Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L0kIU6hcT8KaNaIqaU7zV2MgwYA.roa
File: L0kIU6hcT8KaNaIqaU7zV2MgwYA.roa (raw, json)
Hash identifier: 2KX4Dvz8Sb6o6SiebMUMg7SdDt1AxEd+qQLcSKQIzp8=
Subject key identifier: 2F:49:08:53:A8:5C:4F:C2:9A:35:A2:2A:69:4E:F3:57:63:20:C1:80
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F8A3853E2FB9B22ED169EECB9BDD53FF6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L0kIU6hcT8KaNaIqaU7zV2MgwYA.roa
Signing time: Wed 22 Jul 2026 14:26:15 +0000
ROA not before: Wed 22 Jul 2026 14:26:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:38:53:e2:fb:9b:22:ed:16:9e:ec:b9:bd:d5:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 22 14:26:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f490853a85c4fc29a35a22a694ef3576320c180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:27:ad:d3:ac:e4:b7:3e:db:87:b7:29:26:
fd:62:ff:8f:6d:fb:de:7e:75:c2:d0:6e:ff:f1:0b:
ef:ea:b1:8d:92:8b:3e:27:fe:d9:e8:be:47:5b:20:
37:e7:35:a0:73:4e:b0:44:8e:75:0b:23:ef:30:24:
f9:00:f4:f1:24:55:da:15:2e:d5:2a:bd:f9:21:62:
09:f0:2d:0b:4f:86:5e:b2:1d:49:61:84:06:7e:e4:
70:a5:d7:b2:c0:59:31:45:fb:60:a6:83:bd:1d:d8:
75:25:6f:51:57:c0:32:a9:6c:d8:7d:93:cd:79:a3:
b2:8e:58:a1:b6:f5:a3:a0:80:ab:ff:45:7d:4b:ec:
e2:e8:b5:dc:52:39:d0:b6:70:00:a6:82:2c:a2:ca:
9c:59:77:4b:fd:61:ac:91:72:5e:a3:61:ff:34:81:
08:3d:87:6a:99:b8:e3:73:ae:d5:ba:42:4e:f7:be:
65:51:c4:fc:1e:32:3a:24:a7:15:3c:1c:e5:0e:45:
65:83:9f:43:47:28:0e:ce:0a:45:36:48:29:cc:ef:
2f:41:c7:36:79:6a:e8:f9:5c:94:2b:eb:b3:cd:86:
d8:76:e6:28:2d:8e:76:46:4f:90:d3:87:f6:0d:f9:
54:52:c6:07:15:74:99:47:75:eb:97:c8:91:33:14:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:08:53:A8:5C:4F:C2:9A:35:A2:2A:69:4E:F3:57:63:20:C1:80
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L0kIU6hcT8KaNaIqaU7zV2MgwYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.67.117.0/24
89.40.161.0/24
185.180.145.0/24
195.138.103.0/24
195.138.111.0/24
195.138.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:64:9d:2d:30:b3:c4:fc:87:9a:50:21:6a:68:80:f4:39:36:
52:a2:15:d8:d7:49:f1:9d:9e:cf:b0:32:a9:41:35:50:d2:24:
53:44:a5:0e:21:4f:86:aa:fa:54:ea:81:1d:cf:7b:b0:75:a7:
5d:e2:3e:b1:36:4c:fc:7a:6c:45:ec:64:67:3a:11:05:ff:03:
e1:f6:97:f6:54:65:33:5c:8d:e2:9c:19:99:60:9b:96:da:7e:
6a:ef:67:5a:e7:a3:24:2e:0c:79:ba:14:78:d8:52:8e:80:f4:
d6:b0:5d:f7:eb:2a:c1:ac:cb:15:18:04:5b:f1:3e:e7:e3:30:
3b:93:de:1c:a1:aa:a1:9a:31:be:9a:f4:4b:97:c9:98:b9:b5:
35:c8:2a:93:d2:19:75:7c:a4:66:28:75:7e:f0:fc:24:62:f9:
48:59:8c:b6:67:ab:03:90:98:68:ff:c3:c5:a7:48:c9:62:a7:
34:80:21:90:7c:a0:c7:dc:7d:50:17:98:06:49:ef:b9:dd:44:
48:5f:fa:9f:38:d3:81:8e:ad:21:ef:70:25:73:75:8e:97:c4:
10:36:ef:2b:34:55:d1:cc:0f:fa:be:48:bc:3a:5b:ec:7c:a3:
64:cb:46:d0:28:27:cf:48:5b:13:60:3e:cb:12:f0:4e:85:3d:
e6:5e:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:39 2026 by rpki-client