Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/lcb2elW9nqp52O5NBnyy1zeuFag.roa
File: lcb2elW9nqp52O5NBnyy1zeuFag.roa (raw, json)
Hash identifier: hgv7cfDCMNIySSZOwtLXz5gz1TH1uKEr6hqiKta15tE=
Subject key identifier: 95:C6:F6:7A:55:BD:9E:AA:79:D8:EE:4D:06:7C:B2:D7:37:AE:15:A8
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01A10C8087FB22030D21D6EAF34B12B6B74F
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/lcb2elW9nqp52O5NBnyy1zeuFag.roa
Signing time: Mon 05 Oct 2026 14:38:32 +0000
ROA not before: Mon 05 Oct 2026 14:38:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17025
IP address blocks: 79.141.45.0/24 maxlen: 24
94.31.10.0/23 maxlen: 24
94.31.12.0/24 maxlen: 24
213.152.239.0/24 maxlen: 24
213.152.249.0/24 maxlen: 24
213.152.252.0/24 maxlen: 24
213.152.253.0/24 maxlen: 24
2a00:16f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:80:87:fb:22:03:0d:21:d6:ea:f3:4b:12:b6:b7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Oct 5 14:38:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95c6f67a55bd9eaa79d8ee4d067cb2d737ae15a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:8d:8c:3d:5f:3d:f7:61:a0:0b:f5:18:79:
a9:33:5b:9b:29:3e:14:1d:59:0c:c7:e8:04:01:41:
b5:40:91:33:a0:a2:58:df:28:f7:65:3a:78:79:31:
ea:a1:36:19:70:a4:20:04:9c:e4:72:98:aa:d4:12:
26:56:35:dd:a8:4a:09:d9:2d:ea:0e:31:96:89:36:
f6:5e:7c:c2:95:6e:d5:87:28:33:7a:c8:41:6f:63:
77:75:6d:13:b2:78:fa:3a:d8:d1:28:32:95:8c:ce:
bb:41:b5:4a:48:a9:5f:8c:59:13:c5:47:fb:33:81:
60:5a:df:da:b6:a5:f1:f0:42:05:2e:d1:38:fc:31:
2d:0f:ee:04:49:97:1a:60:a2:ea:88:f1:92:ae:8f:
47:77:1c:89:fb:20:2d:30:0f:89:34:b6:f8:bf:31:
64:f3:ec:03:90:a7:97:78:6e:29:45:87:95:15:e8:
29:9a:b8:37:49:92:28:2d:29:3d:32:9a:0e:cb:01:
27:e3:40:ee:f7:cb:bf:cc:0a:aa:56:1a:2e:a2:4e:
f0:b7:ec:c1:4d:01:4a:4d:a6:1b:75:cd:62:09:72:
e4:e1:35:d3:25:50:4b:c1:34:7b:c2:b6:b9:d3:e3:
c0:4c:a4:2e:64:7a:88:a8:e1:c9:21:65:c6:d9:90:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:F6:7A:55:BD:9E:AA:79:D8:EE:4D:06:7C:B2:D7:37:AE:15:A8
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/lcb2elW9nqp52O5NBnyy1zeuFag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.45.0/24
94.31.10.0-94.31.12.255
213.152.239.0/24
213.152.249.0/24
213.152.252.0/23
IPv6:
2a00:16f8::/48
Signature Algorithm: sha256WithRSAEncryption
26:b0:3c:7c:13:e1:9a:9b:95:6a:a2:25:13:83:a9:b2:c1:a2:
fe:d3:d6:ee:74:f6:c0:6a:21:18:71:b3:1e:4c:cf:f1:5c:cb:
d3:a3:ed:6e:f3:ee:f4:a5:76:85:80:84:fd:9b:ae:aa:d3:1b:
28:33:56:ec:fd:24:17:ff:c3:18:63:c2:4b:d0:20:be:4b:77:
dd:a7:e4:53:94:d2:91:ba:55:e0:ce:9a:d8:f2:2f:44:88:48:
13:e9:f8:d6:35:7b:65:c8:31:b0:9a:b2:9d:84:62:84:22:3b:
6b:a1:12:60:cc:f0:09:c8:c0:8c:90:bc:da:11:1b:1b:c5:a5:
92:96:d7:48:e8:f4:9d:76:50:e5:ec:f1:4c:ea:4d:46:3c:bf:
84:74:fa:84:f2:4a:3c:0d:9e:01:71:01:ca:f5:45:65:9f:04:
69:68:73:f6:be:c8:ee:9c:4d:4a:ac:39:78:f9:bf:0e:de:38:
43:32:f3:d8:32:3a:98:e0:13:5e:95:ad:7c:8e:dd:26:ee:cf:
ce:39:a1:d9:e7:c8:07:74:02:32:30:db:d0:4a:f9:74:64:5e:
50:67:8c:f7:cb:c7:bb:e8:2a:33:47:dd:1b:04:4e:ea:a9:ca:
c0:e8:c0:fd:9d:e0:de:34:dd:d3:64:df:7a:bd:6a:e8:b8:e4:
21:c3:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:10 2026 by rpki-client