Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa
File: lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa (raw, json)
Hash identifier: MQZ0Y/f4J2tN35URQbJyIVwQHuBTWdjyvB5VP1KRnL0=
Subject key identifier: 96:94:62:4A:95:54:ED:69:15:2B:EC:01:81:FB:3F:A0:01:95:AC:7E
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019C0946A46E3E96501C3500074F4B02B006
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa
Signing time: Thu 29 Jan 2026 10:22:30 +0000
ROA not before: Thu 29 Jan 2026 10:22:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 192.166.139.0/24 maxlen: 24
2a0f:cac0:2::/48 maxlen: 48
2a0f:cac0:3::/48 maxlen: 48
2a0f:cac0:4::/48 maxlen: 48
2a0f:cac0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:46:a4:6e:3e:96:50:1c:35:00:07:4f:4b:02:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jan 29 10:22:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9694624a9554ed69152bec0181fb3fa00195ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:bd:54:c6:b7:4b:31:e0:39:a6:52:2a:c9:
22:88:e3:7f:6f:69:1b:01:b3:f7:99:80:01:35:1f:
e8:8a:6f:6e:e9:aa:93:d5:ee:d4:46:9d:dc:ae:41:
6c:68:d4:fa:69:2b:56:f6:06:b1:0c:b5:83:79:30:
7d:63:24:37:e2:03:93:24:dc:19:d5:50:84:17:8e:
a5:1d:fb:39:25:d8:97:2d:aa:31:05:e1:ca:4b:7e:
64:29:42:fb:13:2e:a6:36:57:f1:c9:5a:45:62:82:
9f:86:c1:da:fd:94:7e:eb:82:08:6d:25:dd:03:cf:
ef:7d:1d:8f:d9:c0:aa:85:7a:12:89:99:14:26:91:
ae:12:f4:f7:19:e1:43:8a:01:11:49:97:9e:0a:4e:
b3:96:e8:3a:fb:33:b8:ce:75:bb:e7:b2:7e:fc:00:
5d:75:43:97:52:8c:22:23:8b:d3:56:10:53:9e:0d:
88:82:58:80:93:3b:70:fc:28:11:2e:95:cf:ac:46:
a0:6b:e1:18:aa:2b:4a:b4:15:2a:5b:53:e8:2a:1c:
25:ac:76:3e:5b:da:23:87:35:58:bc:f0:a9:7e:ad:
1f:a6:0a:4a:2e:90:2c:28:3c:40:ef:7c:fc:f7:2d:
f1:6e:bf:1e:5d:87:a9:5d:ad:0c:db:ab:98:1e:e2:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:62:4A:95:54:ED:69:15:2B:EC:01:81:FB:3F:A0:01:95:AC:7E
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.139.0/24
IPv6:
2a0f:cac0:2::-2a0f:cac0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:8c:68:13:39:cf:1f:64:92:89:3c:e4:d3:36:16:8e:c3:b7:
49:03:be:17:dc:95:90:fc:7e:3a:54:9b:ce:d4:7c:fe:a1:cd:
82:6d:ec:83:22:2f:47:46:76:bc:0c:c9:10:0e:ab:01:7b:5b:
a8:3f:7a:6e:a8:9c:cf:34:af:60:04:55:54:24:05:84:a8:5a:
7b:b2:07:9c:3b:e5:7e:ca:0d:aa:0c:cf:0f:86:39:08:e1:13:
67:1a:a5:bb:1f:90:3b:3e:73:f0:d4:32:38:7f:0f:41:92:10:
3a:7e:4e:ed:04:ae:3a:8b:03:06:00:f3:62:85:4a:85:ee:eb:
c3:6e:36:0c:c3:16:1a:6b:c5:7e:e4:54:32:51:17:5e:42:96:
3a:ef:bb:df:b7:1b:53:83:37:57:e0:0f:cb:48:2b:b0:f8:a2:
b9:e9:4a:5f:55:25:cf:f5:5b:42:f7:3a:6c:50:5b:ab:0c:b8:
cd:ec:c7:d5:9f:68:30:5a:6c:cb:d8:31:9d:5d:64:a5:37:f9:
52:f0:43:98:b7:2d:ac:61:2d:12:ec:99:d0:ff:11:09:87:7e:
a4:77:6c:60:b2:e7:57:05:04:ae:8a:b4:89:a2:c4:f3:a7:5f:
07:07:e8:86:e0:22:29:4f:5f:14:83:3e:1a:a1:93:5b:30:8d:
ab:bb:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:34:00 2026 by rpki-client