Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/lrLT0MTm0sVXoP_chnt_YcYvk94.roa
File: lrLT0MTm0sVXoP_chnt_YcYvk94.roa (raw, json)
Hash identifier: bRz5jjXaw5R9jnyeOoeN7YsZBbwWfb9gDd+EwEhENhU=
Subject key identifier: 96:B2:D3:D0:C4:E6:D2:C5:57:A0:FF:DC:86:7B:7F:61:C6:2F:93:DE
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A13EE5A2F8F4F463901CE11173938B9DFB
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/lrLT0MTm0sVXoP_chnt_YcYvk94.roa
Signing time: Thu 15 Oct 2026 09:29:59 +0000
ROA not before: Thu 15 Oct 2026 09:29:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20055
IP address blocks: 9.155.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:e5:a2:f8:f4:f4:63:90:1c:e1:11:73:93:8b:9d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Oct 15 09:29:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96b2d3d0c4e6d2c557a0ffdc867b7f61c62f93de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:db:bd:e9:77:6e:a0:30:e9:6c:6c:74:e2:
67:e1:3a:72:c9:b8:d7:b3:d6:54:34:42:20:b4:b6:
6f:29:3a:84:90:42:88:52:de:a9:f4:64:ee:1e:76:
d0:ed:94:cd:9a:b1:56:f5:7e:89:83:21:f9:f4:3f:
92:46:c6:a8:e1:25:17:16:cd:f0:f5:33:ea:52:f8:
66:5f:9e:4a:b3:c8:c7:fb:1d:cb:99:18:1d:0d:46:
3c:18:07:c2:a2:3f:de:b2:aa:54:d2:26:64:d2:a0:
19:ac:15:b3:c3:0a:86:70:4a:bb:3b:ef:1b:4f:cf:
a3:88:15:ad:8f:02:f7:91:11:7e:a7:e2:9e:15:9f:
be:dd:22:d3:34:97:b6:b7:86:c8:c1:45:c8:2b:e8:
81:33:87:e2:8d:70:aa:3b:b2:1c:e8:04:bb:c1:9f:
d0:d3:b2:38:9d:f5:2d:65:d3:5a:66:ba:32:0a:2c:
3d:e7:bc:90:ab:62:19:df:a4:c0:bd:e3:2e:da:8f:
8c:bd:1a:e8:53:3b:ed:7a:90:92:87:92:5f:11:8c:
d5:30:b6:6b:95:0c:72:ca:1c:f7:52:6d:99:83:c6:
f4:c4:fb:78:f6:77:2e:d3:4d:67:9c:43:f1:32:51:
04:73:d7:35:d2:25:12:24:6b:cd:87:9f:e3:f8:ad:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:D3:D0:C4:E6:D2:C5:57:A0:FF:DC:86:7B:7F:61:C6:2F:93:DE
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/lrLT0MTm0sVXoP_chnt_YcYvk94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.155.192.0/18
Signature Algorithm: sha256WithRSAEncryption
55:fb:ad:7a:d1:be:10:fe:44:25:60:30:55:01:ac:79:fd:fc:
f8:b1:49:60:d6:17:d7:82:4a:02:ef:7d:10:2e:a5:c8:f6:6f:
3a:d0:b6:4a:0b:68:8a:9b:f8:eb:7e:24:74:95:d3:7f:8e:83:
61:b9:cc:c6:b7:e7:6c:3e:8b:89:b8:7e:b3:2a:4d:d9:8f:ea:
a2:12:4d:23:2f:df:c0:16:2f:a5:85:6d:d7:b5:4c:e9:33:ae:
4c:66:77:84:e5:d6:dd:16:51:b7:3e:cf:bf:05:02:27:5e:8c:
bf:e8:5c:13:7b:7b:b4:80:af:18:a4:de:67:56:a4:c1:51:2e:
18:df:2a:38:bd:7e:f2:1f:d2:17:9a:e5:d6:9a:cd:0b:48:9f:
22:10:f1:4f:9d:b3:65:c1:3a:fe:c0:91:b7:1c:f0:ee:4e:1d:
1d:32:64:f8:d3:38:3c:1b:3a:12:3d:5a:aa:7d:b1:8a:a5:15:
d9:81:60:01:67:43:f5:71:c0:10:8d:f6:c7:36:4c:57:4e:02:
5b:61:65:80:25:1e:80:99:28:61:9e:54:d1:de:f7:18:63:b1:
83:3f:84:dd:4e:c3:1b:97:33:9f:83:92:2a:f3:b0:f8:de:db:
83:53:76:75:d2:ae:2c:98:ad:7d:85:bc:92:36:6f:34:64:4d:
fe:6b:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:18 2026 by rpki-client