Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/1LR-EYBL03Uq9iiIomYFwjWbVgU.roa
File: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (raw, json)
Hash identifier: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=
Subject key identifier: D4:B4:7E:11:80:4B:D3:75:2A:F6:28:88:A2:66:05:C2:35:9B:56:05
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019E6E4F8A51F3708D369A110CB4AD29B904
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/1LR-EYBL03Uq9iiIomYFwjWbVgU.roa
Signing time: Thu 28 May 2026 11:19:26 +0000
ROA not before: Thu 28 May 2026 11:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12312
IP address blocks: 62.26.0.0/15 maxlen: 23
62.144.0.0/19 maxlen: 19
62.144.64.0/19 maxlen: 19
62.144.96.0/19 maxlen: 19
62.144.128.0/17 maxlen: 17
62.144.136.0/21 maxlen: 21
62.144.144.0/20 maxlen: 20
62.144.160.0/19 maxlen: 19
62.144.192.0/18 maxlen: 18
62.246.0.0/16 maxlen: 16
79.140.176.0/20 maxlen: 20
80.83.96.0/20 maxlen: 20
185.210.52.0/23 maxlen: 23
194.112.16.0/22 maxlen: 22
194.112.24.0/21 maxlen: 21
195.52.0.0/16 maxlen: 23
195.63.32.0/19 maxlen: 19
195.63.64.0/18 maxlen: 18
195.78.160.0/19 maxlen: 19
195.185.0.0/16 maxlen: 16
212.172.0.0/16 maxlen: 16
2001:4090::/32 maxlen: 32
2001:4091::/32 maxlen: 32
2a01:5c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:4f:8a:51:f3:70:8d:36:9a:11:0c:b4:ad:29:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: May 28 11:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b47e11804bd3752af62888a26605c2359b5605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:72:8d:93:46:71:9f:77:39:e3:59:2b:a1:
b4:d8:a2:f8:69:0f:36:7d:f2:96:ff:44:5a:9f:cc:
a5:73:e6:d2:e6:f4:74:ae:e3:74:7b:45:9c:7e:e5:
34:12:cf:90:2c:40:02:16:3e:c0:d1:1b:00:b4:24:
b0:fb:7e:51:37:62:b9:a5:8e:d2:f7:e2:9f:09:21:
39:85:f8:41:4f:14:b5:7f:e7:e5:62:f7:9d:e7:d6:
3c:cf:d1:ee:40:58:99:3e:8b:63:e3:8a:1d:3c:d0:
db:8f:32:83:59:34:4e:8f:56:e7:59:bb:0d:7f:ca:
6a:53:16:b0:20:b3:a0:7d:75:c1:63:60:ad:f4:15:
66:1a:df:21:ed:e8:b4:b7:8f:fe:5f:ba:de:9b:d1:
0a:ea:a9:44:b2:b5:c3:a3:ee:07:25:c5:7b:8a:92:
7e:66:a2:4a:18:95:94:5f:d9:54:1d:8e:4e:b3:75:
71:b4:b3:43:33:34:c4:b2:ff:b9:e8:25:14:ce:4f:
4b:43:fa:7c:d9:5e:0c:56:41:d5:9f:4c:75:16:e9:
39:25:aa:05:9b:52:89:de:c6:00:10:7d:44:12:97:
ff:21:be:0a:26:ce:2e:f1:00:fd:44:75:c1:0b:ac:
1f:48:cf:5e:f6:95:45:e5:23:96:64:87:a6:56:62:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:7E:11:80:4B:D3:75:2A:F6:28:88:A2:66:05:C2:35:9B:56:05
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/1LR-EYBL03Uq9iiIomYFwjWbVgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.26.0.0/15
62.144.0.0/19
62.144.64.0-62.144.255.255
62.246.0.0/16
79.140.176.0/20
80.83.96.0/20
185.210.52.0/23
194.112.16.0/22
194.112.24.0/21
195.52.0.0/16
195.63.32.0-195.63.127.255
195.78.160.0/19
195.185.0.0/16
212.172.0.0/16
IPv6:
2001:4090::/31
2a01:5c8::/32
Signature Algorithm: sha256WithRSAEncryption
8b:e3:a0:d3:47:c4:77:c4:d7:94:f6:23:e3:d5:7a:46:19:3f:
ad:5f:5f:04:2e:c6:a3:0d:1b:5b:ef:6c:93:30:c7:f7:72:63:
0f:a2:0f:fd:9b:67:6f:dd:85:7b:5c:3f:2c:03:f7:3a:c9:3e:
56:35:dc:84:7e:52:ad:59:4d:6f:7f:34:3b:07:76:d4:3d:e7:
a8:b2:64:40:a5:4f:52:29:d2:d6:05:50:ed:cb:0d:e6:e1:11:
94:b3:11:df:6a:46:96:9e:d3:19:07:f9:6e:5e:b9:f4:0c:49:
2d:b0:2f:92:58:9a:88:5c:fd:5d:c6:ff:49:8b:48:5f:b6:0e:
57:cc:7f:6c:85:ed:09:e1:29:f9:d3:11:00:1c:26:b4:b5:e6:
c9:10:7f:ab:b0:7f:a5:f7:be:75:49:7e:d4:56:2a:33:13:cb:
66:40:ae:b8:a2:02:21:09:a8:84:67:e7:df:b0:ee:48:da:88:
34:02:31:d6:36:72:db:c8:dc:01:d1:83:3e:c8:f2:ac:f7:0f:
fa:96:78:5d:fb:bc:6e:b5:e7:9d:19:af:2c:22:96:df:ab:1b:
c0:88:4b:5d:15:3c:da:c6:4d:91:fc:94:ad:d0:18:e8:29:9d:
c1:d0:c3:48:5f:2e:52:a2:1d:73:0e:bd:f4:87:e0:9a:ad:93:
1e:cd:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:11 2026 by rpki-client