Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ndrPzlCHUTjohyoAIv4ceVY91M.roa
File: 1ndrPzlCHUTjohyoAIv4ceVY91M.roa (raw, json)
Hash identifier: kwxcPnS+EwyAtP4vNomZBVZf4879KfPvcyviC74DpPs=
Subject key identifier: D6:77:6B:3F:39:42:1D:44:E3:A2:1C:A8:00:8B:F8:71:E5:58:F7:53
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019DB55DF4B33969DC65B8E08F6CE0A2A9E0
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ndrPzlCHUTjohyoAIv4ceVY91M.roa
Signing time: Wed 22 Apr 2026 13:25:26 +0000
ROA not before: Wed 22 Apr 2026 13:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 5.34.180.0/23 maxlen: 23
46.28.65.0/24 maxlen: 24
46.28.66.0/24 maxlen: 24
46.28.68.0/24 maxlen: 24
46.28.69.0/24 maxlen: 24
82.118.16.0/24 maxlen: 24
82.118.19.0/24 maxlen: 24
185.14.28.0/22 maxlen: 22
195.123.216.0/21 maxlen: 21
195.123.237.0/24 maxlen: 24
217.12.200.0/23 maxlen: 23
217.12.208.0/23 maxlen: 23
217.12.215.0/24 maxlen: 24
217.12.218.0/24 maxlen: 24
217.12.219.0/24 maxlen: 24
217.12.220.0/24 maxlen: 24
2a02:27a9::/32 maxlen: 32
2a02:27ab::/32 maxlen: 32
2a02:27ae::/32 maxlen: 32
2a02:27af::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:5d:f4:b3:39:69:dc:65:b8:e0:8f:6c:e0:a2:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 22 13:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6776b3f39421d44e3a21ca8008bf871e558f753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:22:9e:20:33:c8:ef:15:87:64:41:a5:fc:
81:d8:23:2e:55:06:e4:af:3b:83:d5:7e:09:3d:26:
c1:76:7d:c7:e0:af:42:3b:95:8b:d8:7b:04:08:19:
e7:4d:df:8b:6d:af:bc:c6:f5:10:bd:4e:c0:f8:a7:
10:31:5f:d5:14:e9:18:94:71:55:ab:47:40:5d:d5:
a3:7a:a5:ed:9b:b6:34:01:eb:95:4e:87:fe:a6:69:
ea:3f:ae:83:67:47:45:0e:e8:1f:3d:a2:ab:0c:d1:
ab:12:9e:d7:7f:57:ee:41:43:90:d7:22:c5:8d:21:
4c:48:2f:f4:0f:14:2f:29:12:bc:de:a9:7b:fd:e9:
75:2d:46:08:26:a0:58:ff:b3:f6:18:58:70:b2:15:
22:1c:cb:22:3c:41:b9:09:32:15:8d:fb:1e:e8:88:
8c:93:64:61:80:d5:b2:08:11:c5:c4:41:1d:28:7d:
e0:2c:80:9d:cb:17:ed:6c:3b:87:05:72:77:cd:9b:
bc:63:d6:71:6b:83:b4:0a:70:8b:b6:08:ce:bd:7d:
51:17:4d:70:f9:f0:2b:b0:19:9d:29:e7:f4:0a:ec:
45:b1:e7:e0:a2:98:3e:c7:70:2e:04:8a:04:f1:c7:
90:45:43:d1:22:df:88:b5:9a:16:19:42:f6:f1:77:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:6B:3F:39:42:1D:44:E3:A2:1C:A8:00:8B:F8:71:E5:58:F7:53
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ndrPzlCHUTjohyoAIv4ceVY91M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.180.0/23
46.28.65.0-46.28.66.255
46.28.68.0/23
82.118.16.0/24
82.118.19.0/24
185.14.28.0/22
195.123.216.0/21
195.123.237.0/24
217.12.200.0/23
217.12.208.0/23
217.12.215.0/24
217.12.218.0-217.12.220.255
IPv6:
2a02:27a9::/32
2a02:27ab::/32
2a02:27ae::/31
Signature Algorithm: sha256WithRSAEncryption
18:89:4b:a1:d5:59:ae:7f:b8:b3:d6:01:33:32:88:41:e3:fe:
06:9f:44:b1:b7:39:44:4a:60:82:54:05:a1:ee:39:10:1c:e3:
19:e0:d6:0d:18:04:50:82:8a:99:a7:4f:a8:08:74:da:1f:05:
e2:b1:4c:b4:05:76:9a:cf:09:9c:e8:95:df:ba:2a:fc:da:f9:
59:8b:dc:4f:de:a1:47:ab:7b:b5:fc:25:e3:44:37:18:16:c1:
cb:c8:f5:9d:bb:2a:37:51:61:92:4b:5b:59:a2:97:4c:58:49:
32:44:95:df:80:da:dd:bc:66:d3:bc:a1:d3:83:3e:b3:de:46:
2f:33:2d:65:ce:aa:a1:9d:0c:a0:f9:1c:b4:74:7e:7a:0b:3a:
0b:92:3a:9f:20:e5:c3:31:73:f9:20:3e:2e:87:9a:a0:be:3e:
a3:74:e6:cd:38:e9:c8:9b:01:bf:24:71:c9:c8:79:8e:4c:be:
b1:7f:86:16:c2:da:b2:a9:4a:86:6b:b8:75:5f:54:1d:d3:a8:
ca:59:bb:3f:8b:14:2d:b5:6d:21:73:b5:8d:a2:e7:01:ec:7c:
8d:9f:36:37:ae:2c:c0:87:50:9a:ee:c2:9a:db:f2:8e:44:d6:
de:25:16:a8:a8:a5:5c:66:0d:a0:ab:d9:2f:0d:08:06:64:30:
33:cc:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:31 2026 by rpki-client