Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/lKE1YhYljilXzVN1CJKmawj9GS0.roa
File: lKE1YhYljilXzVN1CJKmawj9GS0.roa (raw, json)
Hash identifier: zT54sF+hrkCx758/vhS5vDBHWfzA8aPoGQA76kgbIv8=
Subject key identifier: 94:A1:35:62:16:25:8E:29:57:CD:53:75:08:92:A6:6B:08:FD:19:2D
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01A15A4689A33AB13D1F45DC24573E355A73
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/lKE1YhYljilXzVN1CJKmawj9GS0.roa
Signing time: Tue 20 Oct 2026 17:05:34 +0000
ROA not before: Tue 20 Oct 2026 17:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14445
IP address blocks: 46.183.18.0/24 maxlen: 24
80.73.247.0/24 maxlen: 24
2001:3900::/29 maxlen: 29
2001:3900:7a3f::/48 maxlen: 48
2a11:2800:4388::/48 maxlen: 48
2a11:2800:4894::/48 maxlen: 48
2a11:2800:82e9::/48 maxlen: 48
2a11:2800:8a74::/48 maxlen: 48
2a11:2800:97cb::/48 maxlen: 48
2a11:2800:f54b::/48 maxlen: 48
2a11:2801:35d3::/48 maxlen: 48
2a11:2801:4824::/48 maxlen: 48
2a11:2801:4ac9::/48 maxlen: 48
2a11:2801:5a27::/48 maxlen: 48
2a11:2801:7266::/48 maxlen: 48
2a11:2801:99bf::/48 maxlen: 48
2a11:2801:9d77::/48 maxlen: 48
2a11:2801:c2c1::/48 maxlen: 48
2a11:2801:cb2a::/48 maxlen: 48
2a11:2802:15df::/48 maxlen: 48
2a11:2802:4337::/48 maxlen: 48
2a11:2802:5eac::/48 maxlen: 48
2a11:2802:7c4a::/48 maxlen: 48
2a11:2802:a5c4::/48 maxlen: 48
2a11:2802:ac1e::/48 maxlen: 48
2a11:2803:40e4::/48 maxlen: 48
2a11:2803:852c::/48 maxlen: 48
2a11:2803:cec2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:46:89:a3:3a:b1:3d:1f:45:dc:24:57:3e:35:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Oct 20 17:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94a1356216258e2957cd53750892a66b08fd192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:9a:10:9c:b0:0e:42:6b:78:7d:0d:bd:80:
6f:f8:5a:ff:ba:5b:1e:08:f3:4c:fc:d6:28:68:20:
46:23:c9:98:79:c8:66:8b:ca:8c:e5:20:b6:0c:fd:
ec:22:14:7e:4b:f3:9a:bb:39:01:b4:51:67:12:52:
38:ce:cd:7d:ca:d6:3e:e6:a0:d4:31:b4:05:3b:a4:
8f:be:ee:dd:7d:7b:df:ff:f8:9d:96:82:4c:8e:00:
f2:06:5a:74:18:36:9a:5b:e0:cc:80:32:aa:92:ac:
88:b3:c7:5e:ca:38:be:62:9a:5a:e5:20:68:0b:31:
1c:60:51:9a:64:f9:bb:84:ad:ce:ab:34:cf:e6:38:
b9:4a:45:e9:03:c0:20:7f:89:d0:6b:bf:05:a9:a0:
d3:5e:5c:d6:23:f1:ec:d3:6b:0c:0e:38:c2:29:15:
5a:6d:b7:76:f5:a2:7c:17:04:97:46:01:ea:b4:1a:
ff:6c:a1:ee:9f:20:70:72:9a:de:89:c0:f3:d8:67:
92:81:a9:ce:44:bc:29:c6:dd:01:ac:41:c8:12:ad:
ee:ff:65:2f:c7:b2:88:f1:17:26:40:52:7a:9d:b3:
da:12:d1:56:0c:cb:c8:34:3d:1c:e3:4c:fc:e8:96:
bf:82:19:d1:d7:23:13:8c:4e:17:5c:70:4b:82:db:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:35:62:16:25:8E:29:57:CD:53:75:08:92:A6:6B:08:FD:19:2D
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/lKE1YhYljilXzVN1CJKmawj9GS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.18.0/24
80.73.247.0/24
IPv6:
2001:3900::/29
2a11:2800:4388::/48
2a11:2800:4894::/48
2a11:2800:82e9::/48
2a11:2800:8a74::/48
2a11:2800:97cb::/48
2a11:2800:f54b::/48
2a11:2801:35d3::/48
2a11:2801:4824::/48
2a11:2801:4ac9::/48
2a11:2801:5a27::/48
2a11:2801:7266::/48
2a11:2801:99bf::/48
2a11:2801:9d77::/48
2a11:2801:c2c1::/48
2a11:2801:cb2a::/48
2a11:2802:15df::/48
2a11:2802:4337::/48
2a11:2802:5eac::/48
2a11:2802:7c4a::/48
2a11:2802:a5c4::/48
2a11:2802:ac1e::/48
2a11:2803:40e4::/48
2a11:2803:852c::/48
2a11:2803:cec2::/48
Signature Algorithm: sha256WithRSAEncryption
96:2c:18:46:8b:48:48:de:21:3e:05:3b:82:6a:50:77:0a:36:
cf:f3:37:60:a9:8a:82:f1:a7:1d:23:46:7d:67:7a:ae:57:3d:
f5:11:6b:57:5c:70:9a:9c:0d:28:c2:8d:ab:f4:b9:bb:d3:fe:
e4:19:0c:0b:cc:58:ce:67:a0:80:63:4b:85:44:4b:14:ae:12:
51:90:ed:62:f7:8b:77:9a:c3:87:48:f5:c6:17:45:3a:6b:03:
e2:fe:4f:b4:d6:f8:76:b2:1c:6d:0c:bc:67:dc:8d:d4:c2:71:
ef:7d:83:62:a7:5d:3e:32:50:8f:74:88:62:b3:ba:b6:5d:ec:
cd:c9:71:4e:4b:c9:4b:8a:13:62:60:60:40:7e:fc:1c:d0:15:
5d:b6:9f:57:72:66:92:b1:52:4d:81:fe:26:e0:b6:1f:5e:e5:
48:de:aa:e1:15:f4:22:aa:b9:a7:87:28:2f:12:79:29:d0:2a:
aa:31:3c:bc:07:ad:40:84:9a:78:b7:20:df:a7:ca:ea:03:18:
09:12:3c:07:e0:45:16:f2:49:ff:ba:9a:8d:2a:2a:a5:9d:97:
1e:c7:11:02:ec:e3:c3:cc:bf:01:af:00:e4:23:89:b6:e5:17:
d8:13:e8:12:68:74:79:28:f5:3f:ce:45:65:ba:1c:47:6f:12:
78:e0:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:29:09 2026 by rpki-client