Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/lavK-Em3JP8sORSDHjcXhhiEiDw.roa
File: lavK-Em3JP8sORSDHjcXhhiEiDw.roa (raw, json)
Hash identifier: aNel9RXJpvuQchalk7ZBqX+TTYTUwLAtRlQmAShJL9c=
Subject key identifier: 95:AB:CA:F8:49:B7:24:FF:2C:39:14:83:1E:37:17:86:18:84:88:3C
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A0E2063BC2D8750474A62E4D9D48CF15BD
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/lavK-Em3JP8sORSDHjcXhhiEiDw.roa
Signing time: Sun 27 Sep 2026 08:40:54 +0000
ROA not before: Sun 27 Sep 2026 08:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 109.162.240.0/21 maxlen: 24
109.162.240.0/22 maxlen: 22
109.162.240.0/23 maxlen: 23
109.162.240.0/24 maxlen: 24
213.207.224.0/21 maxlen: 24
213.207.224.0/22 maxlen: 22
213.207.224.0/23 maxlen: 23
213.207.224.0/24 maxlen: 24
213.207.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:06:3b:c2:d8:75:04:74:a6:2e:4d:9d:48:cf:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Sep 27 08:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95abcaf849b724ff2c3914831e3717861884883c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:3d:f1:bf:ff:b3:e5:7b:c9:c8:3f:7d:04:
27:e8:d3:f5:f6:cb:89:1a:51:e8:ce:a6:1e:1a:2f:
a8:7f:23:b8:8d:1e:03:79:7b:ec:a5:ba:fc:37:53:
eb:68:3f:e2:52:bb:a7:36:21:7f:6e:57:05:02:ab:
24:10:3e:52:cf:c5:5e:92:ff:2b:9a:2a:4c:9d:84:
96:2e:09:0d:0d:c5:bf:29:c3:1f:33:c8:ec:3c:b3:
bf:5c:e7:4b:6d:1b:0b:2d:ca:f0:76:69:b1:20:34:
3b:8d:08:ed:30:49:d6:93:db:d3:c8:9b:d9:4b:8b:
b1:d7:3d:6d:28:8d:0c:fe:15:10:9a:8c:38:7d:1a:
30:08:c8:d7:0e:85:b8:bf:cc:76:35:54:4d:c4:d2:
2a:31:3d:d7:4b:69:2f:b6:26:05:9f:0e:5a:46:74:
3c:29:ca:97:0d:e1:16:8d:cc:23:73:94:6a:b9:fc:
d7:62:ba:5e:1c:dc:1c:72:c7:a0:f5:8a:96:65:3c:
06:71:63:73:eb:de:1b:d8:6c:46:f1:f8:3d:23:ba:
48:eb:e6:1e:b3:70:aa:f9:af:fb:2c:e5:28:46:5d:
d2:f2:08:33:f7:ca:57:ad:29:4c:31:cf:03:5c:ac:
9d:15:52:7d:02:f1:98:49:11:c1:52:42:20:b3:05:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:CA:F8:49:B7:24:FF:2C:39:14:83:1E:37:17:86:18:84:88:3C
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/lavK-Em3JP8sORSDHjcXhhiEiDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.240.0/21
213.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
81:9f:a5:a8:1f:a9:94:56:e9:e8:9b:9c:db:9b:34:92:f4:c6:
29:3c:06:64:e7:0f:77:23:2c:bf:55:da:5b:7d:93:6d:84:eb:
80:9f:3c:6c:72:6a:fc:09:f3:83:cb:c3:66:8a:55:d9:79:ea:
33:b9:5a:6f:6a:ca:7a:51:ff:f5:c2:d6:c9:13:37:75:96:bf:
e3:8c:18:25:bd:cc:63:d0:8a:bd:e0:11:58:47:90:16:94:90:
ed:13:ca:72:32:67:0e:66:2f:4a:89:2f:23:c7:e8:d9:11:cf:
da:4c:e0:f9:e9:5d:e1:45:b4:82:ac:db:84:64:42:9b:d7:e7:
49:62:95:ad:0b:8a:6c:87:0c:89:5a:2c:5d:79:c3:82:42:ed:
eb:20:f5:f2:ef:17:ec:1a:35:63:30:f7:c2:b4:af:0a:2f:10:
72:3b:a8:85:e8:de:d9:12:cd:ae:17:1c:52:64:92:50:eb:1a:
31:b2:cf:7b:6a:5c:97:73:37:63:64:30:7e:08:41:be:0d:83:
4f:2e:3a:f5:d9:27:0a:ae:13:6e:1b:42:68:97:a1:37:e5:08:
57:d9:35:93:20:8d:81:b0:fa:1e:c2:d5:39:21:26:8b:a1:b3:
ee:7b:51:11:79:01:46:b4:7e:c9:4d:f7:16:2d:93:08:42:f3:
8b:41:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:44 2026 by rpki-client