Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/lpMP4q-My42cpOnhveXrZkVMW5o.roa
File: lpMP4q-My42cpOnhveXrZkVMW5o.roa (raw, json)
Hash identifier: 7P9/FJUb1Hjo2PDcqJMeYe8PaaEl5qJr4egEyynRQ08=
Subject key identifier: 96:93:0F:E2:AF:8C:CB:8D:9C:A4:E9:E1:BD:E5:EB:66:45:4C:5B:9A
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A0D8CB4147808957ECBACF2608B1DB5A19
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/lpMP4q-My42cpOnhveXrZkVMW5o.roa
Signing time: Fri 25 Sep 2026 13:39:54 +0000
ROA not before: Fri 25 Sep 2026 13:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 91.189.80.0/21 maxlen: 24
91.189.83.0/24 maxlen: 24
178.218.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:cb:41:47:80:89:57:ec:ba:cf:26:08:b1:db:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Sep 25 13:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96930fe2af8ccb8d9ca4e9e1bde5eb66454c5b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:d0:f5:c6:d6:f3:c9:b0:85:cd:bd:bc:f6:
1d:03:8d:cd:1c:02:b3:fc:46:8c:8b:43:9b:0d:08:
14:29:4b:84:83:85:58:7c:4f:a5:a1:dc:1c:34:de:
44:1d:65:a6:dc:82:f9:5e:c5:5d:23:37:4f:c9:86:
51:b5:78:87:4e:05:f6:8c:e4:0e:63:fe:87:f7:24:
7e:b7:a2:99:71:93:2e:26:52:c5:23:13:80:6a:9e:
a7:66:d6:d4:d2:54:dd:32:86:f3:85:ea:d4:46:d4:
13:6d:75:f0:e2:59:cc:84:33:21:cd:77:43:8b:e9:
00:b1:1e:f6:72:b1:b5:09:4a:37:4d:5c:6b:1a:40:
d5:b4:5a:49:a3:a3:16:91:16:8e:c0:41:ef:88:6a:
55:e6:a6:93:db:68:b4:9d:71:9a:87:90:44:8e:da:
dd:d8:5d:cd:b2:dc:4e:ce:4a:e2:3d:d4:00:c9:ec:
91:65:a5:42:f8:5c:a3:0c:57:1c:e8:6f:fa:4f:63:
69:09:7f:ce:57:20:ef:66:0d:3d:d1:ae:32:77:32:
19:ee:09:d0:9c:46:fd:6d:45:28:3e:08:2c:da:e1:
8e:9f:36:53:57:3c:24:d0:af:cf:ed:0a:57:4e:3e:
b4:df:e9:e3:db:c4:79:a3:aa:24:9a:71:5b:3b:fc:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:0F:E2:AF:8C:CB:8D:9C:A4:E9:E1:BD:E5:EB:66:45:4C:5B:9A
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/lpMP4q-My42cpOnhveXrZkVMW5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.80.0/21
178.218.208.0/20
Signature Algorithm: sha256WithRSAEncryption
86:91:96:77:b3:51:19:3e:d6:c3:dc:b5:cb:dd:f3:a0:21:aa:
5b:2b:e0:a4:95:ca:a5:9d:b9:51:44:a5:55:d1:b2:91:a6:0b:
18:55:d3:78:ee:45:49:fa:ed:1d:07:94:09:92:d1:e8:a5:cb:
18:f0:fe:54:0d:18:30:2e:5b:09:15:f5:ea:8d:59:df:71:85:
9e:fa:22:bb:7b:ca:c1:68:86:22:73:10:39:88:76:94:4f:5c:
21:da:5b:60:0e:e9:a1:2b:f7:cd:5a:88:db:52:b2:35:3e:df:
b8:02:28:e8:39:6b:fc:eb:ef:b3:77:49:18:56:0c:27:ba:5b:
c4:4c:c3:e6:6d:2d:3f:dd:04:14:19:86:65:70:cb:2e:f7:3f:
9d:a9:9b:08:e0:11:f6:12:71:bc:0d:82:c8:e7:b2:92:c1:e3:
2f:a2:e5:5b:56:e0:47:54:59:aa:2c:88:0a:7c:a7:86:b1:35:
d3:96:f2:26:6a:ae:03:bb:ea:92:6d:e1:f9:a0:47:24:ca:c4:
3c:cd:67:c7:9b:cc:af:f3:c3:71:a0:b2:5d:21:0b:a1:7b:dd:
90:d1:d3:94:e9:0e:41:76:e3:5d:e8:df:20:23:62:da:5a:f3:
01:9c:5e:ab:f8:1e:60:8c:94:df:50:35:9e:fd:9c:9d:2d:71:
b8:f8:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:26:26 2026 by rpki-client