Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lh__DvN3UTVAunXsscwI8xchbhg.roa
File: Lh__DvN3UTVAunXsscwI8xchbhg.roa (raw, json)
Hash identifier: 6/ujTURlyFylepQZCv7awzbn5BRzq/HgXELtaLoHBFA=
Subject key identifier: 2E:1F:FF:0E:F3:77:51:35:40:BA:75:EC:B1:CC:08:F3:17:21:6E:18
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E5FFDEC5FBED95FA7CD519994DB8C2793
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lh__DvN3UTVAunXsscwI8xchbhg.roa
Signing time: Mon 25 May 2026 16:35:37 +0000
ROA not before: Mon 25 May 2026 16:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 45.91.236.0/24 maxlen: 24
45.91.237.0/24 maxlen: 24
91.240.254.0/24 maxlen: 24
185.201.28.0/24 maxlen: 24
186.246.24.0/24 maxlen: 24
186.246.25.0/24 maxlen: 24
186.246.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:fd:ec:5f:be:d9:5f:a7:cd:51:99:94:db:8c:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 25 16:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e1fff0ef377513540ba75ecb1cc08f317216e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:9a:b8:62:2b:d8:48:65:b7:3a:f6:54:3c:
50:0b:27:97:3d:d3:45:ab:2b:d1:0a:e5:76:66:b2:
5a:5d:8c:bc:ad:b5:b7:fe:81:8d:b3:f3:12:a1:ca:
65:9c:31:81:f2:58:40:41:48:8f:f7:26:6f:64:d6:
d9:bc:84:d5:67:94:31:95:63:ce:6d:c8:c3:b9:0f:
57:0b:d0:76:1d:91:ee:1c:f5:38:46:8e:20:4f:db:
d1:0d:fe:3b:d0:cb:74:ad:64:40:90:46:22:9e:39:
d0:71:a0:67:c2:4a:4f:f5:ca:3c:64:ec:50:0a:43:
b5:ed:ba:ab:ec:30:5e:e3:af:48:cc:50:ff:35:3a:
53:82:db:2a:d6:1c:de:ff:12:e3:ab:2f:f8:ed:14:
b6:05:47:fc:a3:38:76:1f:e0:37:17:74:d5:a6:63:
6b:34:9e:a2:04:9e:63:67:11:e3:04:09:2a:ab:0c:
04:d7:ac:e1:b3:17:4f:d4:b3:fd:11:7e:88:e7:d5:
9c:2a:17:78:cf:44:eb:f8:8c:03:d0:e7:7c:8d:e0:
d3:be:3d:ff:22:38:8f:ba:e8:75:5b:5f:5a:c0:0c:
1d:5f:c3:fe:8b:fc:2c:c0:8d:14:57:01:4b:b1:37:
c8:a8:95:00:b4:5b:e3:04:2e:4d:09:1d:91:9f:69:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:FF:0E:F3:77:51:35:40:BA:75:EC:B1:CC:08:F3:17:21:6E:18
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Lh__DvN3UTVAunXsscwI8xchbhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.236.0/23
91.240.254.0/24
185.201.28.0/24
186.246.24.0-186.246.26.255
Signature Algorithm: sha256WithRSAEncryption
61:f1:f9:12:27:4d:59:ef:ae:f2:ab:6c:94:26:b3:0e:3e:f5:
cb:f1:71:dc:e6:15:94:64:86:e4:02:0e:54:62:72:f2:1f:17:
6d:90:f2:b6:97:e0:e0:c1:3f:f9:d4:bc:4f:02:97:84:be:aa:
93:15:cf:1b:12:85:8c:5c:97:0f:10:af:3b:ac:ca:ab:76:db:
f7:9e:9b:8d:12:a9:dd:37:d5:06:e6:ae:5c:e4:97:1f:95:f9:
b1:19:08:d2:c3:0a:92:df:e7:1c:83:08:0f:ec:9c:a3:f1:aa:
06:36:aa:de:1d:1d:e2:6f:f7:5a:33:aa:3c:3d:a7:c1:f8:9f:
52:57:29:6d:8d:e5:e2:a2:d4:bd:bd:51:bf:f9:dc:04:37:f3:
7d:fd:44:27:e2:de:aa:2e:8d:a6:af:1c:fe:b0:03:79:7a:d3:
da:a0:5a:c8:d5:cc:fa:d5:14:a6:92:44:d9:54:b3:00:5f:60:
1d:39:b2:01:66:7f:ea:8c:e1:98:19:72:e6:f5:76:32:1b:2d:
47:c6:95:4f:29:b5:5d:f0:4a:90:4d:c9:5b:5f:a1:af:15:27:
77:5c:01:99:9b:25:99:81:a9:d5:99:c2:9e:53:6c:9c:3a:87:
d9:a3:0c:89:31:65:7b:de:f6:7f:4c:82:5e:f6:a8:09:14:4a:
35:b1:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:28 2026 by rpki-client