Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa
File: lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa (raw, json)
Hash identifier: WtwzQti38pa09U4PS1k9X/tQpZJ23T8DdI17kBh4BC8=
Subject key identifier: 94:EA:8E:8E:31:1A:C7:35:9E:6F:9A:47:53:1E:A2:5F:E7:98:99:7F
Certificate issuer: /CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Certificate serial: 019F2368CF6D9CBFDF6092FA2F488EA3BB76
Authority key identifier: 86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198330
IP address blocks: 91.223.240.0/24 maxlen: 24
185.74.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:6d:9c:bf:df:60:92:fa:2f:48:8e:a3:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94ea8e8e311ac7359e6f9a47531ea25fe798997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:7e:c7:e1:4f:fa:69:b0:1e:89:93:e6:82:
ab:17:40:47:90:45:7b:60:d6:c3:97:59:09:3f:39:
10:28:4f:ab:53:29:4d:e2:89:8a:84:0a:d0:3a:e7:
3a:28:23:92:04:a0:a1:e1:0e:cb:16:a6:de:5c:29:
eb:07:5b:6c:96:ed:4b:a6:37:f9:4e:99:2d:fa:bc:
02:75:19:3f:1f:eb:d1:69:f3:75:3f:8f:06:1a:27:
41:f9:a7:47:62:80:a4:cc:c3:8d:74:ce:28:04:74:
ba:1a:80:e7:b9:1a:f1:70:c7:18:1d:79:98:1f:a3:
a0:df:c3:ae:b0:c8:7b:c7:91:35:ce:70:26:7a:a8:
35:ee:18:1f:80:09:4e:72:bf:15:98:93:3c:c2:0e:
19:7e:5b:73:be:97:3a:66:f2:37:7b:b7:95:38:77:
38:e1:f8:08:b2:dc:47:c0:17:11:d9:af:77:22:f9:
1c:35:8e:57:18:ad:29:d5:76:85:50:61:36:d7:06:
d0:6e:9e:ae:9e:a6:6e:31:96:1f:2d:a2:f2:9a:cc:
fe:b5:e5:5b:46:ba:e6:88:37:14:71:dc:e1:1d:f1:
f8:8b:eb:11:06:81:0e:e8:86:0e:e0:60:e6:b8:e3:
48:d2:ff:c4:0f:d1:de:b7:5a:66:f0:a1:a6:8f:84:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:8E:8E:31:1A:C7:35:9E:6F:9A:47:53:1E:A2:5F:E7:98:99:7F
X509v3 Authority Key Identifier:
keyid:86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.240.0/24
185.74.200.0/22
Signature Algorithm: sha256WithRSAEncryption
29:25:aa:c2:cc:a2:21:6a:ea:da:9b:20:73:ad:4d:0c:de:9c:
23:63:f9:f6:78:05:81:f2:56:c1:f5:6a:50:58:c2:1e:41:70:
40:41:0e:76:1b:4a:60:f4:62:a5:3e:0b:36:06:68:6c:37:3e:
57:91:5f:8c:4e:35:f0:80:0d:6e:07:e2:49:9f:e8:5b:e5:64:
cb:1d:8e:82:38:83:3e:eb:01:f5:cd:e7:0d:6d:2d:3e:89:8d:
72:44:b6:e8:0e:e6:c3:da:5b:51:49:d2:df:e4:fc:97:4e:6e:
cc:d6:c3:dc:83:2e:ab:22:cd:b4:7f:5a:16:61:79:8c:84:88:
ba:22:93:f1:ac:7c:bc:d3:cc:4e:8a:03:1b:53:73:84:5a:59:
c5:1f:fe:f6:bf:e7:aa:d3:c7:c4:57:0c:c8:54:d0:3a:03:ed:
5a:66:56:f5:2e:f6:f9:bc:33:9e:98:c1:aa:c5:f2:63:80:0d:
17:8b:eb:22:e5:58:2f:17:7f:7e:3a:1a:70:c7:e2:b7:b4:fe:
04:92:f1:65:8e:7a:21:f6:39:9f:f1:fd:44:b4:47:4c:73:c4:
a4:d8:fa:08:ac:59:dd:00:0e:ed:d4:ba:e8:a8:c6:4b:d2:00:
df:2f:b4:bc:b2:b8:32:2f:0a:0c:70:d4:f4:32:c9:68:c9:3c:
8a:4e:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:39 2026 by rpki-client