Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LRaeHNtB0ElfLljCKAx9g2pFnpw.roa
File: LRaeHNtB0ElfLljCKAx9g2pFnpw.roa (raw, json)
Hash identifier: 8tcdJXbLR+0KK/7iBkLbuJZs8v5m9p4cNZn8ylhWQQk=
Subject key identifier: 2D:16:9E:1C:DB:41:D0:49:5F:2E:58:C2:28:0C:7D:83:6A:45:9E:9C
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A1A1D9399CC5454261CEE1D48B9CC7FEBF
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LRaeHNtB0ElfLljCKAx9g2pFnpw.roa
Signing time: Tue 03 Nov 2026 14:38:50 +0000
ROA not before: Tue 03 Nov 2026 14:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209087
IP address blocks: 5.154.50.0/23 maxlen: 24
5.154.54.0/23 maxlen: 24
5.154.84.0/23 maxlen: 24
5.154.96.0/23 maxlen: 24
84.236.248.0/23 maxlen: 24
88.148.76.0/23 maxlen: 24
88.148.96.0/22 maxlen: 24
94.24.32.0/23 maxlen: 24
94.24.46.0/23 maxlen: 24
109.167.120.0/22 maxlen: 24
217.61.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:d9:39:9c:c5:45:42:61:ce:e1:d4:8b:9c:c7:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 3 14:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d169e1cdb41d0495f2e58c2280c7d836a459e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:68:06:81:48:28:b6:b9:ec:72:cf:c7:5b:
f5:7e:fb:a5:87:6a:66:56:94:e8:7e:98:70:68:1b:
c4:c7:95:06:9f:0b:29:87:86:6b:df:5a:b7:c3:0a:
4a:2a:2d:fd:78:37:34:3d:bf:69:58:7c:ab:46:de:
a8:4b:c5:4d:29:c8:c0:2f:2e:a6:54:75:27:9c:69:
7e:af:98:71:07:24:2e:89:0a:a8:07:36:03:33:23:
7e:d7:23:cc:ea:1a:2e:3b:41:d1:95:d5:84:35:3f:
96:d1:2d:d7:2f:d0:4e:a2:f0:f8:b3:5f:35:6f:86:
bf:81:f9:64:08:30:a8:e1:61:a1:51:99:ba:fb:fd:
8a:19:4b:5a:9f:21:c3:dc:a7:0b:fb:ee:17:a0:d2:
1b:c3:c0:2f:c5:83:5d:73:23:14:dd:22:51:50:87:
63:ed:36:ff:e2:f0:27:cf:0b:d2:29:25:27:3b:2c:
41:68:d6:d4:d4:66:d8:7b:5c:b1:c9:a4:d6:b5:34:
56:df:30:09:9e:61:37:f0:ab:ac:33:0f:e2:9a:1b:
2c:03:bb:0b:f8:71:e4:fc:5a:0a:ca:49:69:f8:3c:
a7:78:f9:9c:09:21:51:00:81:88:25:4b:28:70:d9:
5a:a9:f2:ac:cd:5b:0a:d7:da:f7:27:83:4d:3b:bb:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:9E:1C:DB:41:D0:49:5F:2E:58:C2:28:0C:7D:83:6A:45:9E:9C
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LRaeHNtB0ElfLljCKAx9g2pFnpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.50.0/23
5.154.54.0/23
5.154.84.0/23
5.154.96.0/23
84.236.248.0/23
88.148.76.0/23
88.148.96.0/22
94.24.32.0/23
94.24.46.0/23
109.167.120.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
10:b7:c0:67:b0:03:11:65:74:7b:08:89:eb:a1:0a:03:69:86:
c0:1d:f5:ee:3f:8f:ba:5f:7e:b6:8c:61:83:32:33:ad:db:bd:
52:9e:15:3a:22:de:e1:11:3c:57:18:cd:6c:aa:1f:db:88:a2:
e0:a3:92:f6:9c:3e:7a:2f:ee:76:01:bd:6c:d1:67:92:07:c4:
e1:93:5e:f2:c3:24:ed:81:f1:30:ec:00:0e:3a:a2:bd:9e:27:
89:db:95:1f:fc:0f:23:f1:88:e5:4f:c3:e0:ae:7b:d4:25:8d:
ac:62:e6:db:62:10:0b:17:b6:92:9f:eb:d9:f6:d1:69:44:db:
83:ca:9b:c9:59:f3:f2:39:f9:53:2c:3c:32:42:bb:b0:0d:e4:
50:fe:d0:25:d9:5d:a5:1b:55:ae:fe:74:e7:a4:1b:0d:81:b7:
66:8e:a0:68:d9:ce:75:c9:5a:d6:01:23:c1:ab:c8:b3:cf:2b:
96:02:1a:c6:fd:08:3b:2d:0e:e7:8f:05:09:e7:a1:f6:b8:58:
37:31:37:13:b7:3b:da:98:73:af:90:df:0d:36:c9:57:23:c8:
7a:33:27:6e:fa:f4:2c:8b:dd:e5:89:b0:9a:ff:7c:38:a2:99:
6c:c2:5b:6f:c6:11:5d:bb:46:03:59:31:f6:02:42:3a:4e:88:
68:c3:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:09 2026 by rpki-client