Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lHcFbBEwMo_FeFuxBIKhzxj0-w4.roa
File: lHcFbBEwMo_FeFuxBIKhzxj0-w4.roa (raw, json)
Hash identifier: w696kQt6/EIOgAowiWZL6u3Fv8g8ICi8wD55T8Nfv7Q=
Subject key identifier: 94:77:05:6C:11:30:32:8F:C5:78:5B:B1:04:82:A1:CF:18:F4:FB:0E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019F1D520C003EFFDDD6A4B9F6AED9AD9C6F
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lHcFbBEwMo_FeFuxBIKhzxj0-w4.roa
Signing time: Wed 01 Jul 2026 10:55:44 +0000
ROA not before: Wed 01 Jul 2026 10:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202557
IP address blocks: 31.145.140.0/24 maxlen: 24
84.44.33.0/24 maxlen: 24
84.44.70.0/24 maxlen: 24
212.98.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:52:0c:00:3e:ff:dd:d6:a4:b9:f6:ae:d9:ad:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jul 1 10:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9477056c1130328fc5785bb10482a1cf18f4fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:be:ab:84:35:b3:80:3f:4b:0a:f4:fd:82:
c6:aa:34:8e:79:72:ae:b2:33:ec:e8:13:e3:48:82:
e6:b0:f2:06:92:39:44:f8:80:34:84:83:5d:a1:5e:
0d:6a:53:6f:40:fd:63:a8:ff:2a:96:bc:38:78:e8:
53:b4:33:79:50:fe:05:fb:d6:46:38:2b:9b:9b:b2:
8b:df:26:31:c4:7d:53:49:a6:b9:1d:bb:ee:c7:06:
fc:d1:e5:6f:71:33:5c:e4:c6:ac:2d:38:3e:0e:0b:
19:ac:9f:24:3d:23:cb:58:12:79:df:5f:78:dd:46:
d7:e7:b9:69:a9:d4:b9:11:a2:38:dd:b7:6a:f9:ef:
24:00:02:32:69:16:47:09:c1:e3:e4:0e:de:65:ea:
64:07:60:b4:a1:1b:d7:ba:ba:fe:5d:ae:d4:27:6f:
3b:27:c1:f8:a5:32:84:5c:f1:82:89:d9:44:1c:30:
75:47:9d:91:6e:e7:4c:cc:b1:74:35:62:8c:d9:05:
97:bf:6a:57:a5:e3:a5:c9:f3:d4:93:75:5d:7c:67:
6a:98:c4:6c:63:2c:0f:96:af:7e:51:d8:9d:43:8c:
b0:71:92:de:1c:6f:f7:e5:e4:72:15:8b:d1:49:cf:
aa:89:f6:0c:a3:63:4e:f9:50:54:80:68:f0:5c:f6:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:05:6C:11:30:32:8F:C5:78:5B:B1:04:82:A1:CF:18:F4:FB:0E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/lHcFbBEwMo_FeFuxBIKhzxj0-w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.140.0/24
84.44.33.0/24
84.44.70.0/24
212.98.242.0/24
Signature Algorithm: sha256WithRSAEncryption
56:10:77:1b:0c:cf:8d:ce:c9:5a:86:f7:c9:13:6f:3d:01:57:
8b:98:91:51:31:df:8f:26:2c:f4:5f:08:9e:7d:cc:4c:db:90:
8f:1d:5b:3a:29:12:f0:15:e1:d9:ca:96:a0:d8:84:ee:92:93:
34:f0:cc:4a:d7:4f:0f:ed:6a:88:8d:d7:49:11:7a:84:07:21:
be:36:fb:91:03:84:fc:fe:17:61:b3:ec:2e:97:a2:b5:8d:6c:
5b:e1:cc:47:aa:0b:3b:5d:ab:c1:3a:59:a8:a2:52:a0:de:26:
dd:43:e4:ca:80:9a:23:38:ab:ed:dc:b8:09:91:ba:4d:66:6f:
29:96:33:4a:80:32:08:fe:c6:80:91:16:ea:8d:03:3b:f2:0f:
74:e8:b6:ac:1d:2b:60:eb:37:8b:2a:b3:98:7a:aa:04:fe:c2:
d5:e7:a5:e5:56:d1:dc:79:06:68:e5:2b:2f:e0:38:93:a5:71:
cf:a4:78:6f:ec:b5:bf:94:5c:ae:05:fd:af:09:56:34:e9:74:
06:51:f8:1b:bf:9c:d1:c6:7e:7d:88:97:79:13:32:fd:27:d8:
f5:e2:54:01:c8:3e:39:15:37:73:79:89:37:37:5b:60:d5:69:
d8:6a:96:c3:64:5c:cb:a6:c5:90:cc:3f:db:05:87:cf:b0:b6:
1a:12:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:02 2026 by rpki-client