Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lUcK27-H_fmA-TQEwMN9A4twLhM.roa
File: lUcK27-H_fmA-TQEwMN9A4twLhM.roa (raw, json)
Hash identifier: qcpVRseJpc1BNOs3YpDnjWVfADxuU7jV1Iiya0OlWnM=
Subject key identifier: 95:47:0A:DB:BF:87:FD:F9:80:F9:34:04:C0:C3:7D:03:8B:70:2E:13
Certificate issuer: /CN=973d87da4102c907f75d9b8ef25795baf41dc522
Certificate serial: 01A13930F13EB0F82422EB75AA45D1E3DF6D
Authority key identifier: 97:3D:87:DA:41:02:C9:07:F7:5D:9B:8E:F2:57:95:BA:F4:1D:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lUcK27-H_fmA-TQEwMN9A4twLhM.roa
Signing time: Wed 14 Oct 2026 06:54:31 +0000
ROA not before: Wed 14 Oct 2026 06:54:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211949
IP address blocks: 178.217.234.0/24 maxlen: 24
185.229.132.0/24 maxlen: 24
2a10:b980::/29 maxlen: 48
2a13:ebc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:30:f1:3e:b0:f8:24:22:eb:75:aa:45:d1:e3:df:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973d87da4102c907f75d9b8ef25795baf41dc522
Validity
Not Before: Oct 14 06:54:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95470adbbf87fdf980f93404c0c37d038b702e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:83:38:8d:2d:f1:7c:59:f7:49:8f:7f:f8:
79:d7:06:d2:2e:9a:68:1b:70:40:bd:78:ad:e8:66:
89:17:b7:bd:d8:25:dd:e4:c7:0f:ef:8c:ae:4a:41:
6f:68:26:0c:00:3c:4c:00:d9:65:5e:80:74:ff:28:
e7:de:99:c7:67:fa:bd:ad:61:98:c5:7a:8b:a3:ae:
b9:5a:a5:9a:ea:f3:80:9a:dd:7f:ca:a7:9b:71:21:
8e:2d:3e:bc:50:aa:c0:7f:a2:a5:0c:2b:a7:fa:93:
df:99:42:bb:69:c1:1d:60:25:55:97:4e:01:8e:2f:
d3:71:35:0d:8b:d8:3d:cf:b6:9a:8d:f3:0f:ec:f4:
a6:d2:61:d6:bb:94:21:67:7a:f2:aa:47:67:61:3f:
f3:37:b9:9d:0c:69:8e:61:b6:e6:01:fd:22:c5:e1:
05:38:8b:c8:46:14:be:bc:2b:b0:95:69:06:e0:f5:
8c:26:ba:0a:8f:05:a6:de:9d:0d:c8:a8:61:0d:32:
2b:17:ef:ed:21:a6:79:bd:bf:eb:6d:05:9f:b4:ac:
ca:fb:66:ec:73:01:3c:b5:86:bd:19:7e:46:07:9a:
32:07:70:4f:b8:bc:6f:17:66:97:fd:05:1f:6d:26:
7c:37:f5:6b:58:26:9f:07:3a:44:89:fd:8b:b2:08:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:0A:DB:BF:87:FD:F9:80:F9:34:04:C0:C3:7D:03:8B:70:2E:13
X509v3 Authority Key Identifier:
keyid:97:3D:87:DA:41:02:C9:07:F7:5D:9B:8E:F2:57:95:BA:F4:1D:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lz2H2kECyQf3XZuO8leVuvQdxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lUcK27-H_fmA-TQEwMN9A4twLhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/41159e-b9b8-452c-9e17-129ca50e68a3/1/lz2H2kECyQf3XZuO8leVuvQdxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.234.0/24
185.229.132.0/24
IPv6:
2a10:b980::/29
2a13:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:48:c0:72:ce:7f:31:81:94:f9:c3:aa:80:28:98:ff:97:35:
e0:df:88:25:62:ac:45:d5:52:3e:69:e3:dc:b9:b6:cd:5a:b0:
e3:44:65:bb:fd:50:2a:e2:b7:1d:4c:31:be:35:10:ec:e3:1d:
8b:19:d3:29:d1:ae:30:eb:d2:e9:f4:d1:3d:19:d0:41:e1:62:
7b:eb:52:a8:c1:2c:5f:3d:5f:fd:8c:55:78:d9:f8:46:dc:3a:
63:9c:c1:7d:72:79:80:f8:52:3b:7f:12:32:ec:38:10:c2:2e:
bd:fa:8e:45:54:76:44:b4:28:40:b9:93:94:f6:b9:e1:f5:fb:
3a:63:76:5e:ae:d9:b2:51:96:55:40:e5:c0:ca:80:d8:d1:86:
b7:b7:6b:f5:2f:2c:26:f4:75:43:80:02:d5:6b:8f:8f:4f:6b:
62:e3:5e:cf:f2:ec:63:ed:f2:c1:9f:40:2a:80:6f:18:f5:81:
8c:13:b8:2c:d0:ad:9b:0c:fa:82:b3:e9:94:97:5b:7f:dd:f4:
f6:07:be:55:e9:01:18:31:fb:c0:7b:05:3a:4e:5b:a1:ec:07:
aa:3a:a5:04:9a:79:dd:05:e6:54:2a:3c:3a:71:22:b2:47:1a:
12:0e:14:a6:94:a4:2e:e1:ed:fd:c2:32:00:1f:73:c8:18:70:
bb:ac:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:18:20 2026 by rpki-client