Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LkFH9mQ4IKoDe53gNwitnCZIbZs.roa
File: LkFH9mQ4IKoDe53gNwitnCZIbZs.roa (raw, json)
Hash identifier: G+TIgAcTfSin2BE86bxaE10+r+0HYbBIjbuoanwS0KY=
Subject key identifier: 2E:41:47:F6:64:38:20:AA:03:7B:9D:E0:37:08:AD:9C:26:48:6D:9B
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A0E883ECBFF7D83CEF859D1797F0DD225E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LkFH9mQ4IKoDe53gNwitnCZIbZs.roa
Signing time: Mon 28 Sep 2026 14:55:54 +0000
ROA not before: Mon 28 Sep 2026 14:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209087
IP address blocks: 5.154.50.0/23 maxlen: 24
5.154.54.0/23 maxlen: 24
5.154.84.0/23 maxlen: 24
5.154.96.0/23 maxlen: 24
84.236.248.0/23 maxlen: 24
88.148.76.0/23 maxlen: 24
88.148.96.0/23 maxlen: 24
88.148.98.0/23 maxlen: 24
94.24.32.0/23 maxlen: 24
94.24.46.0/23 maxlen: 24
109.167.120.0/22 maxlen: 24
217.61.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:83:ec:bf:f7:d8:3c:ef:85:9d:17:97:f0:dd:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Sep 28 14:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e4147f6643820aa037b9de03708ad9c26486d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:d4:49:87:6e:63:d4:00:c0:d4:03:f1:d1:
4c:e4:4d:4c:15:68:58:02:c8:e3:0d:07:20:bb:a1:
f9:51:e9:13:ae:32:c9:ff:08:82:f6:80:6a:c3:37:
37:d5:f1:13:4b:ce:93:b9:cb:5a:5a:0f:53:f7:50:
a8:d5:3a:82:9d:4a:2e:18:92:ad:33:a3:53:e4:4e:
ad:db:c1:e9:f4:e6:ae:4d:2e:31:18:3b:18:d3:9e:
8f:d9:30:b5:b8:92:3f:f8:d9:3d:b7:fc:4d:9b:c8:
93:12:12:2f:18:92:b7:c6:20:ae:a7:fd:31:a8:7f:
36:27:11:33:20:fe:1b:f5:ec:b3:7d:54:47:52:3e:
4f:75:49:9f:37:0b:48:b9:b8:14:60:d5:08:7e:fe:
3e:1a:aa:3c:7d:8b:e8:95:16:be:b8:a3:9b:ce:9b:
3d:5c:b9:73:76:3d:af:d3:08:a0:f9:2f:de:12:13:
bc:ce:32:58:ff:20:e9:8f:1a:95:d1:50:e7:38:a9:
e1:b0:a0:60:a2:c5:94:5b:f2:1c:09:47:23:49:99:
89:5a:69:2f:58:49:bc:d7:05:cc:22:26:1d:78:09:
c8:74:96:48:0e:ef:af:4c:ad:c9:05:f0:6e:8b:63:
bf:96:56:db:89:b0:73:b0:bb:d0:a6:4f:0a:0f:ca:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:47:F6:64:38:20:AA:03:7B:9D:E0:37:08:AD:9C:26:48:6D:9B
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LkFH9mQ4IKoDe53gNwitnCZIbZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.50.0/23
5.154.54.0/23
5.154.84.0/23
5.154.96.0/23
84.236.248.0/23
88.148.76.0/23
88.148.96.0/22
94.24.32.0/23
94.24.46.0/23
109.167.120.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:0b:d7:85:24:39:34:be:f3:19:0c:4b:04:82:e4:54:6e:0d:
c1:9e:e1:ce:b7:bb:a4:1f:7e:be:92:74:a0:08:84:85:24:b1:
0c:f3:26:17:79:0c:81:36:bc:eb:32:38:06:e5:8b:e8:c7:9d:
e1:4e:d9:4c:b2:5c:0f:29:98:e3:0c:a5:69:18:0b:2d:9d:9e:
e9:79:f7:b2:22:90:00:f3:52:dd:b1:b2:43:49:c9:f1:17:f6:
a5:df:93:68:78:cb:6f:2f:11:1a:7a:9b:18:9d:d3:7a:74:b9:
6b:46:e7:5e:1d:ca:d7:ec:3f:f6:9a:f0:52:21:a7:5c:10:b8:
d7:1c:c3:94:77:43:0c:5f:3d:4a:14:6e:e5:84:c6:45:4d:6b:
e0:ea:6b:01:a4:2b:5b:40:91:a3:5c:79:bf:e8:b1:4c:ba:a6:
e8:f9:ef:a4:8d:d1:3e:88:c1:5d:91:11:1b:83:36:a4:76:58:
3d:57:0f:ea:cb:23:20:69:27:c9:22:e6:fb:5e:a3:76:66:a9:
83:b5:ba:8d:86:6a:c7:bb:e0:35:8a:91:00:d8:99:36:ed:98:
b7:d1:db:f0:ed:f6:2f:6c:49:b3:bd:b0:8a:a3:c0:34:d1:c9:
95:c8:0c:d2:53:cc:57:0c:50:e5:bb:ff:09:4e:ee:c9:f5:c0:
49:bd:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:53:03 2026 by rpki-client