Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ldoq86JhWRtPnXQa0o4fAn7GOes.roa
File: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (raw, json)
Hash identifier: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=
Subject key identifier: 95:DA:2A:F3:A2:61:59:1B:4F:9D:74:1A:D2:8E:1F:02:7E:C6:39:EB
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A019A87DE0FCD8CC5B88BCF07330EC3220
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ldoq86JhWRtPnXQa0o4fAn7GOes.roa
Signing time: Wed 19 Aug 2026 10:54:27 +0000
ROA not before: Wed 19 Aug 2026 10:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209341
IP address blocks: 65.98.48.0/24 maxlen: 24
65.181.113.0/24 maxlen: 24
69.72.149.0/24 maxlen: 24
69.72.244.0/24 maxlen: 24
192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
194.147.95.0/24 maxlen: 24
208.116.19.0/24 maxlen: 24
208.116.57.0/24 maxlen: 24
209.42.26.0/24 maxlen: 24
209.42.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:a8:7d:e0:fc:d8:cc:5b:88:bc:f0:73:30:ec:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Aug 19 10:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95da2af3a261591b4f9d741ad28e1f027ec639eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:4a:21:9c:0b:1a:5c:69:06:4d:59:4a:a5:
28:7a:fe:ac:2d:59:f4:a3:12:fb:40:c7:71:0c:5f:
30:aa:fd:9a:95:4a:2c:88:e8:31:14:f7:6a:1c:1a:
2b:2c:76:a5:19:d8:e9:3e:79:b8:85:cb:70:2b:23:
33:36:b6:de:dd:08:c4:db:41:63:59:64:20:53:59:
eb:eb:66:8a:79:aa:a3:af:ce:6c:1f:62:6d:ae:97:
51:37:8a:06:fb:9b:37:10:81:e5:b6:39:58:47:4a:
2e:2d:a8:3e:47:6d:14:4a:06:d0:ef:f6:df:fb:a2:
cf:cd:d9:ee:71:b8:fc:7c:f0:b4:9d:2e:ab:7d:02:
3f:fc:c5:7f:7f:49:a9:e5:27:83:7f:17:53:d2:2d:
fe:14:7a:9e:d3:f1:bd:d0:ac:39:69:c4:42:53:1b:
db:50:fe:29:5c:c8:17:47:50:37:53:bc:5c:3a:5c:
5b:4c:f4:c6:61:7b:39:d3:30:b2:3f:9a:0f:2b:c2:
ad:8b:58:49:a3:eb:89:b0:1a:83:30:4c:88:33:89:
cf:98:31:7a:37:6c:e4:b6:7d:e2:3e:ef:72:dd:63:
e8:76:31:4d:8f:2d:5c:d9:ae:a1:61:22:0b:9d:7b:
86:5d:f9:03:a9:9b:2d:a9:6a:44:d8:a2:67:36:d7:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:2A:F3:A2:61:59:1B:4F:9D:74:1A:D2:8E:1F:02:7E:C6:39:EB
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ldoq86JhWRtPnXQa0o4fAn7GOes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.48.0/24
65.181.113.0/24
69.72.149.0/24
69.72.244.0/24
192.250.229.0-192.250.230.255
194.147.95.0/24
208.116.19.0/24
208.116.57.0/24
209.42.26.0/24
209.42.31.0/24
Signature Algorithm: sha256WithRSAEncryption
90:06:1a:c7:b4:8a:f3:6e:38:83:c7:2d:68:8b:e0:58:69:52:
1d:6d:44:a3:d5:f7:05:b7:bd:23:59:3c:e9:73:5b:53:60:f6:
6c:c2:cc:96:cb:3d:8d:e0:1e:70:16:da:54:ad:9e:ce:06:0c:
02:84:8b:d9:2d:e7:ec:a0:5c:4d:5a:4f:34:9e:12:cf:64:7c:
e1:1f:a1:2b:30:2b:b6:41:02:20:52:46:ef:f8:0f:0f:88:47:
7f:6e:0b:12:98:28:5d:cf:20:d4:19:d2:4d:5a:09:87:e9:af:
ec:b3:75:c6:e7:01:20:8a:9e:4b:1e:68:72:1e:a6:d2:46:b0:
7a:1d:48:39:64:6a:ac:6c:54:31:56:fd:f5:67:ff:6f:76:a2:
7d:df:0b:35:c9:a3:62:ec:96:2c:4a:ec:a8:cb:3b:16:15:7b:
fe:11:45:af:0f:a7:ad:b3:41:07:27:c2:2d:19:bf:dc:63:94:
6d:1d:1d:3a:0c:20:1d:42:e9:43:10:c5:9e:0b:b0:6a:b5:62:
87:db:dc:41:a5:f8:73:52:a8:3d:4a:ce:44:ce:bd:ec:c6:3d:
cb:36:39:d1:3d:dd:3e:06:4b:34:27:0e:06:dd:aa:97:1f:9e:
a5:47:1c:59:19:3f:71:81:07:41:ec:e1:b2:4d:3f:80:ba:ae:
50:11:75:84
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaAZqH3g/NjMW4i88HMw7DIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYwODE5MTA1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWRhMmFmM2EyNjE1OTFiNGY5ZDc0MWFkMjhlMWYwMjdlYzYzOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWdKIZwLGlxpBk1ZSqUoev6sLVn0
oxL7QMdxDF8wqv2alUosiOgxFPdqHBorLHalGdjpPnm4hctwKyMzNrbe3QjE20Fj
WWQgU1nr62aKeaqjr85sH2JtrpdRN4oG+5s3EIHltjlYR0ouLag+R20USgbQ7/bf
+6LPzdnucbj8fPC0nS6rfQI//MV/f0mp5SeDfxdT0i3+FHqe0/G90Kw5acRCUxvb
UP4pXMgXR1A3U7xcOlxbTPTGYXs50zCyP5oPK8Kti1hJo+uJsBqDMEyIM4nPmDF6
N2zktn3iPu9y3WPodjFNjy1c2a6hYSILnXuGXfkDqZstqWpE2KJnNteRPwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFJXaKvOiYVkbT510GtKOHwJ+xjnrMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvbGRvcTg2SmhXUnRQblhRYTBvNGZBbjdHT2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAQWIwAwQA
QbVxAwQARUiVAwQARUj0MAwDBADA+uUDBADA+uYDBADCk18DBADQdBMDBADQdDkD
BADRKhoDBADRKh8wDQYJKoZIhvcNAQELBQADggEBAJAGGse0ivNuOIPHLWiL4Fhp
Uh1tRKPV9wW3vSNZPOlzW1Ng9mzCzJbLPY3gHnAW2lStns4GDAKEi9kt5+ygXE1a
TzSeEs9kfOEfoSswK7ZBAiBSRu/4Dw+IR39uCxKYKF3PINQZ0k1aCYfpr+yzdcbn
ASCKnkseaHIeptJGsHodSDlkaqxsVDFW/fVn/292on3fCzXJo2LslixK7KjLOxYV
e/4RRa8Pp62zQQcnwi0Zv9xjlG0dHToMIB1C6UMQxZ4LsGq1Yofb3EGl+HNSqD1K
zkTOvezGPcs2OdE93T4GSzQnDgbdqpcfnqVHHFkZP3GBB0Hs4bJNP4C6rlARdYQ=
-----END CERTIFICATE-----
Generated at Sat Sep 12 02:03:41 2026 by rpki-client