Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ql_Q_OFEpB_LnsIKMXtbQ7r8CfI.roa
File: Ql_Q_OFEpB_LnsIKMXtbQ7r8CfI.roa (raw, json)
Hash identifier: NgzSjfCnG/okERNQ2bIUz3Gsu6poIhEuJdJdIksYyGY=
Subject key identifier: 42:5F:D0:FC:E1:44:A4:1F:CB:9E:C2:0A:31:7B:5B:43:BA:FC:09:F2
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01A15D77EF52411B7238802DFA574BCAC887
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ql_Q_OFEpB_LnsIKMXtbQ7r8CfI.roa
Signing time: Wed 21 Oct 2026 07:58:23 +0000
ROA not before: Wed 21 Oct 2026 07:58:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.249.184.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
195.95.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:77:ef:52:41:1b:72:38:80:2d:fa:57:4b:ca:c8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Oct 21 07:58:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425fd0fce144a41fcb9ec20a317b5b43bafc09f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:f4:86:ec:29:c6:a9:9f:64:85:aa:b1:a9:
94:85:c1:ef:72:02:8e:56:d4:50:76:1e:60:29:6a:
ba:4a:3c:ce:c5:a2:6e:75:2c:92:c1:e9:17:e8:9c:
09:99:4e:4a:15:a1:e4:4d:46:2a:f8:19:81:77:9e:
df:9c:6d:8f:53:a1:9f:14:74:c4:3e:e5:5f:a9:1e:
27:40:2f:fd:b5:be:8f:45:b4:97:82:f0:9c:08:42:
fe:12:35:9e:13:64:f1:ba:60:8c:70:41:99:51:5d:
b9:81:3e:2c:dc:b3:3f:4b:83:ea:8b:91:3f:2f:12:
14:5f:02:e3:55:a9:62:e7:13:a8:9e:97:0d:ad:a8:
ba:1e:3c:1d:9c:a9:26:e0:dc:bf:2c:12:bb:f3:f3:
07:ec:72:33:34:bd:0c:06:05:d5:9f:af:05:13:11:
16:36:9d:3b:d2:cf:f3:59:e4:38:0f:f3:45:91:6c:
4d:79:60:0c:22:67:9d:9c:62:a1:72:d3:d1:fd:60:
3f:64:e0:da:64:2c:0b:25:97:a4:da:a4:dc:6a:29:
aa:6c:d6:65:46:ba:d4:8c:c3:48:51:2f:17:3a:08:
e1:33:c1:d9:d5:9f:a8:3b:7e:b4:fc:ab:37:a8:c1:
5b:a7:e8:e7:24:48:34:6c:8b:29:2c:d4:9e:ca:21:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:D0:FC:E1:44:A4:1F:CB:9E:C2:0A:31:7B:5B:43:BA:FC:09:F2
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ql_Q_OFEpB_LnsIKMXtbQ7r8CfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.184.0/22
185.145.52.0/24
195.95.204.0/24
Signature Algorithm: sha256WithRSAEncryption
18:da:96:fb:30:8c:ce:a5:8f:70:fd:ad:17:b4:81:d7:8b:1d:
28:1b:1a:d0:5c:42:c8:4a:dd:ec:5e:a2:2b:fc:79:4e:6d:40:
ec:00:fb:8b:0f:9f:1a:cc:0f:5a:5e:d3:04:99:8a:ce:7c:bf:
c6:21:3b:f4:d6:61:58:f3:74:fc:c1:42:07:68:0a:ad:90:bb:
3e:5f:5b:20:79:92:76:4b:ab:ce:d7:c4:f0:13:96:48:a9:3c:
60:f8:8d:48:11:cf:96:4a:45:c8:6b:d1:e5:0d:cd:8c:b7:11:
02:83:8b:b5:d2:4d:bf:fd:50:bd:ad:c8:dc:78:f6:59:62:26:
00:de:d0:53:14:f4:76:f0:99:9f:2a:61:c9:e2:b4:70:b3:28:
cf:32:d6:22:f8:66:35:49:bc:4c:58:0a:08:e2:bd:83:78:22:
a8:50:69:e0:c2:c8:af:7c:1e:b2:71:0e:c8:da:c6:de:8e:13:
3a:88:11:2a:95:1a:27:0c:22:57:3b:11:35:ad:77:cc:5d:6d:
f1:75:33:4a:2d:24:0b:f8:26:fd:b7:c8:5e:7c:8a:df:51:32:
6a:5c:22:67:ea:f4:07:9c:5a:9a:50:83:7b:54:27:e4:3e:61:
87:38:38:93:3b:f8:26:0e:fd:fd:22:9d:cb:56:6f:19:ec:e4:
db:c4:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:45 2026 by rpki-client