Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l_tgLDCNZrHRnjXcJzOzh9Ra7zU.roa
File: l_tgLDCNZrHRnjXcJzOzh9Ra7zU.roa (raw, json)
Hash identifier: WLF0gi26G4abXssIlgwPYxZ0fPh4vIY0Whtl0Wq+kAc=
Subject key identifier: 97:FB:60:2C:30:8D:66:B1:D1:9E:35:DC:27:33:B3:87:D4:5A:EF:35
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 01A15A753AA6F66755A78789432A23DEA443
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l_tgLDCNZrHRnjXcJzOzh9Ra7zU.roa
Signing time: Tue 20 Oct 2026 17:56:34 +0000
ROA not before: Tue 20 Oct 2026 17:56:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58000
IP address blocks: 91.232.118.0/24 maxlen: 24
91.237.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:75:3a:a6:f6:67:55:a7:87:89:43:2a:23:de:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Oct 20 17:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97fb602c308d66b1d19e35dc2733b387d45aef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:2e:d3:82:83:e5:f9:9c:7d:8e:d7:1d:64:
de:da:ed:26:26:b9:e0:2f:27:e1:d5:8d:08:9e:d5:
0d:0d:e4:43:4f:38:76:0d:b6:89:fe:12:16:8e:df:
fd:58:30:7f:26:3e:90:3b:54:80:66:2b:0b:97:e8:
61:ab:fa:9a:ec:75:ee:37:31:75:bc:5d:5c:7d:5d:
5e:e9:87:73:f2:5c:8f:98:40:ba:bd:52:da:3d:27:
f0:8e:79:4f:b8:e7:6e:85:95:50:26:c5:88:3a:0d:
a0:56:98:0c:4a:ea:6c:7d:35:08:dd:0b:5f:2a:e7:
c3:ee:31:43:5c:25:73:83:fe:ec:a5:a9:4d:16:79:
08:2f:05:28:db:2c:f5:ab:af:40:97:d6:38:75:c4:
89:e7:88:52:34:8a:ef:08:8e:3d:d7:36:16:d8:97:
fe:45:f9:7e:e5:03:d1:b0:2f:b2:5a:88:f4:6a:e8:
eb:83:a5:f7:fb:a7:c6:b7:5b:3f:15:6c:da:a1:ea:
6b:7f:d4:75:3f:a9:4e:2c:83:10:7e:e1:75:cd:02:
7c:c7:8d:fb:96:a4:e3:a1:04:42:3a:ba:07:0d:e8:
d5:48:00:76:1a:e2:a0:c1:61:b4:eb:1d:7f:f8:9a:
00:03:54:5e:79:89:4a:86:37:f6:a9:4b:5c:37:3e:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:60:2C:30:8D:66:B1:D1:9E:35:DC:27:33:B3:87:D4:5A:EF:35
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/l_tgLDCNZrHRnjXcJzOzh9Ra7zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.118.0/24
91.237.182.0/23
Signature Algorithm: sha256WithRSAEncryption
62:72:bd:cd:a1:0f:e3:1e:c7:ba:b2:5e:d6:96:74:47:66:89:
20:07:50:71:62:9a:7c:93:6c:df:76:b1:90:7d:73:c0:bc:6c:
63:96:e1:af:81:2f:85:70:72:5b:11:60:25:bb:a4:04:5d:e9:
8e:40:99:8e:28:76:9d:d1:60:43:40:8f:f7:46:3e:13:9b:cd:
36:c6:e3:db:37:b1:4f:7e:29:26:7b:07:3d:af:9e:96:43:cf:
63:7a:fd:8e:81:3d:8c:c4:f1:1f:fb:30:cc:bb:23:a6:3c:3b:
5a:30:60:9b:bd:9e:90:32:b1:6d:c7:93:25:cf:55:f3:94:72:
70:e5:72:d2:f2:79:cc:74:d0:c5:d9:a9:b4:6a:19:06:32:3a:
00:ab:bf:95:72:d2:47:f9:c3:b8:83:e7:81:5a:be:b5:b6:6f:
66:a4:03:08:6d:1f:76:24:4b:30:56:04:a4:44:94:6b:49:8f:
6b:e1:7a:df:72:05:07:85:0c:ef:b9:43:2a:34:72:90:45:93:
59:23:69:37:de:27:2a:c5:12:11:01:2a:08:4e:8d:bb:b1:da:
f8:8b:5d:3e:b8:c6:86:ae:d2:43:0f:d3:25:54:cd:1e:bc:1f:
0f:ff:91:e8:05:96:ea:51:9c:5f:db:93:e1:2a:9e:8d:e4:0c:
d0:6c:b5:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFadTqm9mdVp4eJQyoj3qRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjYxMDIwMTc1NjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2ZiNjAyYzMwOGQ2NmIxZDE5ZTM1ZGMyNzMzYjM4N2Q0NWFlZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKUu04KD5fmcfY7XHWTe2u0mJrng
Lyfh1Y0IntUNDeRDTzh2DbaJ/hIWjt/9WDB/Jj6QO1SAZisLl+hhq/qa7HXuNzF1
vF1cfV1e6Ydz8lyPmEC6vVLaPSfwjnlPuOduhZVQJsWIOg2gVpgMSupsfTUI3Qtf
KufD7jFDXCVzg/7spalNFnkILwUo2yz1q69Al9Y4dcSJ54hSNIrvCI491zYW2Jf+
Rfl+5QPRsC+yWoj0aujrg6X3+6fGt1s/FWzaoeprf9R1P6lOLIMQfuF1zQJ8x437
lqTjoQRCOroHDejVSAB2GuKgwWG06x1/+JoAA1ReeYlKhjf2qUtcNz7scQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJf7YCwwjWax0Z413Cczs4fUWu81MB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvbF90Z0xEQ05ackhSbmpYY0p6T3poOVJhN3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+h2AwQB
W+22MA0GCSqGSIb3DQEBCwUAA4IBAQBicr3NoQ/jHse6sl7WlnRHZokgB1BxYpp8
k2zfdrGQfXPAvGxjluGvgS+FcHJbEWAlu6QEXemOQJmOKHad0WBDQI/3Rj4Tm802
xuPbN7FPfikmewc9r56WQ89jev2OgT2MxPEf+zDMuyOmPDtaMGCbvZ6QMrFtx5Ml
z1XzlHJw5XLS8nnMdNDF2am0ahkGMjoAq7+VctJH+cO4g+eBWr61tm9mpAMIbR92
JEswVgSkRJRrSY9r4XrfcgUHhQzvuUMqNHKQRZNZI2k33icqxRIRASoITo27sdr4
i10+uMaGrtJDD9MlVM0evB8P/5HoBZbqUZxf25PhKp6N5AzQbLX7
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:34 2026 by rpki-client