Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/lSP-VE6ZpUhQ0fpyjmaFSousw7w.roa
File: lSP-VE6ZpUhQ0fpyjmaFSousw7w.roa (raw, json)
Hash identifier: stENRIJIZstQG2r1u9iHsN0f+4TocsjH/LS9Iqd5Ye0=
Subject key identifier: 95:23:FE:54:4E:99:A5:48:50:D1:FA:72:8E:66:85:4A:8B:AC:C3:BC
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 019F7FA42FA8AEA7B37F5DDF199067D4FA79
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/lSP-VE6ZpUhQ0fpyjmaFSousw7w.roa
Signing time: Mon 20 Jul 2026 13:08:14 +0000
ROA not before: Mon 20 Jul 2026 13:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48956
IP address blocks: 37.46.13.0/24 maxlen: 24
37.46.14.0/24 maxlen: 24
37.46.15.0/24 maxlen: 24
45.90.0.0/23 maxlen: 23
91.207.52.0/23 maxlen: 23
91.230.42.0/23 maxlen: 23
91.246.104.0/21 maxlen: 21
193.254.238.0/23 maxlen: 23
195.88.114.0/23 maxlen: 23
2a06:4640::/32 maxlen: 32
2a06:4641::/32 maxlen: 32
2a06:4642::/32 maxlen: 32
2a06:4646::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:a4:2f:a8:ae:a7:b3:7f:5d:df:19:90:67:d4:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Jul 20 13:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9523fe544e99a54850d1fa728e66854a8bacc3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:df:c1:81:17:ba:a4:d2:8c:3e:b8:e0:3a:
8d:ec:38:6b:70:0d:38:84:a4:43:ad:7d:b6:8e:d7:
8d:a5:8b:83:5d:c2:dc:b3:96:ab:20:cd:ff:46:d9:
dc:77:db:fa:c8:d2:a4:73:3d:02:2c:f6:24:c2:69:
11:1a:cd:6d:5b:08:b7:a6:55:ab:20:5a:92:54:ed:
6b:ce:87:3e:3d:b4:78:46:a3:2e:22:a1:79:89:d1:
82:e1:8d:26:a7:db:0d:ac:99:48:6c:43:85:ad:50:
1f:d2:88:c1:a0:55:a5:ff:31:15:54:c5:0a:e1:c4:
5d:7a:4e:48:cc:79:8c:63:d5:ea:d5:51:a9:f8:5f:
cf:32:d8:ad:a9:45:5c:b6:a3:17:7d:a5:34:58:4e:
cf:1f:57:4e:e9:e5:64:a1:72:2d:43:b2:62:1b:d0:
38:a0:88:52:c5:6b:f0:45:fa:9d:61:e3:22:2f:3a:
d2:65:d2:3a:c7:56:d8:22:64:36:72:2f:6b:1d:b5:
dd:55:97:73:f4:87:65:8d:96:c7:1b:4b:1d:37:45:
fc:be:53:b9:06:a3:a6:76:1d:40:a2:d4:fe:d0:85:
1d:db:45:36:1b:f9:60:6b:cb:a2:87:95:f6:c7:1a:
48:35:b6:db:04:3b:38:fa:ba:0a:d9:be:94:87:18:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:FE:54:4E:99:A5:48:50:D1:FA:72:8E:66:85:4A:8B:AC:C3:BC
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/lSP-VE6ZpUhQ0fpyjmaFSousw7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.13.0-37.46.15.255
45.90.0.0/23
91.207.52.0/23
91.230.42.0/23
91.246.104.0/21
193.254.238.0/23
195.88.114.0/23
IPv6:
2a06:4640::-2a06:4642:ffff:ffff:ffff:ffff:ffff:ffff
2a06:4646::/32
Signature Algorithm: sha256WithRSAEncryption
79:2e:4e:41:8e:7b:fb:58:ac:e4:a6:59:65:1f:01:35:6e:c4:
fc:18:56:c3:7b:e6:2f:76:49:44:6d:af:50:be:66:8c:a4:b7:
ec:cd:d4:bc:f0:a6:ab:ed:7f:fd:d8:85:98:00:8c:39:48:18:
78:9e:1e:e9:a8:fb:cb:81:0d:e6:d5:ce:31:8a:71:bf:fd:5d:
41:56:70:03:0d:ba:82:7a:8d:de:25:02:69:65:e0:93:5b:0e:
bd:f1:4b:09:f2:28:6f:4a:6c:53:70:f1:87:d9:7d:6e:e7:2a:
fa:7a:5f:d5:a2:a8:8c:39:53:57:ae:34:f6:dd:2b:7f:6a:d5:
6f:2b:fb:03:25:b9:73:0a:f9:22:e5:d6:bc:eb:b3:4f:2e:73:
b1:7a:d5:c3:0a:b0:a1:04:e0:7c:70:c1:54:11:83:0a:93:a5:
56:fe:90:bd:f5:db:71:dd:ef:c4:76:53:60:3f:a2:fc:6b:ec:
63:67:0e:fd:d3:06:78:ac:79:58:97:ec:ba:bf:c2:59:1c:27:
b4:be:45:91:27:b6:dc:52:62:59:f4:da:e7:57:de:e2:25:e9:
d5:8f:f9:29:25:22:dc:41:48:d4:db:c2:a5:e8:2f:03:5f:7b:
84:de:77:93:4d:88:4e:57:c5:03:c6:34:b1:77:cf:86:7c:76:
06:04:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:39 2026 by rpki-client