Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/LwfjyTO36GlsPX90a_WmuneM-vg.roa
File: LwfjyTO36GlsPX90a_WmuneM-vg.roa (raw, json)
Hash identifier: kXbJTv5q90lHqBXjs8BXY60/E5QG2DTkSk3xKpokHs0=
Subject key identifier: 2F:07:E3:C9:33:B7:E8:69:6C:3D:7F:74:6B:F5:A6:BA:77:8C:FA:F8
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 01A116AAFB19C7A58D76A0D6C0B07840836C
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/LwfjyTO36GlsPX90a_WmuneM-vg.roa
Signing time: Wed 07 Oct 2026 14:01:06 +0000
ROA not before: Wed 07 Oct 2026 14:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 87.236.178.0/24 maxlen: 24
194.46.32.0/24 maxlen: 24
217.179.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:fb:19:c7:a5:8d:76:a0:d6:c0:b0:78:40:83:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: Oct 7 14:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f07e3c933b7e8696c3d7f746bf5a6ba778cfaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:67:17:d8:7e:7d:0c:8c:88:9e:0d:b6:06:
55:f2:14:47:a6:51:e8:0b:c0:ba:ab:d9:ba:06:4f:
25:bf:21:d6:d3:be:bc:db:dd:ba:0e:a2:19:d0:a2:
e2:10:f6:09:91:7a:f9:ad:08:7b:f3:6b:14:2a:aa:
24:1f:63:58:6b:5a:05:34:ff:b4:12:19:14:a9:b0:
85:c1:22:8e:c8:e7:5f:21:b2:22:e4:92:5b:bd:54:
1d:fb:71:29:40:f2:de:b7:e1:82:de:c4:84:ad:a7:
0f:d6:9b:e5:cf:cf:cc:bb:c6:e7:24:f6:ea:5e:74:
50:4a:a0:ff:9d:74:c9:a8:70:3b:df:d1:96:66:09:
39:71:58:28:d8:02:70:94:04:17:eb:e5:77:e5:fc:
3e:29:52:8b:1a:b2:8e:d8:d6:c5:a0:ff:f7:73:85:
fe:bb:01:44:54:31:18:ce:6f:40:a1:91:d0:a8:b9:
d7:ad:42:16:ba:d6:1c:a7:46:07:eb:01:51:1b:64:
0f:c0:20:20:07:f2:69:a2:78:a8:c8:45:e9:76:5a:
65:cc:9c:be:ba:d7:9f:dd:95:8d:05:41:8a:fc:25:
e2:4f:35:f4:21:52:ca:aa:72:35:a9:70:81:2e:3a:
29:f5:5c:9a:15:c7:f1:72:11:d3:6a:5d:97:81:1a:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:E3:C9:33:B7:E8:69:6C:3D:7F:74:6B:F5:A6:BA:77:8C:FA:F8
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/LwfjyTO36GlsPX90a_WmuneM-vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.178.0/24
194.46.32.0/24
217.179.56.0/22
Signature Algorithm: sha256WithRSAEncryption
64:81:bf:6a:0f:74:4a:18:f1:a8:22:42:92:b6:9d:99:ea:ab:
77:ab:bf:c3:20:45:e6:95:d1:fe:79:e2:1a:04:40:55:43:0a:
b1:20:1b:44:41:1d:d5:6c:bd:43:fa:e6:8c:d1:32:2d:a6:11:
e1:47:d2:b4:1d:85:e5:21:98:9e:5b:b1:2f:a1:f9:9f:14:09:
59:f7:95:15:a7:70:2f:f8:90:84:80:9d:fd:3a:51:f5:86:47:
9f:2c:47:88:69:97:fe:92:0a:44:d8:53:d9:06:aa:08:d7:aa:
50:34:a6:a3:f1:25:ae:86:80:79:e4:5c:65:56:88:40:25:c0:
11:d8:18:cd:b2:d0:80:c5:d3:30:f8:4b:d9:64:ec:69:1b:16:
5b:49:f8:bd:32:c7:43:1c:cb:df:af:04:5f:c0:6e:ad:dc:18:
f9:c1:b6:cd:44:7f:8f:a8:1b:ab:9e:ae:c2:22:7a:4c:51:e5:
66:6b:dc:15:7d:59:b0:e7:b8:31:4e:27:30:b2:52:81:5e:d6:
d8:43:6e:78:d9:1d:11:aa:0b:bb:12:f8:44:59:31:cc:77:1d:
36:77:5b:53:4c:9d:de:4d:01:8b:b8:bc:73:c9:98:dc:03:0e:
97:56:55:ad:78:0f:e1:a2:de:85:58:30:39:de:d8:92:27:c4:
fd:a8:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:38:46 2026 by rpki-client