Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/LjSdr9B9wj4mWtq3IlEvttfmMjU.roa
File: LjSdr9B9wj4mWtq3IlEvttfmMjU.roa (raw, json)
Hash identifier: i/sgZvK4PH/mcXlmFcLob0Fsos8xZHi/OSJT6TIAm9Y=
Subject key identifier: 2E:34:9D:AF:D0:7D:C2:3E:26:5A:DA:B7:22:51:2F:B6:D7:E6:32:35
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A1207C8B079EBF0086D0390464A796CFA3
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/LjSdr9B9wj4mWtq3IlEvttfmMjU.roa
Signing time: Fri 09 Oct 2026 11:46:35 +0000
ROA not before: Fri 09 Oct 2026 11:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218658
IP address blocks: 95.86.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:7c:8b:07:9e:bf:00:86:d0:39:04:64:a7:96:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Oct 9 11:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e349dafd07dc23e265adab722512fb6d7e63235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:24:15:99:66:ad:1d:b3:4a:e3:78:aa:08:
4f:28:6e:9a:e5:8e:fb:3b:a6:0e:15:01:67:38:f3:
cd:a9:b4:94:73:17:61:9d:3e:20:c2:f6:8b:c6:03:
26:d0:a1:ea:3d:f6:82:cd:4b:ab:ca:3c:2f:d9:b3:
4e:73:0b:18:d8:68:02:e6:a1:3b:71:22:03:08:3a:
7b:dd:7e:31:e9:b2:ad:29:ab:03:26:87:63:85:ba:
f4:2d:48:29:a1:46:04:fc:c9:a1:3e:26:32:41:7f:
ee:51:2d:cf:24:44:6a:57:ef:37:7a:e6:a8:89:01:
55:a6:10:fc:c9:d9:67:d2:10:af:8d:12:97:ae:b4:
de:f0:64:78:e7:d7:4b:1e:40:2a:22:b2:9b:69:bd:
9a:1f:de:0a:77:fb:2f:a6:e6:29:eb:60:d9:a4:53:
49:03:39:bd:77:1e:15:72:a1:de:81:c5:e8:2c:db:
12:67:37:b3:45:c7:81:fa:d4:e5:2c:0e:a5:81:cf:
87:b5:1a:80:33:de:0e:5b:1e:6d:6c:74:c0:43:24:
a0:8d:51:89:aa:20:d7:c4:3e:73:6b:90:9b:7c:1e:
5b:f5:24:f6:6f:ac:f9:7b:b8:ef:80:6c:21:3f:ac:
19:ad:98:59:0b:e9:ed:07:15:e4:95:cd:ad:fe:5a:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:9D:AF:D0:7D:C2:3E:26:5A:DA:B7:22:51:2F:B6:D7:E6:32:35
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/LjSdr9B9wj4mWtq3IlEvttfmMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.157.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fa:2b:fa:23:b1:06:27:1e:c3:79:29:fe:ba:bf:b9:d2:92:
71:be:10:f3:06:ef:92:95:20:11:63:77:6e:5f:b9:74:1f:42:
e4:0d:bb:06:b4:69:9a:03:b1:75:56:9f:9e:83:fd:64:68:3b:
04:0d:6e:02:17:77:2f:ee:ea:5a:4a:0e:fd:c9:6a:4f:1c:79:
14:33:bf:3c:9c:c9:6f:84:23:df:7f:f8:cf:fd:ba:23:f7:07:
91:bf:12:c6:18:49:f4:57:af:8a:85:77:1b:d4:8d:15:bc:46:
69:de:72:67:f0:e1:de:4b:43:b1:6e:f7:c9:6e:46:12:df:1e:
d4:61:43:cb:46:ed:c7:56:b7:4f:60:47:03:b3:e9:59:30:54:
41:44:db:97:fc:f0:03:65:52:0a:df:a0:ea:c4:fc:bb:c3:cc:
ed:a2:96:13:d6:a3:05:7c:5f:fd:f2:d3:78:4a:5f:25:8e:e9:
43:61:9b:8d:d6:79:07:8e:0b:c7:c5:08:d5:8e:e3:1f:65:b6:
10:12:6d:4a:98:9c:50:67:3c:01:50:e5:bf:32:27:dc:51:29:
54:14:b4:79:6b:cc:f2:c7:6b:ee:99:91:29:ae:9d:63:6a:28:
04:77:6e:76:74:d6:0e:2d:b7:fe:02:1e:ef:d6:3b:2d:65:8a:
05:0a:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:11 2026 by rpki-client