Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lk395ie3qT81qulWwIXDznGH8SM.roa
File: lk395ie3qT81qulWwIXDznGH8SM.roa (raw, json)
Hash identifier: zej9m2VDZOHxBtltmYwf/HO0bdx5KdcEpTbmboltJPY=
Subject key identifier: 96:4D:FD:E6:27:B7:A9:3F:35:AA:E9:56:C0:85:C3:CE:71:87:F1:23
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A1A8A10BE26D1EBE6F5BE7E79F6DB32BF1
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lk395ie3qT81qulWwIXDznGH8SM.roa
Signing time: Wed 04 Nov 2026 22:14:48 +0000
ROA not before: Wed 04 Nov 2026 22:14:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 31.187.92.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
88.135.100.0/22 maxlen: 24
88.135.104.0/21 maxlen: 24
89.34.171.0/24 maxlen: 24
91.210.80.0/22 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.48.0/20 maxlen: 24
121.127.56.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
195.133.202.0/23 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:a1:0b:e2:6d:1e:be:6f:5b:e7:e7:9f:6d:b3:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 4 22:14:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=964dfde627b7a93f35aae956c085c3ce7187f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:38:6a:eb:e8:d6:97:63:43:40:b8:a4:85:
4d:fb:0a:b4:87:ab:42:7b:6e:bc:7e:75:f3:eb:24:
0f:00:d3:f6:d5:bb:2a:96:40:f6:4b:11:42:f0:a5:
b5:8f:4d:17:7c:60:09:2c:fa:13:62:a7:d4:73:26:
04:6b:ef:0e:af:c4:9b:30:b3:41:bf:94:90:30:57:
95:f0:a6:0f:04:53:a2:5f:1d:cc:7d:6f:32:46:10:
b3:73:ea:d8:85:72:68:71:95:5c:69:fc:45:e2:9c:
e8:0b:a5:e4:b4:29:38:e0:34:1d:6f:6a:e2:03:19:
41:24:ba:f9:39:11:6e:a3:cc:35:4c:7a:4e:f4:d6:
87:4f:54:90:92:7c:e8:f2:25:22:f8:de:ce:23:c1:
f0:69:73:6d:c2:ac:1a:8c:66:89:e1:62:23:6e:1e:
32:18:74:c1:59:7c:95:46:35:fb:a9:c7:00:a0:3b:
31:0d:90:2f:8c:57:c8:14:61:a6:2e:b5:26:97:77:
47:dc:b7:74:90:89:24:11:de:c4:d8:14:44:2e:e7:
fe:45:52:62:94:1f:bf:4e:c9:96:99:da:ba:03:21:
79:d0:ee:12:34:74:17:69:8f:e4:79:f5:30:eb:47:
a2:f5:e4:22:ee:77:c5:24:db:9f:95:62:19:3a:14:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:FD:E6:27:B7:A9:3F:35:AA:E9:56:C0:85:C3:CE:71:87:F1:23
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lk395ie3qT81qulWwIXDznGH8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
66.9.96.0/20
66.117.8.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
88.135.100.0-88.135.111.255
89.34.171.0/24
91.210.80.0/22
93.119.184.0/21
94.26.110.0/23
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
121.127.48.0/20
141.193.108.0/22
162.250.216.0/22
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
192.109.205.0/24
195.133.202.0/23
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8a:7a:d7:74:95:40:f0:da:93:cf:d0:4f:7e:d2:93:06:ed:
83:2f:53:8f:38:88:36:42:91:e0:a7:c6:ad:ef:0f:12:07:3e:
e1:e4:2e:83:2f:82:91:19:62:ce:44:54:1c:b7:b2:54:87:b3:
56:e3:ff:30:49:e2:20:30:8e:17:86:1c:c6:7c:55:29:29:a1:
1a:7c:a6:b7:15:ac:db:22:50:cf:8c:08:98:80:ad:d7:45:cb:
53:35:31:7e:4a:88:b4:7c:4d:4b:cd:d0:8f:4d:4c:5a:f4:e1:
9d:cb:65:0c:42:53:f0:29:59:21:6e:ca:6d:2a:11:d1:ae:08:
74:5b:7e:02:a3:b2:67:8d:ce:50:53:36:f5:3a:a7:06:88:4c:
51:81:32:59:79:4c:a9:f9:06:36:5e:85:e7:9e:0b:b3:96:64:
a0:b6:ae:f7:9e:11:e3:fc:6f:ce:05:0e:7c:3f:12:bf:9f:49:
9c:b0:b6:2f:99:71:b1:01:98:51:54:59:66:9a:04:1c:b5:fc:
36:60:f7:3e:a1:3e:47:99:f7:77:f7:f6:e8:81:4e:61:30:38:
df:12:fe:0d:ca:9f:8f:0e:95:04:d0:2a:72:31:a7:f6:6f:51:
23:79:ff:6e:99:18:2a:45:e6:99:5c:72:bf:db:66:6d:61:2b:
6d:ae:b9:51
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAaGooQvibR6+b1vn559tsyvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjYxMTA0MjIxNDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjRkZmRlNjI3YjdhOTNmMzVhYWU5NTZjMDg1YzNjZTcxODdmMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JQ4auvo1pdjQ0C4pIVN+wq0h6tC
e268fnXz6yQPANP21bsqlkD2SxFC8KW1j00XfGAJLPoTYqfUcyYEa+8Or8SbMLNB
v5SQMFeV8KYPBFOiXx3MfW8yRhCzc+rYhXJocZVcafxF4pzoC6XktCk44DQdb2ri
AxlBJLr5ORFuo8w1THpO9NaHT1SQknzo8iUi+N7OI8HwaXNtwqwajGaJ4WIjbh4y
GHTBWXyVRjX7qccAoDsxDZAvjFfIFGGmLrUml3dH3Ld0kIkkEd7E2BRELuf+RVJi
lB+/TsmWmdq6AyF50O4SNHQXaY/kefUw60ei9eQi7nfFJNuflWIZOhR5zQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFJZN/eYnt6k/NarpVsCFw85xh/EjMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvbGszOTVpZTNxVDgxcXVsV3dJWER6bkdIOFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAIf
u1wDBARCCWADBAJCdQgDBAJKfMwwDAMEBk3fwAMEAU3fyAMEAU+LQAMEA1OOyDAM
AwQCWIdkAwQEWIdgAwQAWSKrAwQCW9JQAwQDXXe4AwQBXhpuAwQAXmVnAwQDX7II
AwQCX9eQAwQDdDIQAwQEeX8wAwQCjcFsAwQCovrYAwQCsN4wAwQDsti4AwQCvNcM
AwQAwG3NAwQBw4XKAwQCxpFwAwQCzYb0MA0GCSqGSIb3DQEBCwUAA4IBAQCFinrX
dJVA8NqTz9BPftKTBu2DL1OPOIg2QpHgp8at7w8SBz7h5C6DL4KRGWLORFQct7JU
h7NW4/8wSeIgMI4XhhzGfFUpKaEafKa3FazbIlDPjAiYgK3XRctTNTF+Soi0fE1L
zdCPTUxa9OGdy2UMQlPwKVkhbsptKhHRrgh0W34Co7Jnjc5QUzb1OqcGiExRgTJZ
eUyp+QY2XoXnnguzlmSgtq73nhHj/G/OBQ58PxK/n0mcsLYvmXGxAZhRVFlmmgQc
tfw2YPc+oT5Hmfd39/bogU5hMDjfEv4Nyp+PDpUE0CpyMaf2b1Ejef9umRgqReaZ
XHK/22ZtYSttrrlR
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:25 2026 by rpki-client