Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/LSLbnDZiHhCOrT_yK0lWxWhtaL4.roa
File: LSLbnDZiHhCOrT_yK0lWxWhtaL4.roa (raw, json)
Hash identifier: pYOcAInwoaBdBqwdnOl2LKnyq1LEUHJTYWGU6e5q7Sk=
Subject key identifier: 2D:22:DB:9C:36:62:1E:10:8E:AD:3F:F2:2B:49:56:C5:68:6D:68:BE
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01A15A3AA0F3730DD3AB315E38742F9C55C1
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/LSLbnDZiHhCOrT_yK0lWxWhtaL4.roa
Signing time: Tue 20 Oct 2026 16:52:34 +0000
ROA not before: Tue 20 Oct 2026 16:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 185.218.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:3a:a0:f3:73:0d:d3:ab:31:5e:38:74:2f:9c:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Oct 20 16:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d22db9c36621e108ead3ff22b4956c5686d68be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:d6:c1:36:37:06:12:ca:59:82:c4:f4:a0:
15:8d:02:c3:f8:0c:1c:61:aa:ce:25:42:88:fd:a8:
2e:93:29:7c:d8:a7:76:59:74:cb:3c:09:6a:31:c7:
00:ff:57:0e:a7:e2:93:16:bd:3e:c1:78:af:c9:a1:
fd:18:71:81:45:c2:0e:68:45:3b:d6:47:a7:3c:34:
7d:36:03:ed:b7:e3:c4:6d:08:98:b2:52:d8:a8:48:
b0:56:8a:8a:5f:d6:63:0b:a9:3c:60:54:38:ed:f6:
ce:d1:be:25:49:7e:55:08:31:60:f8:e7:c3:a1:ef:
5e:96:c9:98:36:a9:95:e6:7e:0c:bd:69:57:d1:62:
ea:d3:8e:9c:96:7b:6c:bc:88:11:91:17:4e:17:78:
b1:49:15:f0:5b:5f:8c:2d:18:17:24:dd:f5:f0:20:
7d:44:04:08:44:7e:d3:f6:82:02:c8:c8:e2:f5:77:
b5:b2:2a:49:a5:34:72:9e:44:64:d2:da:52:14:79:
79:da:63:86:48:4d:c9:32:72:6d:5b:f1:26:e7:2a:
c3:24:38:06:ef:93:86:4a:fc:9b:22:07:5a:df:68:
89:8b:d8:cd:f9:c3:b1:4b:e1:de:e1:de:1d:92:71:
85:c5:3e:9e:3f:48:65:6e:c5:9c:ac:a1:81:23:57:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:DB:9C:36:62:1E:10:8E:AD:3F:F2:2B:49:56:C5:68:6D:68:BE
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/LSLbnDZiHhCOrT_yK0lWxWhtaL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:23:35:c0:42:dc:bd:a0:18:b8:ac:b2:83:66:77:5b:68:c5:
34:f9:fa:e5:b5:de:4d:e7:d6:66:77:ac:9e:1c:b7:3a:12:62:
8a:8e:29:31:8c:2d:79:40:89:bd:80:7a:e2:60:43:c1:3e:d1:
b2:0e:8f:42:84:18:cf:1b:76:22:e1:49:56:87:f2:90:42:a9:
76:94:2d:7d:5b:dc:c8:de:e9:2d:b0:f5:33:f6:e2:5b:17:e5:
fe:8d:39:f5:18:6e:e0:31:09:b5:10:1d:ad:19:78:5f:2d:21:
b7:6b:e0:4e:ab:af:dc:d0:d2:45:9c:fe:01:14:2a:91:9f:bc:
f6:80:a2:e3:3e:49:8f:d2:00:bd:26:a5:4f:24:d9:41:b6:04:
46:ca:a6:e5:20:f8:37:e4:12:92:1c:f1:07:21:76:b6:22:50:
08:6d:58:00:aa:1d:42:b6:72:08:05:45:24:e7:d4:de:57:33:
54:67:8e:2f:00:ad:aa:3c:93:f5:1a:f3:58:7a:f0:b9:4f:f8:
79:96:12:1b:65:3d:cc:62:59:ab:cd:d5:d7:2c:e1:36:c9:52:
38:19:4b:61:c1:01:bf:31:31:89:62:3a:d4:2a:28:98:99:36:
66:e1:c2:2a:91:05:4a:9e:9e:8c:ff:14:b4:73:c1:e1:17:0c:
13:2e:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:18:09 2026 by rpki-client