Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lAUTh060UnG4SYUzw748rs6F-AU.roa
File: lAUTh060UnG4SYUzw748rs6F-AU.roa (raw, json)
Hash identifier: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=
Subject key identifier: 94:05:13:87:4E:B4:52:71:B8:49:85:33:C3:BE:3C:AE:CE:85:F8:05
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0580D76E13C91CB3617F765CD7336B7A9
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lAUTh060UnG4SYUzw748rs6F-AU.roa
Signing time: Mon 31 Aug 2026 13:41:12 +0000
ROA not before: Mon 31 Aug 2026 13:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 45.141.235.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0d:76:e1:3c:91:cb:36:17:f7:65:cd:73:36:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 31 13:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=940513874eb45271b8498533c3be3caece85f805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:46:12:c7:05:d1:65:37:1c:fe:43:ab:83:
dc:da:90:2b:30:fe:5d:49:f4:6a:9f:3f:5c:2c:be:
45:bd:30:07:d4:f7:0e:76:8d:51:18:0d:8f:8e:e2:
39:72:e7:57:86:bf:18:fb:64:2a:b3:52:ec:9a:cf:
08:d0:ff:28:26:c8:ff:5f:56:a3:b8:06:26:83:c7:
c3:83:20:f2:d3:0d:07:e6:16:a2:49:01:59:f2:d4:
4f:ac:20:aa:5a:74:cd:ec:12:64:a7:a8:34:f0:8b:
b8:64:13:c8:6d:16:b5:88:05:5b:e7:1d:b9:7b:6b:
4e:56:6c:f7:bc:e9:f7:7c:77:84:e8:2d:49:5c:bc:
bd:40:16:7d:e2:8e:a7:49:ef:8f:12:cd:5c:da:62:
75:7b:96:9c:0e:b4:d4:f7:1a:38:ac:34:1d:37:ac:
e9:cb:d9:d8:7d:87:a6:af:77:68:a7:ee:d5:c4:3a:
ac:a8:49:ac:50:e1:1e:a4:82:f5:28:a5:de:d5:bb:
9e:d1:b4:55:f9:ff:a2:3b:22:00:62:c6:27:45:1c:
36:46:aa:94:58:13:42:ac:b7:d9:20:1d:db:58:9f:
48:e1:57:40:0b:24:34:bb:df:fb:2a:65:13:6f:ed:
e0:1b:34:e9:52:2e:90:48:0f:22:fa:03:86:26:06:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:05:13:87:4E:B4:52:71:B8:49:85:33:C3:BE:3C:AE:CE:85:F8:05
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lAUTh060UnG4SYUzw748rs6F-AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
91.92.33.0-91.92.34.255
91.92.43.0/24
93.152.205.0/24
93.152.212.0/23
93.152.220.0/24
93.152.224.0/24
94.26.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:59:0c:92:3a:58:ef:46:14:69:85:ee:34:b6:d2:29:5c:77:
60:63:1b:e5:95:05:be:c2:77:5a:ea:8f:e3:16:4f:6b:ac:b9:
c4:b8:d4:b8:d7:4a:21:f6:e7:6b:be:af:45:cb:3f:2d:96:cd:
13:36:29:b6:11:48:9d:60:76:61:47:12:6b:19:17:c3:8d:9d:
82:b8:62:df:4f:dd:25:51:07:74:01:8b:06:aa:9b:4b:bd:11:
91:b6:ea:d8:51:af:d2:f7:79:a3:a6:f8:30:ba:04:7e:d5:f6:
df:14:ca:35:10:ac:36:70:03:4b:39:33:a9:c5:55:69:b4:21:
07:a5:0d:28:dc:67:94:5e:a8:e0:f6:70:a5:4a:6d:7d:ae:c8:
4b:13:06:16:f7:6c:de:9b:5b:33:bd:e6:dc:5b:bb:82:c1:1e:
22:53:c1:82:55:aa:49:65:f1:48:1d:37:0e:2a:d9:bf:48:78:
e7:4d:46:30:1b:75:86:2c:b4:24:f5:73:68:b7:83:c9:b8:cf:
36:2a:bf:08:59:79:5a:ce:7e:40:36:22:9c:f6:7d:9d:cf:aa:
75:01:5a:0b:88:a6:71:00:f5:64:61:33:5b:2e:a1:be:df:3f:
d5:de:2f:6a:73:1d:1e:ab:a4:c1:b7:4e:04:b5:d9:6c:67:68:
ee:1b:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:44:33 2026 by rpki-client