Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa
File: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (raw, json)
Hash identifier: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=
Subject key identifier: 94:B3:A7:D5:AF:EE:FD:80:B7:BC:9F:CB:15:0C:D8:50:96:33:E5:BC
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019ED99D5817F361D5B321F60D1CB963314F
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa
Signing time: Thu 18 Jun 2026 07:23:48 +0000
ROA not before: Thu 18 Jun 2026 07:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39442
IP address blocks: 62.122.88.0/21 maxlen: 21
92.39.104.0/21 maxlen: 21
178.212.80.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.54.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.14.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.18.0/24 maxlen: 24
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
213.234.23.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/21 maxlen: 21
217.149.176.0/22 maxlen: 22
217.149.176.0/24 maxlen: 24
217.149.177.0/24 maxlen: 24
217.149.178.0/24 maxlen: 24
217.149.179.0/24 maxlen: 24
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
2a01:6aa0::/32 maxlen: 32
2a0b:580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:9d:58:17:f3:61:d5:b3:21:f6:0d:1c:b9:63:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jun 18 07:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b3a7d5afeefd80b7bc9fcb150cd8509633e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:0f:12:68:e7:c4:71:28:93:84:dd:b9:c5:
94:bb:8a:7b:5f:4c:2f:4f:11:b3:71:5e:f9:1d:d1:
ca:ee:d8:28:25:4c:86:f2:88:fa:1b:fe:7e:d0:6b:
bc:f0:3c:0e:ba:9b:04:a0:53:19:77:8f:4c:82:c0:
3d:5c:da:51:fa:19:44:6d:a1:2a:a7:5d:35:48:bd:
e7:1c:70:59:a9:c5:04:58:42:71:bc:b6:d4:3b:4e:
00:d4:59:83:0f:eb:d0:f6:16:56:7a:25:5d:e6:a8:
88:7a:16:2a:b8:89:60:df:5a:2d:9c:34:9c:4e:97:
19:6f:a1:e9:97:4a:80:9e:e2:bf:cb:6a:85:ab:7b:
81:f3:d4:3a:c0:1d:3e:b3:9c:38:77:9d:6b:fd:ab:
74:ef:2d:85:45:e1:b9:10:10:9a:a7:62:16:22:42:
76:1f:bb:b5:d4:68:a4:e6:fe:45:5d:bd:95:d7:c9:
6f:b6:74:fb:d6:07:93:d7:40:8c:e1:50:04:a6:58:
b8:85:16:60:d4:02:50:59:9d:fe:44:99:05:e7:e5:
59:28:1b:cb:85:81:a1:b2:6f:5c:11:86:99:26:55:
24:df:9c:b4:bb:ed:85:2f:44:25:a9:d4:f1:b0:4f:
1c:35:b1:8c:26:05:06:aa:e8:61:36:ee:2e:af:59:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:A7:D5:AF:EE:FD:80:B7:BC:9F:CB:15:0C:D8:50:96:33:E5:BC
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.88.0/21
92.39.104.0/21
178.212.80.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
IPv6:
2a01:6aa0::/32
2a0b:580::/32
Signature Algorithm: sha256WithRSAEncryption
65:e3:eb:99:2b:c9:13:b6:96:b7:18:b8:b6:bd:ed:0b:f2:21:
7c:f7:4f:a4:58:7e:1c:c0:3e:8b:99:ac:7f:8f:e0:22:10:d2:
11:76:13:98:e8:1e:07:bd:ca:17:1e:2b:85:83:f2:36:17:42:
3d:b8:1d:90:60:ca:78:11:84:73:81:9d:01:ea:c7:fb:a2:2c:
14:01:ba:ac:dd:ce:89:3e:29:93:3b:20:e3:3e:0a:ec:40:d3:
c7:54:84:6c:1f:bf:23:d0:a2:d3:0f:b1:41:3e:19:1e:5f:f8:
1f:51:e4:f0:10:cb:e7:ed:75:d4:86:8a:b1:e3:bb:72:c1:30:
a3:0d:b3:d7:b4:91:6f:a9:b8:80:b1:8a:0e:6f:12:69:6d:fc:
5e:41:81:45:85:53:ba:06:c1:39:01:b8:d9:0d:4b:0f:57:db:
36:ad:47:41:d8:96:62:26:5d:0e:32:18:88:d9:32:8c:d8:d9:
63:c3:aa:b3:8b:d3:fa:1b:c9:ad:37:75:cd:5c:cc:01:94:75:
9e:d5:82:9f:0e:01:a2:01:b7:cd:6c:6d:70:c2:48:73:5d:46:
5a:fd:2e:8d:7b:d7:a4:ef:b9:ec:e7:33:ec:69:16:a2:02:df:
76:08:f7:da:be:37:ad:3f:08:b0:09:79:1b:0d:8b:be:d0:0e:
ed:81:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:51 2026 by rpki-client