Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LFvIOqbEvywfgoB0Iv4BCQ9G9C8.roa
File: LFvIOqbEvywfgoB0Iv4BCQ9G9C8.roa (raw, json)
Hash identifier: 4nwDIksuO9/QEptn1EyWqPKIAtKiJTgho/kQ6QgiYPk=
Subject key identifier: 2C:5B:C8:3A:A6:C4:BF:2C:1F:82:80:74:22:FE:01:09:0F:46:F4:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF48F389BD9B823DCF504B19BD88D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LFvIOqbEvywfgoB0Iv4BCQ9G9C8.roa
Signing time: Sun 13 Sep 2026 09:14:29 +0000
ROA not before: Sun 13 Sep 2026 09:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f4:8f:38:9b:d9:b8:23:dc:f5:04:b1:9b:d8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c5bc83aa6c4bf2c1f82807422fe01090f46f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:bd:9f:66:79:17:05:af:35:72:8b:5a:b4:
a3:ad:8d:36:b8:da:93:25:80:51:9f:9e:e6:7e:e6:
7d:ce:e4:ed:3b:15:4e:ee:cc:9c:d9:f2:fd:21:d3:
9c:e5:f9:2a:b6:7a:a8:13:a6:1c:70:63:01:66:de:
ae:97:f6:26:39:4d:f0:4e:e0:d1:0b:65:97:ba:25:
fb:89:a7:a9:3a:90:07:d5:28:02:17:1f:43:de:5b:
7a:62:02:dd:78:49:0a:23:b6:89:60:7b:3f:80:bb:
0f:45:c6:0b:5c:d5:d8:f6:6c:99:ac:72:66:57:2d:
59:bd:b5:56:1b:9e:90:b5:79:21:85:90:32:fd:c3:
f2:22:2f:c3:6c:1c:66:63:b8:a8:6a:fa:19:22:51:
5b:15:70:b8:ff:45:8c:23:ae:79:46:82:22:0b:d5:
ab:f5:ac:39:05:ac:f8:98:9c:9c:c9:e8:53:79:d6:
8e:c9:8e:25:76:6e:38:16:4a:04:f4:e5:4d:6f:b5:
b7:dd:b4:46:18:a3:9a:32:5f:57:3c:ca:1c:3e:c9:
01:12:99:43:8d:67:fb:dc:ef:25:8c:55:31:80:2e:
c8:1b:c8:9d:d6:39:e0:21:35:d8:71:5c:1c:d2:54:
7b:c9:8a:c0:13:09:7c:bf:e9:fd:4b:5b:07:03:51:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:C8:3A:A6:C4:BF:2C:1F:82:80:74:22:FE:01:09:0F:46:F4:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LFvIOqbEvywfgoB0Iv4BCQ9G9C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
185.102.84.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1165::/48
2a0e:b107:2228::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
Signature Algorithm: sha256WithRSAEncryption
4c:68:f0:9e:0f:dc:21:2c:7a:ba:f2:44:b5:03:49:c9:b7:89:
74:8e:15:c4:2b:a9:e3:a1:c7:95:e7:29:54:36:10:a0:e5:c1:
e3:57:d9:37:37:42:9b:bf:5f:7b:f8:25:1a:02:0e:a9:66:d3:
3d:1b:b0:5f:b5:a6:a7:b5:75:32:08:8a:8f:03:75:8c:da:19:
03:36:b8:d0:46:5d:a1:c3:cb:d7:99:c6:17:1f:4a:5a:da:82:
f0:f7:cb:91:95:be:e5:d7:f6:fb:b7:be:17:ac:b4:ae:e5:2c:
cb:5c:6c:51:92:17:84:57:9a:86:d2:96:5a:df:4e:47:26:33:
e3:2d:22:db:13:7e:4d:c2:32:77:9f:64:8c:19:4f:11:5b:21:
82:f4:60:7e:2f:ba:53:06:a5:1c:57:79:52:f1:cd:b4:6b:b7:
50:ec:96:a0:36:4e:77:bc:c3:67:36:2a:f2:d2:43:27:3b:be:
10:75:15:fb:81:36:9b:ea:4f:21:d8:75:58:ad:3f:a5:13:31:
31:e7:dd:b0:1a:2d:55:87:ca:23:e4:63:84:ea:a9:9a:c4:98:
18:27:99:ce:66:50:af:26:fb:df:6d:30:1d:37:92:54:80:af:
36:c3:36:90:34:22:d0:ef:57:d4:82:ff:95:7b:99:f4:fa:1d:
81:d5:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:41 2026 by rpki-client