Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa
File: l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa (raw, json)
Hash identifier: LTxCKcgSLvCmIp5fk5kJlSt7sEk0QGEUSZibVkJctUo=
Subject key identifier: 97:48:64:3C:18:8A:11:6B:43:AC:BC:D6:B7:DA:F3:79:82:E1:61:D9
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A10B9992EBAE7BDAF078F92F93B451E8BF
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa
Signing time: Mon 05 Oct 2026 10:26:16 +0000
ROA not before: Mon 05 Oct 2026 10:26:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13119
IP address blocks: 80.94.16.0/20 maxlen: 24
109.69.88.0/21 maxlen: 24
212.14.48.0/20 maxlen: 24
213.155.160.0/19 maxlen: 19
2001:4c5c::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:99:92:eb:ae:7b:da:f0:78:f9:2f:93:b4:51:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Oct 5 10:26:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9748643c188a116b43acbcd6b7daf37982e161d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:fb:5c:b6:07:19:18:19:e5:80:b9:d7:92:
f0:b6:fe:c4:06:dc:f9:15:b2:97:ae:a9:01:c9:49:
ca:3a:9f:8b:c2:9b:8f:15:93:0e:84:06:8b:20:61:
6f:8c:f2:a2:e6:5c:09:ce:ae:ca:ca:1c:72:17:c3:
bf:d4:d3:b6:e6:60:59:22:d8:28:0b:8e:a6:ba:ee:
9e:e2:42:ca:91:d3:c2:f0:69:2c:79:78:bc:6a:87:
3a:b5:38:e3:3b:75:73:3a:2b:a8:92:e5:91:82:18:
20:1b:98:08:f3:ff:ca:a2:ec:af:f2:13:c2:54:48:
59:85:14:dc:1b:54:49:54:d8:a4:83:9d:c7:e6:6f:
ab:a4:22:b6:5b:f0:33:ac:0d:43:e5:7e:0e:45:a7:
f5:eb:88:27:6c:37:00:27:2a:6a:e0:e7:e9:c9:ad:
c1:fb:09:8a:3a:10:4e:94:d0:fe:4e:45:11:65:ab:
37:cf:44:11:80:20:78:b7:08:fe:7b:98:83:7a:55:
b1:9e:44:34:f9:63:09:9e:68:d4:cc:ae:f6:1c:e8:
a2:74:f4:07:02:1a:9a:9e:4c:1d:61:08:77:35:38:
48:68:91:0a:0b:82:53:aa:9e:d0:70:76:83:bb:a6:
ed:93:2a:74:ce:4b:9c:a0:c3:be:b5:35:57:e9:63:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:64:3C:18:8A:11:6B:43:AC:BC:D6:B7:DA:F3:79:82:E1:61:D9
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.16.0/20
109.69.88.0/21
212.14.48.0/20
213.155.160.0/19
IPv6:
2001:4c5c::/30
Signature Algorithm: sha256WithRSAEncryption
2c:7f:2a:b8:af:f0:89:45:c2:36:1a:64:57:b0:00:a5:d0:96:
21:7c:50:58:b2:de:dc:d2:37:a7:5d:a7:23:b9:9c:6d:a7:07:
b8:92:1a:74:e3:38:81:f5:96:19:67:63:2a:bc:3a:bd:77:6d:
d5:0c:2f:7d:dd:b7:63:a9:60:be:30:14:5a:22:ff:0f:bf:ca:
f5:c2:8f:ea:8d:24:58:0a:70:6a:18:83:76:88:4a:70:eb:af:
6d:97:51:37:4c:b4:f3:32:51:7f:96:41:22:bb:b8:3e:6e:82:
26:56:ab:a0:50:30:40:27:01:76:b5:a8:db:2c:21:d2:16:ed:
83:a8:25:d7:bf:fb:11:01:45:a2:62:d3:47:9c:fa:24:35:5b:
a5:92:97:f3:75:73:ed:0a:ed:74:50:8a:b5:20:ed:a4:a9:fc:
d0:fd:3e:e1:ef:27:3a:fe:16:0a:97:d3:fd:84:ec:d8:1d:88:
cc:74:cb:60:90:f6:62:3a:3a:88:c9:1b:79:3c:ed:9a:4a:47:
20:f8:5a:52:73:52:f6:8a:3a:4e:3d:a4:29:87:d2:c8:b5:42:
05:75:38:2f:ef:18:d4:58:fb:37:c6:2a:8f:7f:ee:5d:fb:aa:
f4:ae:d8:9b:b4:68:90:8e:c2:d4:b5:d2:33:9d:27:9f:71:69:
a0:f5:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:08 2026 by rpki-client