Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/1-lozbj90cEVrWfLXpW3TMtR_PG4.roa
File: 1-lozbj90cEVrWfLXpW3TMtR_PG4.roa (raw, json)
Hash identifier: yo16aFrNe1K/8qY2QGw1QDgUIGMnW024P9x1aOJw2jM=
Subject key identifier: FA:5A:33:6E:3F:74:70:45:6B:59:F2:D7:A5:6D:D3:32:D4:7F:3C:6E
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019F229C1AD0AD59661E8E2F7232FAC6B1D0
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/1-lozbj90cEVrWfLXpW3TMtR_PG4.roa
Signing time: Thu 02 Jul 2026 11:34:43 +0000
ROA not before: Thu 02 Jul 2026 11:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47524
IP address blocks: 24.133.0.0/16 maxlen: 24
24.133.152.0/22 maxlen: 24
24.133.156.0/22 maxlen: 24
46.196.0.0/15 maxlen: 24
83.138.192.0/18 maxlen: 24
94.54.0.0/15 maxlen: 24
94.55.64.0/20 maxlen: 24
94.55.80.0/21 maxlen: 24
94.55.88.0/22 maxlen: 24
94.55.96.0/22 maxlen: 24
94.55.112.0/22 maxlen: 24
94.55.116.0/22 maxlen: 24
94.55.120.0/23 maxlen: 24
94.55.122.0/23 maxlen: 24
94.55.124.0/23 maxlen: 24
94.55.126.0/24 maxlen: 24
94.55.127.0/24 maxlen: 24
153.56.160.0/21 maxlen: 24
159.100.60.0/22 maxlen: 22
176.240.0.0/16 maxlen: 24
178.233.0.0/16 maxlen: 24
185.26.68.0/22 maxlen: 24
185.26.68.0/24 maxlen: 24
185.26.69.0/24 maxlen: 24
185.26.70.0/24 maxlen: 24
185.26.71.0/24 maxlen: 24
2a00:1d58::/29 maxlen: 48
2a00:1d58::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:9c:1a:d0:ad:59:66:1e:8e:2f:72:32:fa:c6:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jul 2 11:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa5a336e3f7470456b59f2d7a56dd332d47f3c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:59:bb:2b:14:90:f6:31:3d:56:03:be:aa:
7d:67:81:e5:ac:10:87:3b:12:e8:2f:11:67:64:0b:
86:27:96:41:6b:c6:32:7a:f3:e3:95:be:11:6a:f9:
3d:b5:1b:92:6e:cb:63:cc:be:4a:79:d9:04:82:4f:
1c:d3:67:fd:4d:8f:38:b9:6a:35:ab:23:4b:1c:af:
d3:a7:d3:54:45:b8:41:c9:e9:0f:d4:81:b6:50:63:
92:49:d2:10:6f:5e:be:5b:70:06:c2:14:bd:f4:e5:
da:70:4a:48:7d:8e:ec:f4:9b:c2:87:ee:fa:ba:dc:
98:c0:88:5c:ee:44:9f:dc:5f:f1:0d:eb:61:1c:30:
08:be:91:e1:56:3e:7c:5f:8b:53:4a:ba:80:08:5a:
bf:bf:51:16:b9:82:74:b7:88:b3:42:15:3a:23:b5:
95:07:a2:72:5f:09:a8:e7:8f:48:34:75:a2:33:2a:
a2:fd:16:e9:c0:44:eb:d3:96:5c:f6:5a:df:d2:09:
f3:69:1a:e3:9a:e8:6f:85:f0:39:72:96:bc:09:bb:
4d:62:69:e5:93:0d:7d:cc:47:3e:40:e8:3b:9e:81:
63:2b:32:a3:e8:0a:43:c3:ae:13:1b:f4:e1:db:34:
ed:be:38:2d:95:4f:1c:58:78:e7:7b:9f:67:b0:57:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:33:6E:3F:74:70:45:6B:59:F2:D7:A5:6D:D3:32:D4:7F:3C:6E
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/1-lozbj90cEVrWfLXpW3TMtR_PG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.133.0.0/16
46.196.0.0/15
83.138.192.0/18
94.54.0.0/15
153.56.160.0/21
159.100.60.0/22
176.240.0.0/16
178.233.0.0/16
185.26.68.0/22
IPv6:
2a00:1d58::/29
Signature Algorithm: sha256WithRSAEncryption
87:d8:69:7d:e7:e3:03:14:21:10:61:52:14:f1:d7:0c:92:a8:
5a:8e:4b:c2:57:4e:08:1b:6c:07:04:96:34:ed:5c:02:39:ad:
6c:6d:e7:68:37:eb:79:a4:bb:51:ff:13:bd:35:4e:69:de:46:
da:d1:c3:da:2a:04:78:87:89:a7:02:f6:4a:d0:58:71:5b:cf:
84:8b:34:c5:2c:e7:a4:cb:9c:45:a8:59:b3:6a:57:c5:d5:5c:
b7:ed:b5:1d:31:54:c8:bd:46:fc:a6:bb:c8:41:ec:47:06:88:
d6:82:61:89:8b:d5:5c:54:cb:da:74:60:29:4d:d6:7d:71:7b:
b3:9b:6d:0b:49:e7:a5:7c:87:b0:ef:ad:f6:73:6b:77:60:2a:
84:2d:6b:e9:a5:28:b2:8f:c1:b8:7e:b9:60:86:f4:7c:b9:ce:
72:c6:09:c1:df:11:8a:80:7d:69:7e:85:f2:e9:5f:50:85:dd:
9d:31:04:7d:bb:16:73:92:55:6c:c7:47:bd:60:8f:a1:21:74:
5f:45:af:5f:c2:2d:c5:aa:90:46:6c:ea:33:d3:2c:34:b0:f6:
d0:4f:4d:bf:f7:c6:05:6d:cd:77:02:a4:0d:08:10:75:3e:c4:
7b:5d:ba:d3:e8:b8:ea:64:e8:1a:48:ed:11:5a:22:6d:e7:c4:
fd:c9:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:24 2026 by rpki-client