Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCHdMM9MIXCOlhXaCkWMtFAgYwk.roa
File: lCHdMM9MIXCOlhXaCkWMtFAgYwk.roa (raw, json)
Hash identifier: MU6+MjUcshPC//cs+ASlsXoMSLA2clMBWeUCrWLJ3QU=
Subject key identifier: 94:21:DD:30:CF:4C:21:70:8E:96:15:DA:0A:45:8C:B4:50:20:63:09
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD1B2B178B3590CF4DC1E7A2660BA929A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCHdMM9MIXCOlhXaCkWMtFAgYwk.roa
Signing time: Wed 05 Aug 2026 11:32:56 +0000
ROA not before: Wed 05 Aug 2026 11:32:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 80.240.90.0/24 maxlen: 24
217.145.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:b2:b1:78:b3:59:0c:f4:dc:1e:7a:26:60:ba:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 5 11:32:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9421dd30cf4c21708e9615da0a458cb450206309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:af:a0:6c:84:39:94:12:77:8b:39:ad:30:
48:b9:1c:aa:e9:63:5a:06:81:59:89:27:22:b7:6d:
7d:01:fd:07:0f:c6:db:1a:c9:13:4c:7f:88:5e:14:
b2:20:61:10:0e:b9:dd:6c:b1:c4:ed:0a:d4:3b:4a:
45:67:03:0f:b4:54:82:b9:36:b2:09:33:9a:b7:8a:
4e:42:a9:fc:29:3b:98:f0:b8:de:e2:d4:1a:9c:9d:
92:67:8c:c5:02:09:ae:53:ca:ab:c7:58:e1:00:28:
19:b8:f5:4c:50:9b:00:1d:07:b6:28:04:0e:11:2f:
9e:0a:82:b6:09:89:07:ec:ec:dd:1c:65:42:16:1a:
1e:52:90:d1:9b:ad:69:0f:9e:fe:3a:93:5c:90:d0:
09:b7:49:76:45:96:ec:a3:d8:65:56:d5:1f:9c:61:
fc:42:f7:fd:f7:05:cb:65:83:7d:e3:34:58:ff:6b:
a4:9a:8c:e3:b5:d9:bf:bc:2d:12:c2:25:da:3b:6b:
07:0d:17:84:bf:e3:e6:91:e9:e8:20:b6:8a:e3:a9:
51:bf:45:ed:ef:aa:a6:01:86:5a:a4:9e:b7:1d:24:
b6:0e:ca:ed:6e:98:43:d8:11:6f:6a:f4:a5:db:ac:
38:53:a0:b0:98:2b:50:ff:7b:4d:46:0b:44:d0:85:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:DD:30:CF:4C:21:70:8E:96:15:DA:0A:45:8C:B4:50:20:63:09
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lCHdMM9MIXCOlhXaCkWMtFAgYwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.90.0/24
217.145.76.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:b1:c4:66:18:35:cb:85:24:8f:7c:9f:dd:bc:ac:4d:2a:
fe:b6:5e:ba:09:9c:5f:f5:32:c3:39:2a:7a:f0:fa:95:cd:29:
83:64:f3:7e:1c:a5:ee:28:26:96:e9:64:76:63:e3:c4:b0:91:
97:98:99:22:5b:b2:fd:eb:7f:e9:fe:05:75:98:35:03:de:43:
85:3a:a8:80:00:de:52:25:4b:5d:9c:fe:5a:2f:3b:7a:42:b9:
8e:e8:79:2d:3f:a7:00:93:fb:0e:5a:3b:8e:c6:c4:53:3b:a6:
33:cf:d1:53:38:a7:5c:7c:a6:9f:1b:07:5b:c4:9d:8d:ed:3d:
25:99:cf:91:0a:14:56:1f:77:db:cb:f6:41:9c:48:03:98:f1:
68:8e:f5:ac:93:8a:0c:9f:ad:49:09:8c:e6:d7:79:15:b3:7e:
35:84:a5:b5:12:14:99:c4:76:c0:36:40:61:ac:38:30:11:b2:
78:25:fe:22:ab:4a:03:ff:04:65:b2:89:3b:82:8e:a4:b5:19:
6b:cf:95:3b:79:26:6c:c4:25:df:49:e1:d2:00:3d:59:38:1e:
f1:76:95:d7:92:ab:ec:cc:b5:9a:6a:6f:fc:d8:99:f7:a6:c8:
61:9f:72:53:0a:df:26:48:e2:79:46:c8:f5:c7:bc:ac:ba:81:
85:c7:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client