Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/l2rqq_GRsLUyUp2oarBXwxPDz-0.roa
File: l2rqq_GRsLUyUp2oarBXwxPDz-0.roa (raw, json)
Hash identifier: Xi3flxJeBdK/7++5BD8j/Md9YzUTg2l8DsCAYSS8HoM=
Subject key identifier: 97:6A:EA:AB:F1:91:B0:B5:32:52:9D:A8:6A:B0:57:C3:13:C3:CF:ED
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 019F572F4614F34002716FE37CDF7D37CC18
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/l2rqq_GRsLUyUp2oarBXwxPDz-0.roa
Signing time: Sun 12 Jul 2026 16:35:43 +0000
ROA not before: Sun 12 Jul 2026 16:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203455
IP address blocks: 185.133.132.0/24 maxlen: 24
185.133.133.0/24 maxlen: 24
185.133.134.0/24 maxlen: 24
185.133.135.0/24 maxlen: 24
2a05:70c0::/36 maxlen: 36
2a05:70c0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:2f:46:14:f3:40:02:71:6f:e3:7c:df:7d:37:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Jul 12 16:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976aeaabf191b0b532529da86ab057c313c3cfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:44:56:9a:1e:83:48:c6:78:b3:c8:12:7e:
82:3f:cd:ee:0f:61:02:18:14:b6:44:70:dc:22:67:
d8:47:49:da:3b:2b:80:53:d6:e8:48:01:17:81:2b:
fa:f8:42:71:f9:e5:75:3a:f8:dd:c1:5f:f2:45:76:
42:16:0b:63:cf:2c:d6:11:56:9f:b5:2d:e9:78:f8:
2f:f8:05:a5:01:c2:53:33:c4:d5:c1:b9:e9:28:02:
3f:58:6d:46:18:8d:c6:8f:d8:25:20:d0:e7:8e:c3:
03:95:b8:07:32:67:5f:28:4b:4a:e1:87:e7:ab:e7:
4c:d8:34:ea:d4:4a:52:ec:ba:00:91:18:4d:66:7c:
72:77:60:89:b8:c1:77:da:d0:41:d0:1e:23:b0:67:
8a:82:61:e2:a3:c8:33:73:6d:91:ff:d8:6a:15:9b:
d1:ad:02:21:2c:77:88:a8:bc:31:32:59:ce:e9:3b:
ad:5c:68:16:26:59:32:5a:f4:68:3e:28:a8:91:ce:
12:f2:43:e4:b5:1f:10:ed:62:76:ec:21:61:02:77:
2b:1c:d1:46:59:b8:be:0c:e0:31:e7:e2:86:d9:f2:
1e:1f:16:53:2e:f1:57:9e:2a:9a:c1:28:b2:ed:80:
dc:59:f0:2a:5a:d1:6c:9d:f3:29:da:ad:b7:ef:b2:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:EA:AB:F1:91:B0:B5:32:52:9D:A8:6A:B0:57:C3:13:C3:CF:ED
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/l2rqq_GRsLUyUp2oarBXwxPDz-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.132.0/22
IPv6:
2a05:70c0::/35
Signature Algorithm: sha256WithRSAEncryption
22:80:d4:ba:c4:1c:98:6c:a3:07:3b:a3:18:7e:8e:00:4d:3d:
a9:08:32:a4:01:1b:25:44:ef:9a:f7:f6:a4:3d:d6:94:e5:ab:
b0:cb:dd:35:f5:54:58:9d:83:e6:df:ef:36:f1:06:a3:df:0b:
f6:f9:ed:0e:4f:5c:10:40:70:64:51:d1:03:48:f2:ed:80:07:
6d:a8:25:15:45:cd:f4:ba:e1:b2:6f:ab:be:5c:4a:ca:bf:22:
96:32:8c:22:9a:4a:69:f9:06:8a:10:61:91:a3:c6:ad:6c:38:
81:29:00:10:63:d5:36:f3:0a:0c:da:6b:8d:86:54:4c:58:dc:
31:8d:51:ba:bf:30:9e:58:bb:0b:48:9c:18:9d:c5:a4:e6:3c:
06:9b:ae:d3:2a:6c:53:b9:71:16:ef:10:bd:d8:89:ae:a5:4e:
6b:c4:70:02:8e:1f:2c:56:88:f6:4d:95:56:6e:11:34:d7:31:
d7:7a:eb:ae:1d:2d:88:42:cf:91:11:a3:41:65:c0:22:de:17:
b0:66:9d:15:65:4e:52:09:f4:9f:16:14:6b:95:23:3d:e7:b2:
38:db:12:37:a3:72:e3:ae:f5:e8:c8:c2:b2:be:65:f0:0c:16:
26:e8:ff:50:f1:3e:07:a2:0f:e6:f0:78:9d:39:69:7f:f3:10:
b6:80:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:47 2026 by rpki-client