Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa
File: LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa (raw, json)
Hash identifier: aGdXmYk3UJO5PBiGQxDG95DNI1OlCf0Xm3vAt2dRzTk=
Subject key identifier: 2E:E5:3C:80:9F:9F:8C:F4:94:77:2F:45:BD:7D:02:19:C6:E1:8E:F6
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A10AFD051EF45CBE74A281BC3D6BDB0350
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa
Signing time: Mon 05 Oct 2026 07:35:16 +0000
ROA not before: Mon 05 Oct 2026 07:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.235.128.0/17 maxlen: 32
93.186.96.0/20 maxlen: 32
185.140.160.0/22 maxlen: 32
193.203.60.0/22 maxlen: 32
2a03:2c00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:fd:05:1e:f4:5c:be:74:a2:81:bc:3d:6b:db:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 5 07:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee53c809f9f8cf494772f45bd7d0219c6e18ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:6a:f9:56:de:e7:ef:46:d1:1c:42:aa:74:
d4:cf:1d:fd:3b:04:d2:29:2d:03:37:49:d6:6a:88:
39:3b:ba:46:af:05:a0:c1:bc:90:7c:e8:94:a8:6a:
c1:4f:5a:17:54:bd:8d:e7:74:5c:e3:01:cd:d7:1c:
29:18:c8:38:00:89:05:3f:c7:91:fb:aa:9a:08:ee:
0d:07:30:f0:b2:df:6f:c7:9c:27:c7:86:ff:cc:fe:
79:75:29:28:7a:f8:24:b5:a7:fd:45:b4:c2:cf:a6:
67:f2:ce:20:28:f0:dc:46:ea:06:64:15:24:e6:b0:
15:e9:a8:f1:20:6c:0e:00:53:53:db:36:6f:23:17:
34:36:d2:2c:9c:1e:80:df:40:fa:2e:a9:a6:ec:e5:
f7:db:e0:8b:ad:c1:e4:85:bf:e7:09:58:b7:17:6b:
72:10:40:e1:af:02:ca:b4:0d:20:a4:79:56:f5:fd:
50:54:96:87:d5:46:0e:92:a7:96:0c:24:19:b6:5d:
fb:60:8d:5d:13:cc:1e:10:d0:1e:7c:34:05:58:7d:
46:1c:62:c6:4a:d1:b1:4b:8b:7c:77:c5:fd:6d:cf:
21:71:c4:aa:c7:bb:42:c9:65:43:c0:77:c1:b0:03:
d4:26:4d:aa:75:e9:4d:86:3d:51:a7:c7:50:c2:34:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:3C:80:9F:9F:8C:F4:94:77:2F:45:BD:7D:02:19:C6:E1:8E:F6
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/LuU8gJ-fjPSUdy9FvX0CGcbhjvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.128.0/17
93.186.96.0/20
185.140.160.0/22
193.203.60.0/22
IPv6:
2a03:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
48:dd:c8:fe:fb:28:d4:70:74:46:a3:9e:34:14:06:0d:2b:95:
fb:26:79:fc:60:55:40:87:9b:b1:33:4b:c8:34:2a:b1:29:59:
71:62:9c:c1:0c:44:81:da:f4:2c:fa:a2:3f:b9:04:6d:73:73:
6a:f6:bb:6a:b0:ef:a0:96:19:8e:12:c6:7f:58:a7:9b:c1:f6:
b5:13:36:0f:bd:b1:79:e2:d9:0f:c5:93:b1:55:98:44:16:40:
96:f2:2b:eb:56:cb:39:e2:bb:8f:e9:c0:5f:33:3e:32:32:01:
e2:67:af:94:36:1f:76:4d:05:ec:8e:30:67:e2:1e:77:b7:cc:
89:08:62:f1:9d:6f:49:53:40:28:88:c0:25:26:8f:3c:07:87:
8f:e2:9a:d8:25:d0:f8:cc:e0:2f:30:83:79:d4:8e:73:85:d6:
b4:1a:ed:f1:b4:09:4e:45:60:bd:94:13:59:d7:3d:38:5a:b9:
97:76:94:a9:37:61:fc:d0:90:b4:56:43:6e:c6:85:16:3d:db:
06:f7:60:e5:f3:31:53:d7:6e:e0:3e:3b:5b:8b:9e:53:2e:f7:
87:b2:9c:23:5e:19:af:a6:4d:31:36:38:f2:7a:92:32:c7:0a:
59:fc:05:57:c2:bf:ce:ed:c1:64:fc:d1:85:35:4f:a9:ed:7e:
c1:1e:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:37:14 2026 by rpki-client