Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lTN9WM_3kAIwHlpaUspavss4Il0.roa
File: lTN9WM_3kAIwHlpaUspavss4Il0.roa (raw, json)
Hash identifier: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=
Subject key identifier: 95:33:7D:58:CF:F7:90:02:30:1E:5A:5A:52:CA:5A:BE:CB:38:22:5D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019D0D8B0CA266DB8D219E43AF31E6FC87D5
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lTN9WM_3kAIwHlpaUspavss4Il0.roa
Signing time: Fri 20 Mar 2026 23:18:29 +0000
ROA not before: Fri 20 Mar 2026 23:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 94.124.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:8b:0c:a2:66:db:8d:21:9e:43:af:31:e6:fc:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Mar 20 23:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95337d58cff79002301e5a5a52ca5abecb38225d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:4d:f6:4b:dc:bd:2b:82:05:18:44:2d:6f:
bf:e4:a4:ae:17:9b:ee:07:2e:70:ec:ab:92:1f:8f:
ec:b1:52:c0:60:55:cc:63:1f:6d:ff:89:01:cb:4f:
04:12:f7:fd:a0:34:6c:ed:41:ce:d4:d1:d1:8d:2a:
37:93:10:4c:3f:42:74:48:dd:9b:46:57:41:b5:e1:
00:a5:b2:2a:ae:d3:58:59:13:b6:4f:33:f5:b7:ab:
b4:c5:2f:7c:20:86:69:99:0a:46:7d:39:72:08:aa:
53:70:30:16:98:e5:9c:3e:81:6c:e3:99:76:28:f2:
ab:aa:0a:5a:98:a9:79:16:18:17:2a:d8:85:fa:e9:
ea:bd:cc:0f:30:f7:06:9b:04:97:d9:22:03:24:dd:
88:a9:d7:68:fc:79:0a:28:e5:82:7b:78:f3:1b:96:
b0:62:0d:9f:a9:4c:96:42:51:33:31:dc:46:23:2a:
8d:c9:64:cd:d7:18:ea:46:6d:cc:fa:5e:62:a7:e3:
6b:b8:a5:07:2e:ee:da:90:f8:3d:7c:99:48:fd:22:
59:21:4e:8f:8d:93:95:3f:b7:fe:64:d9:44:67:65:
8b:88:bf:e4:38:94:fd:53:a2:24:c9:8f:3a:50:f8:
26:62:1b:9e:54:b6:53:9c:a3:7d:57:2e:e8:48:c2:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:33:7D:58:CF:F7:90:02:30:1E:5A:5A:52:CA:5A:BE:CB:38:22:5D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/lTN9WM_3kAIwHlpaUspavss4Il0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.161.0/24
Signature Algorithm: sha256WithRSAEncryption
38:70:12:94:3f:9d:02:0d:8a:1b:26:ac:9b:46:22:76:38:27:
73:2a:cf:3e:05:22:59:4a:d9:ec:56:c9:f9:2d:95:7e:c2:aa:
99:2b:c4:0b:31:f4:ed:a1:90:81:7a:74:7e:7d:89:08:e6:0f:
0e:77:5c:5f:b2:4b:d9:7a:92:a4:4b:4c:17:30:88:e8:01:f7:
c8:14:11:2e:0d:d9:3d:69:f2:d8:db:7d:f2:fd:f3:ef:c9:39:
70:35:6f:b3:6c:75:76:a4:4c:15:48:47:67:ff:7f:9c:73:67:
ba:04:ca:e6:76:c4:ee:7f:d5:26:d2:aa:d6:b5:ed:4e:92:1b:
89:f1:d6:cc:c9:86:83:cc:34:4c:e3:01:48:cc:4f:35:aa:0e:
80:ba:bd:ae:fe:19:51:e0:55:40:89:d3:3e:7c:6b:5e:db:d1:
af:41:8f:15:34:53:a2:49:7a:fb:d5:60:de:39:08:a0:59:c5:
1f:82:40:95:20:c0:d5:5e:51:ff:8b:c1:e4:d4:14:61:e2:77:
63:7f:35:6b:ec:b3:68:8a:3e:81:ff:d5:09:5d:8e:1a:fa:83:
de:d8:1a:d4:33:b3:8d:6b:d2:04:f4:e7:24:d3:ca:70:4b:6f:
f2:86:a5:4f:15:d6:bd:56:dc:d6:49:fb:27:e4:83:e2:d4:3e:
6d:1c:d4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:06 2026 by rpki-client