Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/LAJ7ntYgqilAuZgahQ26jnC_Ews.roa
File: LAJ7ntYgqilAuZgahQ26jnC_Ews.roa (raw, json)
Hash identifier: haoKXGElWz8hllV96ZtcF0mcECurK1B+A6m77x3kGLM=
Subject key identifier: 2C:02:7B:9E:D6:20:AA:29:40:B9:98:1A:85:0D:BA:8E:70:BF:13:0B
Certificate issuer: /CN=ced7e244bd1e890c6272a85cb80fdfd6cd6e4515
Certificate serial: 01A0F6DC1A3DE92DAEAC6793BC642C10C34F
Authority key identifier: CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/LAJ7ntYgqilAuZgahQ26jnC_Ews.roa
Signing time: Thu 01 Oct 2026 09:46:54 +0000
ROA not before: Thu 01 Oct 2026 09:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 89.37.84.0/22 maxlen: 24
89.41.44.0/22 maxlen: 24
89.41.52.0/22 maxlen: 24
185.65.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:dc:1a:3d:e9:2d:ae:ac:67:93:bc:64:2c:10:c3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced7e244bd1e890c6272a85cb80fdfd6cd6e4515
Validity
Not Before: Oct 1 09:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c027b9ed620aa2940b9981a850dba8e70bf130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:eb:31:d8:e4:c9:5b:23:f6:b7:7e:74:e4:
79:1b:53:ef:f4:e1:65:3c:10:b4:25:09:69:00:7e:
23:ab:53:9e:d6:91:74:a9:83:be:8d:e9:89:05:70:
b5:69:42:14:e9:58:c7:f2:3c:05:4c:1c:50:96:43:
ab:d2:c1:d2:f5:58:69:7d:fb:ef:38:9b:15:fe:ac:
f0:cc:86:4e:3b:8e:37:22:5b:79:d8:27:a5:8f:71:
e2:59:d4:18:55:7d:36:fc:27:76:69:a4:39:6a:74:
93:83:e3:1a:40:5a:41:bc:38:67:3b:a0:b1:79:91:
9b:73:f1:5a:68:55:71:b2:8a:fe:69:dc:1d:6d:03:
3e:9f:fa:a4:47:f0:14:4b:c9:0d:09:e3:ad:30:a4:
7c:13:bc:28:66:b0:ab:93:25:1b:4a:fd:5f:1a:45:
8a:d7:14:c4:aa:d2:0d:59:76:f3:4f:9b:08:9a:f6:
33:15:07:a1:93:40:8c:92:0c:54:ad:b4:10:6e:c3:
1b:9d:1c:e9:8e:cd:88:63:2b:5e:37:ae:b9:02:69:
7c:26:b3:a1:41:df:84:58:0b:b7:f6:4c:06:3f:51:
f2:7f:64:9f:44:92:05:ef:8d:d4:4f:4e:77:fd:2d:
0d:1a:8f:c3:4f:d6:bf:de:1b:eb:1f:be:6f:2d:ab:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:7B:9E:D6:20:AA:29:40:B9:98:1A:85:0D:BA:8E:70:BF:13:0B
X509v3 Authority Key Identifier:
keyid:CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/LAJ7ntYgqilAuZgahQ26jnC_Ews.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.84.0/22
89.41.44.0/22
89.41.52.0/22
185.65.180.0/22
Signature Algorithm: sha256WithRSAEncryption
37:11:e8:7c:7e:aa:e0:c8:c3:38:44:9a:df:1c:88:10:ba:95:
60:51:8a:0e:5d:9d:f5:e7:05:f7:8e:e1:17:5f:a6:05:0e:a3:
a1:45:09:c2:50:c3:ef:df:4e:89:a3:d9:8a:f8:fc:7c:77:d5:
a6:54:a1:41:e2:65:00:3e:88:17:80:fc:8e:2c:d3:90:59:cc:
7c:fc:13:f0:34:47:7a:68:96:4c:23:09:8f:9e:1d:c3:08:bf:
c1:da:4d:b4:30:0b:2f:23:89:65:1a:ae:72:e0:31:7c:f6:8f:
16:fd:d1:40:62:e8:40:72:44:dc:f6:d2:6c:fa:74:40:7f:3a:
84:16:d5:c7:8c:06:11:16:bc:7d:59:68:99:07:5e:36:61:69:
b0:cc:30:a2:16:c6:97:fd:50:51:78:0a:d8:5f:f1:7e:3e:2c:
cf:c9:1f:bf:7f:93:cd:16:89:b0:f0:07:4f:ee:ea:a0:61:aa:
08:b7:37:d1:15:cc:50:fa:76:01:8f:7f:83:58:8d:96:1a:fe:
f4:5f:b9:83:12:9f:f9:e3:f1:4f:08:5a:62:fd:92:26:9b:5d:
46:c0:70:58:84:be:68:ee:e2:f4:61:e6:c2:2d:57:04:5e:c8:
c3:8c:06:84:4c:9e:b9:37:51:bd:9b:e9:02:5d:e7:62:dd:16:
4d:f4:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:30 2026 by rpki-client