Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa
File: lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa (raw, json)
Hash identifier: /bhi1YQ+1kyCWNI6BDw9fulhFATay7veDtDYDBYXC8U=
Subject key identifier: 94:09:83:D0:88:BB:6C:E2:00:FD:85:59:B7:12:77:97:0C:30:CA:A4
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019CB7DEA188345F216066C22B1F5284366A
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa
Signing time: Wed 04 Mar 2026 08:02:26 +0000
ROA not before: Wed 04 Mar 2026 08:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57465
IP address blocks: 134.90.216.0/22 maxlen: 22
134.90.220.0/22 maxlen: 22
2a03:d380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:de:a1:88:34:5f:21:60:66:c2:2b:1f:52:84:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Mar 4 08:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=940983d088bb6ce200fd8559b71277970c30caa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:23:85:e7:b1:eb:04:1a:1d:ea:f1:73:ad:
3d:ae:d4:27:f6:b8:f8:02:f6:f2:24:0d:b8:c2:1d:
b0:27:71:30:05:0f:6d:9b:c1:b1:21:fe:da:fd:50:
97:ff:87:ae:fd:dd:7d:a2:fc:f9:b1:e2:80:c5:b8:
1c:43:e6:67:99:64:29:b5:d4:80:25:db:83:1e:1f:
95:19:bd:bc:4f:18:8a:3a:63:a8:38:81:3f:b5:15:
95:87:64:74:65:f1:e6:6a:1c:cf:38:2a:99:f5:13:
62:d7:b2:5f:d0:db:1b:a1:3c:7a:4a:ae:93:01:0f:
d8:fb:af:7b:32:ee:7e:93:d8:25:29:3f:20:d4:b1:
00:da:4e:f1:84:93:0b:61:c8:ff:68:59:80:16:df:
c5:40:01:99:22:5b:c0:f3:c1:42:4b:75:3d:f4:22:
f4:54:e6:14:cd:49:f5:05:be:1a:2c:19:25:e1:32:
a2:04:41:1c:62:a1:86:80:d0:18:1c:c9:b5:37:14:
76:38:56:a3:31:d4:4f:87:67:ba:47:be:e4:72:9b:
2c:8e:fa:5c:bd:db:17:ba:4a:10:d9:cd:51:20:36:
5c:49:65:55:29:a9:81:84:d0:dc:87:70:c2:fa:0c:
49:96:e6:9a:e3:18:e9:ae:79:63:72:e4:e0:cb:1f:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:09:83:D0:88:BB:6C:E2:00:FD:85:59:B7:12:77:97:0C:30:CA:A4
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/lAmD0Ii7bOIA_YVZtxJ3lwwwyqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.90.216.0/21
IPv6:
2a03:d380::/32
Signature Algorithm: sha256WithRSAEncryption
67:18:a4:73:64:aa:c0:c8:4d:98:7e:01:92:da:22:9a:3e:99:
9e:9e:86:b2:5e:b1:72:76:83:07:60:3f:60:f2:37:7f:8e:ae:
0f:76:53:24:a8:79:72:7e:9f:3a:ae:a4:01:eb:ca:b6:ff:dc:
90:05:3c:0c:d1:9d:ea:4b:6f:87:33:dd:45:4b:60:6e:69:52:
67:8d:97:d4:b2:11:41:da:37:a9:6d:31:f8:48:6b:14:85:51:
76:a3:4e:11:99:e3:44:30:fe:6e:ed:17:38:c6:b9:b7:4d:d4:
6b:db:a7:bf:2f:98:b7:cb:cc:be:b1:06:12:db:19:08:6b:20:
52:cf:97:eb:1f:95:69:2a:00:b2:4f:c7:6b:ff:1d:9f:29:0c:
44:d8:f2:73:ec:e9:13:f2:ac:be:39:94:2f:ca:1f:36:ce:15:
52:73:bd:16:32:6a:e3:2f:16:80:ab:82:66:da:4e:0b:46:2d:
39:2c:40:38:a8:ab:6b:56:b4:f1:dd:64:d5:4e:99:40:1c:08:
47:ce:08:c4:1c:b6:06:51:33:c1:50:d4:10:9d:b4:2d:11:58:
59:57:12:f6:0c:ce:76:86:39:34:76:82:3d:83:3e:07:69:2e:
1b:15:c2:8d:fb:ff:b2:fc:4a:2b:49:51:fb:d5:77:db:97:ef:
f5:ee:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:32:32 2026 by rpki-client