Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/lSFi-1eTKmeoYvO7iogn6X4tIpU.roa
File: lSFi-1eTKmeoYvO7iogn6X4tIpU.roa (raw, json)
Hash identifier: //ICRxBUp7hn0Q5ceoMLISlFLfZ4l/LvL7doeO/ruS0=
Subject key identifier: 95:21:62:FB:57:93:2A:67:A8:62:F3:BB:8A:88:27:E9:7E:2D:22:95
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019FFAEC747B5D075E9D00E34B1C9B481F89
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/lSFi-1eTKmeoYvO7iogn6X4tIpU.roa
Signing time: Thu 13 Aug 2026 11:40:27 +0000
ROA not before: Thu 13 Aug 2026 11:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
80.252.120.0/22 maxlen: 22
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
150.251.160.0/20 maxlen: 20
162.255.208.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.128.0/20 maxlen: 20
195.167.128.0/21 maxlen: 21
195.167.136.0/21 maxlen: 21
195.167.138.0/24 maxlen: 24
195.167.176.0/20 maxlen: 20
195.167.176.0/21 maxlen: 21
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
195.167.184.0/21 maxlen: 21
195.167.184.0/24 maxlen: 24
195.167.186.0/24 maxlen: 24
195.167.187.0/24 maxlen: 24
195.167.189.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
209.42.8.0/21 maxlen: 21
2a00:5840::/29 maxlen: 32
2a00:5840::/32 maxlen: 32
2a02:890::/29 maxlen: 32
2a02:890::/32 maxlen: 32
2a06:e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ec:74:7b:5d:07:5e:9d:00:e3:4b:1c:9b:48:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Aug 13 11:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=952162fb57932a67a862f3bb8a8827e97e2d2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:05:d9:85:df:34:8c:e7:85:74:f8:2a:37:
20:d5:09:eb:d0:53:90:8b:1e:f0:a3:2f:2a:d0:39:
af:4b:8d:16:48:aa:5f:8e:c1:45:bc:d8:70:4e:dd:
7a:f9:16:c5:f1:0c:36:00:cb:1b:24:4e:d6:42:b6:
29:d8:7b:6d:16:ac:e8:c9:68:50:03:30:c1:48:72:
59:92:73:97:1c:9c:63:7d:39:c4:0d:6d:c3:19:9c:
63:43:a2:8b:1d:10:c1:62:45:b4:ce:93:4b:53:8e:
70:6b:ec:73:e8:df:d9:c0:e6:c5:32:4a:a0:7d:bd:
e5:29:93:cb:8f:27:b8:4d:d5:6a:bf:e8:0e:6e:ba:
21:22:86:e4:3a:90:b9:c8:38:6a:73:51:fb:74:c4:
1c:2b:a5:5e:ff:7a:08:0a:d7:2a:6a:b7:a9:37:3b:
64:56:84:48:1a:18:31:f3:f1:29:47:c5:c1:3f:2e:
fc:06:95:44:d4:b8:54:a9:7a:66:27:01:fe:97:4b:
71:d4:33:e9:37:6f:6b:2e:7e:11:e9:77:79:dc:00:
d6:48:35:80:ee:ef:3e:93:e7:0c:26:8d:cd:c1:48:
d3:e7:ce:5c:bc:4d:ff:f2:c0:3e:14:d8:01:31:92:
2d:9b:1c:7c:2a:44:d3:30:72:9e:22:b9:63:f5:83:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:62:FB:57:93:2A:67:A8:62:F3:BB:8A:88:27:E9:7E:2D:22:95
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/lSFi-1eTKmeoYvO7iogn6X4tIpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
79.173.128.0/18
80.252.120.0/22
83.143.224.0/21
103.110.208.0/22
109.224.248.0/21
150.251.160.0/20
162.255.208.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.128.0/20
195.167.176.0/20
209.42.4.0-209.42.15.255
IPv6:
2a00:5840::/29
2a02:890::/29
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:93:0f:ff:6c:1b:35:14:fd:f6:9a:85:13:6f:66:15:25:2b:
05:5a:e2:1e:46:ed:cb:bb:11:17:04:3b:1f:43:32:0f:f9:d4:
70:73:e1:37:02:d1:25:56:23:ac:9e:c8:f3:68:14:52:86:ba:
bf:e5:1c:da:31:01:e6:75:c2:1c:c8:03:64:b4:62:82:cf:4a:
ea:dc:bc:7d:c3:56:bc:b4:e2:4a:01:ed:44:c2:86:99:31:9e:
1e:a6:54:2a:93:40:4a:ba:94:47:bb:41:94:e6:53:7e:56:43:
1a:2f:49:55:d4:04:cf:64:eb:27:77:77:ba:48:0f:7c:17:2c:
fe:08:4f:0c:ce:e8:76:af:1c:14:bc:46:27:4b:1f:58:6b:cd:
f0:33:b0:b2:2f:73:89:b0:65:61:ab:4f:0f:4a:d8:a1:07:7a:
c2:55:45:7a:ef:b0:b7:6f:89:7b:4b:f7:f2:14:2a:38:43:f2:
c8:10:50:e7:77:9a:13:07:5e:d3:d2:e2:e0:4d:5f:6b:d4:b9:
83:39:23:3a:0b:33:42:f2:23:d4:81:b3:80:2a:60:8b:32:95:
69:cb:29:48:43:fd:51:fc:5e:a8:1d:8e:f6:90:29:f9:b7:55:
5a:c9:6e:0f:41:c4:73:f4:8b:d7:01:fc:55:2b:26:7a:79:e2:
ba:e0:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:52 2026 by rpki-client