:bf:7f:
c4:b5:d3:53:fa:d6:8b:a6:ee:54:4a:59:56:91:29:
40:ed:fc:3e:0b:d1:0c:be:20:c9:c6:cf:d5:9b:53:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:95:BA:97:37:0D:F9:DD:71:49:44:88:73:C3:95:F8:67:F3:D3
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/L1yVupc3DfndcUlEiHPDlfhn89M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.85.0/24
185.145.45.0/24
193.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
31:70:82:fc:a3:b1:14:56:bf:c5:c6:0e:c2:3d:3b:be:5e:88:
8b:27:c2:b4:1c:29:9b:0e:2b:4f:ff:da:24:e7:24:17:3f:a5:
5a:b2:1d:e8:02:38:c3:5c:97:09:ca:b9:48:5a:9f:f6:23:a4:
18:d1:a7:4e:e6:6c:27:de:44:85:45:c7:e8:5c:80:cd:88:e7:
8f:14:bf:46:18:e7:a7:be:a0:1c:e5:96:54:65:91:30:4f:b0:
f3:be:14:44:1e:6a:68:41:7e:80:7f:ac:45:50:9f:6f:37:d5:
6a:5a:da:5d:f9:52:cc:dc:55:e7:54:94:a2:fc:0c:77:4d:cf:
e3:ce:07:0f:2b:41:91:a2:e8:01:40:54:2d:65:26:6d:8b:05:
47:d7:72:d6:d3:b1:1e:59:38:f2:0a:db:fb:98:77:09:09:2c:
7a:98:7a:4a:47:a9:8a:3a:ab:5f:53:b9:f5:7e:58:f8:2d:1e:
03:7c:29:ba:7c:4a:67:f8:21:79:ae:e1:2c:ff:f6:b3:ba:42:
0e:74:e1:22:73:56:93:30:24:b4:08:92:cd:15:04:07:c6:de:
53:3e:23:f4:dd:45:38:1f:5b:da:b2:75:fe:b4:d0:ff:94:91:
e9:47:00:8c:1f:db:0d:33:3e:6b:ea:2c:31:75:15:a6:e1:47:
a3:56:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:58 2026 by rpki-client