Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lvZvUzweJf8AUjXxnvd2HyKjEzo.roa
File: lvZvUzweJf8AUjXxnvd2HyKjEzo.roa (raw, json)
Hash identifier: c2Zy1dJGoQ+E0tdLSNAq4vHVtcLhDN/i0EnYt4zkwyo=
Subject key identifier: 96:F6:6F:53:3C:1E:25:FF:00:52:35:F1:9E:F7:76:1F:22:A3:13:3A
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A12E9761F96D2BF1BA8D696B89E8C2BADF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lvZvUzweJf8AUjXxnvd2HyKjEzo.roa
Signing time: Mon 12 Oct 2026 05:30:35 +0000
ROA not before: Mon 12 Oct 2026 05:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34837
IP address blocks: 94.184.0.0/16 maxlen: 24
193.104.212.0/24 maxlen: 24
194.225.0.0/16 maxlen: 24
194.225.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:97:61:f9:6d:2b:f1:ba:8d:69:6b:89:e8:c2:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 12 05:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96f66f533c1e25ff005235f19ef7761f22a3133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:1d:36:98:ba:90:11:a6:56:86:2f:15:8f:
7f:3f:99:9f:30:b1:a0:65:14:41:a8:d5:a3:d5:58:
f1:f0:7b:01:80:91:16:bf:14:69:3a:a6:20:ea:14:
62:0e:42:92:32:4f:d1:67:f5:f0:73:b3:5b:c9:76:
c7:7a:cd:f0:69:f6:f6:9d:fb:b9:69:6a:76:84:9d:
b0:53:32:e9:72:b0:77:42:a8:64:72:b8:69:7a:80:
9e:80:1b:83:5e:ca:6b:cc:a0:4c:9d:33:88:f2:cf:
01:a2:a3:c2:1a:cd:35:19:26:85:ca:e5:ac:ad:80:
88:a2:83:d0:50:37:9a:55:43:90:55:19:e6:0e:e1:
35:7e:ba:dc:80:52:ba:ab:00:a2:66:0f:d1:3a:7b:
0a:8b:e0:ec:fb:2f:a2:35:d8:ea:ef:c8:69:3a:c1:
0b:11:fa:87:3c:7a:15:97:73:a6:bf:58:80:46:f3:
58:a8:56:a9:31:cf:ba:5c:5c:34:cd:4b:e8:8a:ff:
67:83:5f:b3:7f:c7:f3:7b:08:dd:ec:c9:7c:4e:fc:
93:c8:55:14:91:5a:75:1e:aa:f3:fc:f2:79:90:b9:
9d:01:bd:4c:96:29:89:e2:e3:fb:b0:ed:0e:31:0d:
97:20:af:b6:c5:27:9b:32:80:20:94:c3:ed:e5:a9:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:6F:53:3C:1E:25:FF:00:52:35:F1:9E:F7:76:1F:22:A3:13:3A
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lvZvUzweJf8AUjXxnvd2HyKjEzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
193.104.212.0/24
194.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:da:96:04:f4:67:15:ba:99:d1:5d:a6:a9:7b:9d:47:22:6c:
3d:7d:e1:a1:50:06:2a:18:82:f7:05:a1:72:cc:97:fd:59:e6:
71:ed:5c:f2:a9:66:01:49:c7:3d:9d:a9:ab:11:7a:c5:d7:5a:
a9:3b:14:66:a1:5a:81:be:43:b6:3c:ed:06:35:e7:00:28:38:
e4:93:03:9d:a0:c1:a5:76:37:ba:2c:d2:2a:82:9d:9c:c4:dd:
84:fa:50:99:6c:af:bb:5c:46:9b:e9:d1:50:da:77:3b:d9:91:
e2:74:25:91:57:66:27:e4:7e:f6:39:0f:79:ab:b8:bc:f3:ef:
ae:92:6e:60:9a:f9:f8:aa:61:3e:61:88:a8:21:e7:3b:82:55:
c0:81:55:da:a8:93:44:e3:97:19:fa:4b:b2:af:be:7b:b3:84:
9f:9c:b1:94:1a:79:8b:02:73:b6:ec:a5:64:b2:08:94:e3:b8:
b7:51:c6:02:14:bf:81:21:aa:46:6b:1d:1b:5c:a0:29:3b:26:
a5:ed:91:4f:99:f0:3a:7f:c0:f9:80:82:63:1b:25:5f:18:56:
25:53:de:b0:2e:d9:7d:eb:77:99:bf:22:52:77:25:6d:2f:ef:
cf:ed:de:44:4b:48:ed:3a:41:a4:e1:81:fb:c1:72:f1:95:1f:
c8:7e:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:48 2026 by rpki-client