Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/LwKRPE4ui1ybXwd-Avf8cPtqbdg.roa
File: LwKRPE4ui1ybXwd-Avf8cPtqbdg.roa (raw, json)
Hash identifier: 1SCmn+dHZhfLv4aaD79jVsHLXJTyyZvIEd5MWEwSljk=
Subject key identifier: 2F:02:91:3C:4E:2E:8B:5C:9B:5F:07:7E:02:F7:FC:70:FB:6A:6D:D8
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A13E9E3B9335E406D5F91EB71E6544012E
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/LwKRPE4ui1ybXwd-Avf8cPtqbdg.roa
Signing time: Thu 15 Oct 2026 08:11:59 +0000
ROA not before: Thu 15 Oct 2026 08:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 85.28.32.0/20 maxlen: 24
85.28.32.0/24 maxlen: 24
85.28.33.0/24 maxlen: 24
85.28.34.0/24 maxlen: 24
85.28.43.0/24 maxlen: 24
85.28.44.0/23 maxlen: 23
85.28.46.0/24 maxlen: 24
85.28.48.0/20 maxlen: 24
85.28.60.0/24 maxlen: 24
109.238.192.0/20 maxlen: 24
109.238.192.0/22 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.201.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.206.0/24 maxlen: 24
109.238.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9e:3b:93:35:e4:06:d5:f9:1e:b7:1e:65:44:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Oct 15 08:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f02913c4e2e8b5c9b5f077e02f7fc70fb6a6dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:a1:ea:eb:ba:e3:6a:2f:d7:88:d0:15:dd:
2d:ad:86:d3:25:86:9e:38:4e:1f:81:d1:f3:da:7b:
0b:10:27:8c:27:a2:52:05:65:8f:e4:9f:f6:da:77:
19:42:1a:34:b8:d3:a1:f4:ab:da:bd:ed:60:2e:14:
06:57:97:f2:42:ca:5c:9a:a6:68:cc:05:01:5b:69:
b6:eb:20:eb:7f:3b:34:80:a2:26:93:d4:03:a1:ed:
e4:dd:4c:f5:2c:e9:20:d4:34:2f:2f:ff:e2:99:b5:
e9:47:eb:e8:b8:6d:26:5c:e8:4a:12:b1:d5:9a:d4:
95:95:fb:38:69:e2:c0:b7:a6:37:3d:09:83:36:e9:
18:83:67:27:5c:a7:9d:34:a8:76:2f:90:63:d5:2b:
ca:cf:4f:ba:dc:1e:d3:c9:a2:14:c9:3a:33:1c:d3:
f5:ce:c9:92:4f:e8:2b:f1:44:76:66:a8:fe:c6:e0:
da:29:a0:4d:e1:ce:3b:79:1d:09:5b:4a:f5:2d:74:
d3:50:d8:8e:28:54:16:f6:41:70:4b:12:04:ec:c4:
d9:79:f4:73:5e:31:89:35:2b:e6:5e:6b:57:f3:df:
a4:81:7e:3c:67:ce:92:b9:85:99:57:e7:15:2d:53:
e6:eb:61:d4:82:6c:17:80:f9:99:3a:23:a8:1a:92:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:91:3C:4E:2E:8B:5C:9B:5F:07:7E:02:F7:FC:70:FB:6A:6D:D8
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/LwKRPE4ui1ybXwd-Avf8cPtqbdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.32.0/19
109.238.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:64:6f:09:f3:6c:55:cc:57:54:40:d3:ae:a1:e1:3e:e2:4c:
79:a9:92:28:32:5f:03:f2:01:f5:16:ce:ed:f6:ea:69:66:7e:
3d:7b:cf:09:39:4f:8f:2b:5f:1b:f5:6b:77:37:35:6f:25:cf:
db:52:5f:39:71:b9:57:5f:f4:04:c5:12:0e:05:ca:d2:6a:70:
60:d3:76:e0:41:8f:f4:c6:97:15:e5:5a:8f:2e:cc:02:fc:21:
5f:74:af:8f:39:f6:62:c0:30:f7:fa:44:9a:c3:a8:c6:a9:ab:
43:47:df:cf:3b:da:b9:d1:f0:b4:f0:18:55:43:7d:5c:d4:22:
22:f2:4e:9e:7f:8b:7b:dc:7f:8a:32:3c:6f:96:ce:a2:bd:7c:
24:0c:ae:ec:0b:4a:7e:b3:ec:25:6e:cc:bc:10:ae:69:1a:32:
a7:e9:a4:59:a9:67:6a:5e:83:bf:20:95:73:29:75:63:92:f6:
00:69:71:b0:4e:47:82:cf:b3:e8:f6:83:64:90:eb:37:35:6a:
62:d9:cc:de:89:30:54:5b:c1:5a:3d:7e:0e:f7:db:9a:15:0a:
64:cd:4d:8f:60:65:86:54:ca:88:a6:f9:66:8e:3d:95:8e:42:
08:2e:39:ed:0d:13:e2:e9:2b:82:1e:0a:a1:8e:e1:65:b0:2b:
38:2a:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:51 2026 by rpki-client