Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lOMix-vgun718xSEDYQ23X_FxOU.roa
File: lOMix-vgun718xSEDYQ23X_FxOU.roa (raw, json)
Hash identifier: CH5CwrOyV2SQrFBB4S8xIy2MjoI56OKneM7pjA1r4J0=
Subject key identifier: 94:E3:22:C7:EB:E0:BA:7E:F5:F3:14:84:0D:84:36:DD:7F:C5:C4:E5
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019FD75A1AB6BC2A29C2DFB9D80748B0F3CC
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lOMix-vgun718xSEDYQ23X_FxOU.roa
Signing time: Thu 06 Aug 2026 13:53:54 +0000
ROA not before: Thu 06 Aug 2026 13:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:5a:1a:b6:bc:2a:29:c2:df:b9:d8:07:48:b0:f3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Aug 6 13:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e322c7ebe0ba7ef5f314840d8436dd7fc5c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:e0:de:ba:e8:20:99:de:09:1f:81:94:ed:
96:63:54:d2:27:80:33:80:cd:01:e1:a6:d5:de:65:
51:54:e4:bf:af:d1:0e:d0:bd:db:3d:36:dd:7b:76:
22:7d:5a:72:40:92:38:60:ca:41:60:0a:44:ce:fd:
ea:58:11:ad:9c:2d:db:93:73:12:3c:f4:55:43:c0:
fd:b3:bd:3c:35:fb:3b:c3:6b:81:ad:b8:38:6b:ce:
90:c3:b4:3c:74:fd:80:cb:04:89:0b:26:6b:49:a1:
64:5d:3f:9f:c0:6a:74:94:69:f5:7f:e5:1b:a6:fd:
8a:0b:3e:de:6c:d8:c7:8c:e9:61:fa:12:58:93:ac:
9c:db:67:c7:fe:7f:4b:8c:a7:3c:10:83:56:c4:25:
ba:b1:77:54:1a:e3:9f:21:34:6d:d2:e8:63:07:09:
bd:3d:b0:08:18:2a:c2:11:71:a7:6c:15:7e:42:fe:
24:d4:43:7a:ca:b5:d5:16:c4:16:6f:a4:6a:d3:69:
84:e9:a2:49:7f:e8:fe:00:36:7d:fb:e7:4d:fb:f1:
3b:be:87:45:76:1a:7e:42:26:66:d1:33:89:b8:eb:
8a:18:43:b5:4e:aa:18:18:52:7c:9e:b5:3d:01:e3:
4e:e8:6f:c2:81:d9:1d:a1:b3:e6:2d:b5:cd:c1:86:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:22:C7:EB:E0:BA:7E:F5:F3:14:84:0D:84:36:DD:7F:C5:C4:E5
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/lOMix-vgun718xSEDYQ23X_FxOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a6:87:bd:93:a5:e0:ab:ec:03:be:09:d4:63:a8:48:46:75:
3b:fb:f4:f1:d1:3a:66:ad:29:d4:4e:10:b3:7d:5c:9f:33:ee:
45:b2:c6:16:40:e2:9e:98:c3:38:a8:2d:4e:49:5a:e4:58:1b:
b1:34:68:7f:bf:ba:21:3d:0f:74:ee:18:94:f3:a5:68:58:2d:
f3:b3:b5:6e:97:28:c9:67:f7:4b:82:86:ff:c8:9f:d9:5a:7c:
3f:78:3e:65:5f:9e:6b:aa:37:6b:35:18:7c:a9:33:6a:4f:e2:
a2:2e:c0:5a:f9:34:9b:06:d6:b7:47:0d:c1:b9:05:b0:92:e5:
dc:b3:69:7e:83:e3:91:82:14:de:50:f4:a2:74:06:72:be:06:
66:00:46:e8:e4:76:d5:56:4e:ad:41:fe:3a:26:0a:b9:85:57:
03:75:33:cf:58:29:1e:fe:d3:75:02:53:28:38:44:67:b9:39:
cb:47:0a:86:21:9a:69:c1:15:26:34:91:9b:30:3c:f5:da:23:
23:c7:c5:a0:4b:a7:ac:94:bf:a2:76:be:e5:5a:9c:bb:25:a7:
a6:db:f4:23:f6:b9:37:da:95:a7:38:22:68:34:18:65:c2:a2:
b7:b3:b3:5f:02:9b:ab:2c:ca:2c:28:f8:94:8c:2b:3f:4d:e4:
b9:ce:3a:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/XWhq2vCopwt+52AdIsPPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYwODA2MTM1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGUzMjJjN2ViZTBiYTdlZjVmMzE0ODQwZDg0MzZkZDdmYzVjNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsTg3rroIJneCR+BlO2WY1TSJ4Az
gM0B4abV3mVRVOS/r9EO0L3bPTbde3YifVpyQJI4YMpBYApEzv3qWBGtnC3bk3MS
PPRVQ8D9s708Nfs7w2uBrbg4a86Qw7Q8dP2AywSJCyZrSaFkXT+fwGp0lGn1f+Ub
pv2KCz7ebNjHjOlh+hJYk6yc22fH/n9LjKc8EINWxCW6sXdUGuOfITRt0uhjBwm9
PbAIGCrCEXGnbBV+Qv4k1EN6yrXVFsQWb6Rq02mE6aJJf+j+ADZ9++dN+/E7vodF
dhp+QiZm0TOJuOuKGEO1TqoYGFJ8nrU9AeNO6G/CgdkdobPmLbXNwYYBmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJTjIsfr4Lp+9fMUhA2ENt1/xcTlMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvbE9NaXgtdmd1bjcxOHhTRURZUTIzWF9GeE9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVwSMA0G
CSqGSIb3DQEBCwUAA4IBAQCOpoe9k6Xgq+wDvgnUY6hIRnU7+/Tx0TpmrSnUThCz
fVyfM+5FssYWQOKemMM4qC1OSVrkWBuxNGh/v7ohPQ907hiU86VoWC3zs7VulyjJ
Z/dLgob/yJ/ZWnw/eD5lX55rqjdrNRh8qTNqT+KiLsBa+TSbBta3Rw3BuQWwkuXc
s2l+g+ORghTeUPSidAZyvgZmAEbo5HbVVk6tQf46Jgq5hVcDdTPPWCke/tN1AlMo
OERnuTnLRwqGIZppwRUmNJGbMDz12iMjx8WgS6eslL+idr7lWpy7Jaem2/Qj9rk3
2pWnOCJoNBhlwqK3s7NfApurLMosKPiUjCs/TeS5zjrA
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:33 2026 by rpki-client