Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lFp7Fo2jJL6dFM0MjlrCsSCp1p0.roa
File: lFp7Fo2jJL6dFM0MjlrCsSCp1p0.roa (raw, json)
Hash identifier: Jg+wjf0G8PZSFOHoE+eIwF0CxePTt3ZrAIqwfeBmq6s=
Subject key identifier: 94:5A:7B:16:8D:A3:24:BE:9D:14:CD:0C:8E:5A:C2:B1:20:A9:D6:9D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019CDD7CD51288A32E12E635075E34CACF34
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lFp7Fo2jJL6dFM0MjlrCsSCp1p0.roa
Signing time: Wed 11 Mar 2026 15:21:11 +0000
ROA not before: Wed 11 Mar 2026 15:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:7c:d5:12:88:a3:2e:12:e6:35:07:5e:34:ca:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 11 15:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=945a7b168da324be9d14cd0c8e5ac2b120a9d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:a1:f2:b5:a3:c0:a6:a4:50:a8:4b:e7:c7:
00:48:ea:6d:4e:56:45:e5:1d:a4:2d:dd:1e:70:49:
32:7a:e6:80:58:be:23:12:54:4c:8d:25:51:a1:3c:
94:c4:1b:59:71:46:6d:43:db:2e:fd:b1:19:ea:ce:
55:47:31:20:a2:e9:de:11:39:eb:5d:6c:72:99:ce:
84:c3:86:41:be:a7:47:15:8f:6b:ae:bf:15:fc:79:
fe:ec:8f:5e:6c:ba:c5:21:95:b5:57:4d:21:7d:99:
3a:96:09:a4:ac:a3:6e:6d:c2:b5:28:7f:3d:08:cc:
44:fa:7e:12:00:a6:4e:cc:01:e3:16:24:cf:c1:cc:
71:3d:69:ec:08:1d:fd:55:e2:06:94:2b:7e:1a:ba:
ba:55:a9:8e:65:cc:93:ea:c4:41:e7:e2:89:6d:ba:
54:33:45:ec:ee:dd:23:a2:df:1d:f6:0e:57:f8:c0:
4f:e0:88:4a:6c:3a:6d:be:ad:d7:14:64:8f:36:9e:
44:80:c2:6b:c8:ae:e3:00:6d:ec:a7:d3:1d:da:a3:
9b:af:ed:71:ae:b1:99:44:fb:2e:a4:f3:c2:6e:52:
74:b9:78:cc:e5:c6:ad:60:5c:5a:15:68:cf:71:3e:
66:53:cd:90:e6:7a:23:fc:f5:be:3b:d8:5c:1d:36:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:7B:16:8D:A3:24:BE:9D:14:CD:0C:8E:5A:C2:B1:20:A9:D6:9D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lFp7Fo2jJL6dFM0MjlrCsSCp1p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.121.4.0/23
85.121.149.0/24
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:87:46:fe:d2:d6:33:0a:46:ec:25:c2:f7:96:17:1f:7d:a5:
49:86:0a:2e:02:8c:23:6b:f9:b3:7e:48:11:71:a2:00:8f:93:
2a:db:d7:70:0c:81:8d:5f:31:2d:7a:84:5e:e8:4a:92:4b:45:
33:ac:ec:04:3b:96:6c:bb:14:53:2d:ca:12:8c:0b:2e:65:26:
07:b4:f8:2b:ce:5f:58:76:d9:5a:e5:39:50:fa:cc:cb:26:ae:
9a:04:cf:ff:b1:ae:bc:d2:b7:f8:fc:22:2e:2c:0e:e5:f3:02:
ea:af:fd:78:29:00:1c:99:48:e0:a5:29:2c:d4:6f:0d:90:d8:
66:93:37:71:f0:61:61:92:58:6b:a7:ed:15:94:27:9b:87:07:
50:d2:77:8f:a6:db:a4:c3:3a:9e:b6:81:b8:e9:d0:e1:39:1e:
dd:3b:40:29:39:ea:f7:8d:c0:f0:27:a7:49:79:80:8e:51:7c:
ca:73:bc:df:04:27:44:c2:a9:91:c0:03:e8:a1:4f:06:e5:92:
b4:53:04:56:12:55:53:24:a6:d2:ff:dd:82:e5:21:4e:3b:0e:
bf:27:d0:89:69:24:8b:42:4b:00:81:c4:a8:98:4c:4b:2d:eb:
b0:58:de:d1:e0:7c:7f:20:37:5c:4c:3e:9d:db:bb:ee:3c:a4:
a1:8d:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:06 2026 by rpki-client