Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa
File: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (raw, json)
Hash identifier: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=
Subject key identifier: 2F:3F:47:4D:B4:98:F2:58:61:73:19:2B:7A:97:22:37:C2:D0:D1:F4
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019E3B1A411D6D01902A400BD7869B3D2EEB
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa
Signing time: Mon 18 May 2026 12:40:36 +0000
ROA not before: Mon 18 May 2026 12:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207023
IP address blocks: 2.57.232.0/23 maxlen: 23
2.57.234.0/23 maxlen: 23
185.151.228.0/23 maxlen: 23
185.151.230.0/23 maxlen: 23
194.31.160.0/24 maxlen: 24
194.31.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:1a:41:1d:6d:01:90:2a:40:0b:d7:86:9b:3d:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: May 18 12:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f3f474db498f2586173192b7a972237c2d0d1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:4b:58:e1:52:98:08:81:78:c2:f4:2b:7f:
d5:95:86:e3:d1:bb:26:b6:65:ae:d4:6e:59:15:f6:
c9:65:62:ee:27:47:44:08:93:1a:1c:77:9a:0e:9b:
81:b5:78:63:e4:9a:4d:84:02:c7:65:d7:bf:71:ae:
1b:ab:4e:1d:c6:f7:bc:71:d8:7e:41:05:94:71:e3:
a7:4f:cc:29:4e:ad:ec:2c:4e:bd:e7:3c:b6:3a:54:
d6:1e:e5:79:49:56:5f:36:be:7a:ec:34:c3:73:0b:
84:af:8e:81:c5:0d:6f:39:45:70:13:75:58:37:0e:
cf:7d:61:cc:89:90:74:39:09:d5:3a:9d:10:96:dc:
4c:23:33:d3:d5:a7:0b:e0:c7:ce:b3:6c:9f:a2:dc:
7a:f9:0d:90:4d:f9:f9:17:5d:b6:d8:14:79:f1:f3:
48:8d:6d:4f:30:c7:83:21:fb:da:f5:eb:f0:b9:dc:
c3:0f:c6:08:13:51:a7:d8:f3:04:b5:81:2b:88:17:
26:18:4e:6d:c6:eb:61:79:27:df:5d:10:99:5f:6b:
6e:4b:7c:d3:51:05:8d:31:f5:d1:1b:12:2f:6d:c8:
72:68:7d:0f:78:95:85:dc:73:73:80:33:7a:4f:27:
ed:ca:3c:1c:62:1c:fd:94:17:a4:f0:4e:10:d9:ce:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:47:4D:B4:98:F2:58:61:73:19:2B:7A:97:22:37:C2:D0:D1:F4
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.232.0/22
185.151.228.0/22
194.31.160.0/24
194.31.162.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:9f:e3:40:e3:9e:c2:21:d3:d5:83:25:db:5a:77:e1:39:1d:
9f:36:c1:f2:d8:d9:d4:a4:61:bb:f5:cc:e3:0f:1b:26:35:25:
40:f0:6a:f9:8f:ef:67:19:66:15:07:19:42:0e:61:bf:96:96:
93:7a:15:c5:df:0c:c4:82:70:fa:31:8a:4e:c7:e3:9b:78:22:
39:b5:72:b3:92:9e:a1:14:e7:ec:24:70:4d:4c:cb:31:23:95:
a8:02:c0:7e:af:f5:19:b0:76:66:0a:c0:04:e8:fa:6f:ca:c0:
a0:1a:1b:22:bf:19:6a:10:4c:36:d1:92:16:86:b6:33:b3:ca:
30:19:70:67:28:73:eb:03:e7:84:28:dd:8b:30:e5:af:3e:6b:
fc:a0:92:ef:2b:52:e5:0f:19:11:65:bf:b7:3f:df:63:77:6f:
73:a7:04:31:5a:1e:ea:f7:70:e8:e8:94:08:a0:93:e2:7f:c4:
a3:a1:9b:d9:d8:bf:e0:b9:38:7b:89:4c:3e:09:17:57:79:9f:
bb:e4:8e:02:b6:66:38:cf:91:22:46:59:f8:40:0a:49:04:9e:
d5:b0:06:c4:08:fe:6c:d3:31:45:7e:49:7e:d4:06:15:45:af:
a6:55:c8:40:bf:f6:0e:d9:ce:da:df:f2:bf:03:f4:67:fc:fa:
42:97:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:15:36 2026 by rpki-client