Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lLg9uhFLvwX-TZ1lP5U8AuVpRdU.roa
File: lLg9uhFLvwX-TZ1lP5U8AuVpRdU.roa (raw, json)
Hash identifier: wtfQN0HLBS2wll9XuGkM9TIQzuZqWOMet+moFUJksOQ=
Subject key identifier: 94:B8:3D:BA:11:4B:BF:05:FE:4D:9D:65:3F:95:3C:02:E5:69:45:D5
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01A01DFF32641BD8635AFC37A5709D6DFB94
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lLg9uhFLvwX-TZ1lP5U8AuVpRdU.roa
Signing time: Thu 20 Aug 2026 07:07:38 +0000
ROA not before: Thu 20 Aug 2026 07:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 89.190.151.0/24 maxlen: 24
91.132.14.0/24 maxlen: 24
139.28.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:ff:32:64:1b:d8:63:5a:fc:37:a5:70:9d:6d:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Aug 20 07:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b83dba114bbf05fe4d9d653f953c02e56945d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:b4:2b:af:0b:e3:2d:b0:47:38:dd:cc:c6:
be:cf:d1:22:25:f6:80:47:8c:8f:59:fe:6a:15:bf:
5e:0b:ee:cd:0a:e6:c1:83:f2:de:9a:7d:96:fd:3b:
cd:5d:6d:b2:dc:62:35:0f:5c:df:81:c9:6d:36:97:
ce:80:ab:7b:2d:0b:33:28:c3:da:93:dc:05:69:7c:
2f:7a:a5:b8:b1:a2:65:1a:11:a7:09:cd:c5:a7:97:
d2:31:16:c7:4e:6a:ec:b3:08:13:b9:ed:1a:ed:b4:
0e:32:e5:6c:3b:d7:3a:6c:f2:57:42:d3:62:26:8d:
da:83:e5:7c:fa:d0:d4:b2:8c:66:97:4a:37:ec:21:
18:28:54:72:6e:be:9c:e8:35:19:96:54:38:14:70:
05:1c:05:b4:42:77:47:a3:0e:04:db:01:5e:e7:f0:
0b:3a:10:8c:ca:4c:a8:73:86:6e:55:66:f3:97:8b:
e1:88:9c:cb:79:df:9f:cc:c0:67:ee:8e:7e:38:e8:
70:24:19:c9:80:60:9d:95:c9:36:6c:03:48:58:83:
fa:42:bb:41:6e:dd:2c:90:3f:60:7a:1a:b4:9d:a3:
5c:af:54:b6:39:4e:16:5e:b7:11:4f:b9:b0:3c:46:
80:3e:be:54:8a:8d:88:12:ec:c3:b1:a7:e0:1a:29:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:3D:BA:11:4B:BF:05:FE:4D:9D:65:3F:95:3C:02:E5:69:45:D5
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lLg9uhFLvwX-TZ1lP5U8AuVpRdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.151.0/24
91.132.14.0/24
139.28.172.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2d:ff:cf:f9:ab:45:df:da:59:b3:37:d1:1f:c1:31:4c:3f:
9b:27:29:75:1d:3b:76:b2:14:6e:37:8d:9b:35:eb:72:34:7f:
cd:cc:dd:b6:ea:49:60:ea:f7:47:19:5b:ae:4a:18:54:a2:1b:
fc:97:e4:8b:34:6d:d8:08:01:6e:27:c7:96:fc:63:2c:fd:19:
ce:1a:1c:ae:a8:95:1e:7a:fa:47:56:65:60:03:ee:2f:8a:07:
ad:8d:e5:d6:4f:a9:f9:9c:84:52:3e:98:9d:e9:52:04:52:8b:
bf:99:07:76:dd:ff:7c:89:78:aa:09:74:29:d3:f9:32:3c:5f:
87:29:89:bb:8a:ea:bf:89:54:41:57:e5:d2:ef:5e:80:af:d0:
dc:09:fa:0b:16:91:4c:68:ca:56:61:84:8a:d0:f8:3b:35:f0:
92:06:e4:3a:0f:0f:e0:c3:7d:62:2d:b9:8e:d9:07:35:c4:34:
bd:37:fb:14:a9:ee:33:f9:19:16:2d:2c:7c:6b:53:8b:f6:57:
71:10:f7:6c:c9:0f:17:e3:08:71:44:3d:7d:9e:e9:10:22:2f:
c2:82:5e:7d:b8:6a:f0:68:2e:36:c0:41:3d:fa:1a:88:d7:4a:
aa:0b:b3:e4:f1:ed:08:0a:48:29:72:69:77:e0:e8:24:66:49:
97:40:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:21 2026 by rpki-client