Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lJRUgpxXQ_NVtkegGIdyQoHRzUo.roa
File: lJRUgpxXQ_NVtkegGIdyQoHRzUo.roa (raw, json)
Hash identifier: +zSGs229q1GH02K4Eg6X90qopUwR1DI2V7fboZXwzQA=
Subject key identifier: 94:94:54:82:9C:57:43:F3:55:B6:47:A0:18:87:72:42:81:D1:CD:4A
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A14F9C9A179AB79A27DEB7753837C625AA
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lJRUgpxXQ_NVtkegGIdyQoHRzUo.roa
Signing time: Sun 18 Oct 2026 15:23:45 +0000
ROA not before: Sun 18 Oct 2026 15:23:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 94.184.9.0/24 maxlen: 24
94.184.16.0/24 maxlen: 24
94.184.26.0/24 maxlen: 24
94.184.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:9c:9a:17:9a:b7:9a:27:de:b7:75:38:37:c6:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 18 15:23:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949454829c5743f355b647a01887724281d1cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:0d:a4:3c:73:36:b9:e2:d2:dc:a6:1e:c2:
3d:51:92:11:7d:ef:77:33:74:ef:fa:1c:f9:cf:2b:
58:05:0c:3e:e0:c0:8a:2c:7c:38:1e:c5:39:e9:2f:
96:65:f2:e6:0b:5a:41:5e:cf:60:41:97:98:ef:69:
23:3a:02:98:31:34:44:cf:81:86:52:aa:fc:12:7f:
8f:fa:0b:04:63:2d:b5:55:33:90:c6:37:06:3e:50:
18:52:ac:86:1c:2a:d4:3d:d5:dd:58:f0:76:9a:b1:
d4:b1:54:c0:92:98:00:ee:ed:f2:8d:28:23:56:4d:
51:34:f0:0f:11:27:b9:42:b0:a8:a1:9c:cb:17:0e:
f7:59:0f:d0:ef:29:74:9e:ab:52:39:14:45:b8:e3:
b3:c3:17:aa:87:11:6e:d9:c3:a3:cc:de:3c:d2:ef:
17:ec:7f:7d:8a:16:80:d6:1e:69:5c:e9:a1:89:45:
9f:81:a3:66:ed:58:d4:e8:a7:54:f0:35:70:aa:d5:
a6:2f:1e:00:cc:93:85:7d:13:3b:47:dc:a1:be:e4:
96:90:05:f1:81:56:a6:a4:a4:c0:59:56:f5:ab:fa:
c3:b5:4b:b9:f8:d4:e5:cb:fe:12:90:46:c2:6e:b8:
8a:b6:19:b7:dd:93:ed:c2:63:46:df:5c:a4:dc:78:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:54:82:9C:57:43:F3:55:B6:47:A0:18:87:72:42:81:D1:CD:4A
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lJRUgpxXQ_NVtkegGIdyQoHRzUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.9.0/24
94.184.16.0/24
94.184.26.0/24
94.184.37.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e0:a2:c6:2e:b9:38:c0:b5:b2:32:66:ab:03:59:56:bd:ee:
2f:03:5b:d0:72:e4:b0:5b:42:7f:5f:f3:37:80:3a:3a:ce:42:
ff:b3:aa:7a:d6:ff:19:85:d5:49:ca:6b:95:1f:18:ce:01:23:
17:ae:a7:c5:02:b8:e1:8f:73:8a:a1:bf:c1:4a:90:9c:c3:05:
0e:8f:fd:b4:d9:18:62:8a:10:d7:a5:c8:f3:f3:e8:bd:05:65:
7d:52:3c:36:23:07:e4:49:e0:9c:e2:28:04:05:96:59:8b:4e:
90:af:e2:f6:6b:17:0c:74:18:f8:46:df:6a:9f:2e:e4:ec:e3:
60:1a:c7:c9:46:14:36:85:1a:a0:79:6f:58:32:3d:d8:d5:ca:
52:3e:53:aa:cf:63:f3:39:aa:27:9a:60:fa:83:cd:2e:a8:7a:
53:73:5c:03:46:45:1a:29:46:f5:02:70:53:87:ff:42:95:e2:
60:3b:07:33:62:7b:e1:2d:94:45:7e:47:de:1b:1c:50:db:fa:
d3:53:27:ea:de:ed:9c:5d:75:55:56:23:f3:6d:25:e1:f2:9b:
df:61:d2:e1:c4:92:96:24:57:36:02:5e:46:87:d8:ff:6a:89:
d9:6a:53:71:a2:76:80:e2:18:e4:7a:21:6a:71:23:a1:6d:36:
ae:cf:5d:5a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFPnJoXmreaJ963dTg3xiWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYxMDE4MTUyMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk0NTQ4MjljNTc0M2YzNTViNjQ3YTAxODg3NzI0MjgxZDFjZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmsNpDxzNrni0tymHsI9UZIRfe93
M3Tv+hz5zytYBQw+4MCKLHw4HsU56S+WZfLmC1pBXs9gQZeY72kjOgKYMTREz4GG
Uqr8En+P+gsEYy21VTOQxjcGPlAYUqyGHCrUPdXdWPB2mrHUsVTAkpgA7u3yjSgj
Vk1RNPAPESe5QrCooZzLFw73WQ/Q7yl0nqtSORRFuOOzwxeqhxFu2cOjzN480u8X
7H99ihaA1h5pXOmhiUWfgaNm7VjU6KdU8DVwqtWmLx4AzJOFfRM7R9yhvuSWkAXx
gVampKTAWVb1q/rDtUu5+NTly/4SkEbCbriKthm33ZPtwmNG31yk3HiQCQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJSUVIKcV0PzVbZHoBiHckKB0c1KMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvbEpSVWdweFhRX05WdGtlZ0dJZHlRb0hSelVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXrgJAwQA
XrgQAwQAXrgaAwQAXrglMA0GCSqGSIb3DQEBCwUAA4IBAQCX4KLGLrk4wLWyMmar
A1lWve4vA1vQcuSwW0J/X/M3gDo6zkL/s6p61v8ZhdVJymuVHxjOASMXrqfFArjh
j3OKob/BSpCcwwUOj/202RhiihDXpcjz8+i9BWV9Ujw2IwfkSeCc4igEBZZZi06Q
r+L2axcMdBj4Rt9qny7k7ONgGsfJRhQ2hRqgeW9YMj3Y1cpSPlOqz2PzOaonmmD6
g80uqHpTc1wDRkUaKUb1AnBTh/9CleJgOwczYnvhLZRFfkfeGxxQ2/rTUyfq3u2c
XXVVViPzbSXh8pvfYdLhxJKWJFc2Al5Gh9j/aonZalNxonaA4hjkeiFqcSOhbTau
z11a
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:55:09 2026 by rpki-client