Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/LVpA2eT9ZH_XEYx_C_tiYZYSv94.roa
File: LVpA2eT9ZH_XEYx_C_tiYZYSv94.roa (raw, json)
Hash identifier: ObimPwPFfxDwji+tB0Lj615a/GTDD+cPhw0fecZv/40=
Subject key identifier: 2D:5A:40:D9:E4:FD:64:7F:D7:11:8C:7F:0B:FB:62:61:96:12:BF:DE
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019E5E7CD58753FFC10C16C55BBC2ADF7719
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/LVpA2eT9ZH_XEYx_C_tiYZYSv94.roa
Signing time: Mon 25 May 2026 09:34:59 +0000
ROA not before: Mon 25 May 2026 09:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206948
IP address blocks: 91.226.78.0/24 maxlen: 24
91.226.160.0/24 maxlen: 24
91.226.184.0/24 maxlen: 24
150.251.76.0/22 maxlen: 22
185.216.182.0/23 maxlen: 23
2a13:8440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:7c:d5:87:53:ff:c1:0c:16:c5:5b:bc:2a:df:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: May 25 09:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d5a40d9e4fd647fd7118c7f0bfb62619612bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:58:2b:8e:73:40:a1:3c:9d:9a:f8:21:9e:
ce:88:43:8c:f0:a0:97:05:6d:2c:88:1a:11:aa:69:
67:0a:77:2b:f5:ad:1f:4c:e5:df:71:39:07:c4:5e:
e5:1b:af:2f:fa:c5:5f:48:d3:9e:0c:fe:1c:36:0b:
c6:2c:1b:ac:0c:ea:1e:5d:d0:b9:33:5d:1c:e9:56:
93:90:be:1c:e1:bb:68:f6:0e:e1:0f:48:b4:ab:d7:
9e:b3:58:38:a9:a9:58:cd:ce:eb:23:82:1e:df:54:
24:49:f3:76:ea:5f:bc:b8:98:ea:11:03:d8:f3:cf:
e2:c5:dc:f2:86:2d:0f:71:63:a1:71:1b:b8:cc:3b:
57:b0:90:55:de:db:b0:6d:b3:91:69:9d:04:5a:b3:
b5:d1:af:9d:7a:3c:28:fd:43:41:a0:09:14:96:f8:
9d:61:7b:16:ec:c1:e3:eb:e0:57:0a:4e:b3:96:3f:
1b:00:b2:85:39:44:e8:e4:fb:5c:4a:84:2e:f5:5c:
b1:25:e5:48:dd:fa:ba:2e:68:d1:7b:f4:c7:e2:c0:
43:d8:ff:e2:86:cd:b5:77:c7:62:f4:66:47:2f:8f:
f2:52:ce:bc:f7:91:b5:6e:8a:8a:70:01:b5:00:3f:
91:84:9b:a1:a2:51:dc:f4:a1:24:6d:07:ff:93:1d:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:40:D9:E4:FD:64:7F:D7:11:8C:7F:0B:FB:62:61:96:12:BF:DE
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/LVpA2eT9ZH_XEYx_C_tiYZYSv94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.78.0/24
91.226.160.0/24
91.226.184.0/24
150.251.76.0/22
185.216.182.0/23
IPv6:
2a13:8440::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1a:32:cc:ce:4a:43:26:8f:68:ac:13:e6:7d:44:90:c1:66:
00:71:51:48:b4:33:04:73:ed:3d:30:b5:c5:65:0a:34:d1:61:
39:6d:b3:68:2d:31:4f:08:ab:f4:44:ea:5a:4a:7e:98:21:de:
44:8c:ad:a8:c1:d9:a9:27:dd:e4:d9:01:61:46:03:ae:33:a1:
8d:1a:5a:01:da:a5:76:65:58:3f:f0:03:0f:34:73:2a:06:1e:
dc:32:13:9e:6a:de:2b:51:09:3f:88:47:54:bc:7b:6e:a0:08:
24:76:78:a3:35:75:d6:97:1b:2a:61:10:6a:67:7d:ea:7f:5a:
7e:a9:f2:ea:fb:ea:76:85:62:5b:68:cb:51:e4:86:92:2e:bc:
64:3c:93:29:b5:96:b3:0c:ab:b9:c3:4c:2b:9b:bb:96:b1:28:
b4:93:e1:ad:52:fa:56:82:40:4b:e8:e5:09:39:f8:58:6c:d0:
26:29:c4:27:67:58:87:2a:50:6b:b6:59:6f:31:30:b1:6a:c3:
57:8a:1e:f6:4c:d9:2b:cb:fb:2b:43:d2:1b:da:29:69:aa:71:
4e:75:39:a1:88:e6:71:de:1e:7e:c7:1e:1c:af:66:4e:a5:31:
98:5f:a3:85:dc:79:37:ae:e8:66:fe:30:f1:08:2a:bf:01:4e:
c1:4b:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:41 2026 by rpki-client