Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/L4Sbl1-z8UK2yeLo7GSPcqGMg8Q.roa
File: L4Sbl1-z8UK2yeLo7GSPcqGMg8Q.roa (raw, json)
Hash identifier: 1f411shku7kLw/HnC23Axo3jTM4GmplRNwgHj+KtHeU=
Subject key identifier: 2F:84:9B:97:5F:B3:F1:42:B6:C9:E2:E8:EC:64:8F:72:A1:8C:83:C4
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A019DAF9BB4140360D565D400C8B09004E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/L4Sbl1-z8UK2yeLo7GSPcqGMg8Q.roa
Signing time: Wed 19 Aug 2026 11:49:36 +0000
ROA not before: Wed 19 Aug 2026 11:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 5.253.226.0/24 maxlen: 24
45.14.181.0/24 maxlen: 24
45.14.182.0/24 maxlen: 24
45.14.183.0/24 maxlen: 24
194.99.112.0/24 maxlen: 24
194.104.1.0/24 maxlen: 24
194.104.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:da:f9:bb:41:40:36:0d:56:5d:40:0c:8b:09:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Aug 19 11:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f849b975fb3f142b6c9e2e8ec648f72a18c83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:b7:86:f4:95:4e:57:9d:7f:29:d0:05:db:
66:b6:b1:18:22:73:b3:74:fa:a7:61:1c:e1:05:a5:
6c:1b:c4:45:5f:cf:18:62:ff:a6:7e:e1:75:b2:1f:
9a:b5:40:aa:b9:de:5f:54:d5:d6:8c:32:60:e8:e7:
88:d1:c8:c5:6d:92:21:a4:b1:56:e3:08:03:99:33:
b2:fd:14:cd:a2:df:03:7a:43:d4:0b:36:52:66:ec:
23:6e:20:f9:10:1c:fe:f9:73:27:09:12:7e:3d:e7:
e7:76:b9:d8:73:e8:4d:6a:d6:93:de:b3:b0:6d:be:
07:bf:fd:e5:1b:bd:9a:9e:67:2f:c5:35:39:f5:cf:
a9:36:f6:3e:5b:47:48:97:b9:cc:39:67:13:4c:1f:
0b:51:e4:86:dd:96:b8:2a:05:2e:31:d2:72:34:a9:
64:8e:91:0c:97:5d:31:55:b6:37:2a:d4:d7:66:d4:
7c:a2:81:86:b6:6a:6a:a6:bf:00:a3:5c:87:b4:7d:
72:c6:91:d2:2f:d2:5f:87:92:13:49:8b:9a:28:32:
2b:83:ac:6a:23:8e:42:be:ea:17:3a:6d:34:74:20:
cb:7f:a2:03:aa:a5:a1:fc:8f:bb:aa:43:cd:0c:28:
9e:fd:70:4b:e0:59:69:86:06:b8:aa:1a:32:bd:f5:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:9B:97:5F:B3:F1:42:B6:C9:E2:E8:EC:64:8F:72:A1:8C:83:C4
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/L4Sbl1-z8UK2yeLo7GSPcqGMg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.226.0/24
45.14.181.0-45.14.183.255
194.99.112.0/24
194.104.1.0/24
194.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
59:00:de:45:9f:3c:67:e4:dd:28:2e:f3:33:07:f4:45:0b:fa:
32:e3:ec:57:ce:e3:0b:c5:ab:fb:6a:e1:9a:8e:90:ca:71:4d:
2c:9e:99:3d:9a:7f:e1:6a:f0:25:e5:24:c9:7e:b5:09:d9:62:
d9:e0:17:06:cf:f9:eb:5a:0d:64:83:95:20:da:7f:41:8d:52:
40:61:41:51:3e:31:69:a3:7e:3a:50:d8:7c:82:97:50:20:42:
90:d7:93:18:ed:9d:fc:82:82:c2:e8:f3:2d:f8:fc:a7:e8:57:
36:6c:19:9d:ee:ed:f6:8e:5b:77:50:50:ab:68:ca:07:c9:d7:
11:73:80:c2:64:36:07:2a:89:cd:04:e5:33:31:2c:ff:88:ae:
52:8f:22:98:f7:d9:64:16:89:4f:d3:db:05:49:33:b0:d9:24:
3f:d5:1c:45:2f:78:d8:8c:f5:8d:b8:4a:d4:1d:8b:65:55:e8:
d6:2f:7b:23:f2:f3:46:bb:60:45:a7:8f:5e:ef:8e:9c:07:6e:
1b:6b:38:85:39:52:ba:af:fe:77:04:f3:16:63:de:88:74:8b:
90:c9:94:e1:c1:a9:1b:ed:50:b1:b7:90:58:62:28:cf:75:e8:
be:42:c8:d2:b4:45:b9:14:62:dd:66:bb:84:f0:7b:7a:f3:3d:
fc:18:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:10 2026 by rpki-client