Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/lTeOVHsdxHYl83EtLLUCZPYWmcw.roa
File: lTeOVHsdxHYl83EtLLUCZPYWmcw.roa (raw, json)
Hash identifier: X7lBPJhBSCWsxS5TEyH3LBZWaqEarDMl83TKFDu1c5M=
Subject key identifier: 95:37:8E:54:7B:1D:C4:76:25:F3:71:2D:2C:B5:02:64:F6:16:99:CC
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019EFCF20E383E54CEF3ACB2C3CC76BA68ED
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/lTeOVHsdxHYl83EtLLUCZPYWmcw.roa
Signing time: Thu 25 Jun 2026 04:03:02 +0000
ROA not before: Thu 25 Jun 2026 04:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197968
IP address blocks: 82.115.54.0/23 maxlen: 24
91.147.109.0/24 maxlen: 24
109.175.175.0/24 maxlen: 24
109.175.225.0/24 maxlen: 24
212.108.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:0e:38:3e:54:ce:f3:ac:b2:c3:cc:76:ba:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jun 25 04:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95378e547b1dc47625f3712d2cb50264f61699cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:61:c2:df:88:70:49:d4:4a:e6:aa:d5:8c:
80:be:0b:a5:ee:3a:81:eb:2a:55:5e:74:a8:2d:07:
a3:ca:e5:dc:8b:c8:b3:b9:e5:ee:16:0e:ba:ef:ff:
14:47:f0:e6:86:72:e2:8d:fd:56:f1:5b:39:83:9e:
68:2b:c2:86:1a:65:c2:8b:ae:ab:5e:a2:39:84:15:
43:c6:9c:02:07:aa:d3:ae:26:18:e5:45:05:7b:47:
d3:d8:d7:8d:1c:06:99:e4:c9:53:2a:1c:6c:41:f8:
f4:c3:d7:e8:53:09:2c:e4:6b:4e:a8:7b:be:8e:91:
93:1d:bd:dc:a6:48:38:43:94:09:de:af:b4:ae:18:
5e:00:b8:70:36:72:ef:d7:a0:90:6c:5d:60:bd:fd:
8c:3a:fc:2a:87:ee:2b:f3:09:aa:66:bd:32:41:d7:
33:70:30:8b:81:6a:40:f3:02:ba:fc:85:97:d3:3c:
8b:cf:f5:0c:6e:70:99:82:c1:32:21:06:27:d9:90:
b5:dd:fd:5e:74:fc:32:ee:73:21:e6:81:04:75:fe:
0a:a5:25:41:7a:e2:07:f9:59:b7:e7:c7:86:7f:04:
45:71:4f:3d:47:f4:bc:9a:72:4e:78:4e:83:8d:53:
0e:23:ba:95:1f:30:ac:27:e6:56:b8:f5:a8:20:75:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:8E:54:7B:1D:C4:76:25:F3:71:2D:2C:B5:02:64:F6:16:99:CC
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/lTeOVHsdxHYl83EtLLUCZPYWmcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.54.0/23
91.147.109.0/24
109.175.175.0/24
109.175.225.0/24
212.108.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8d:69:65:ef:e6:69:bb:38:9d:81:ef:e8:cb:d8:56:6f:79:
60:da:f6:7b:c5:87:39:d8:74:9c:1d:7f:65:e3:f6:ae:74:e5:
97:67:84:ec:38:9f:fd:bf:c0:88:1c:5c:94:5c:2f:e7:fc:9a:
40:a3:bb:3d:0e:03:3d:4a:9f:89:eb:03:be:22:56:1c:10:74:
5d:03:86:bf:e6:19:2b:0c:5c:47:c0:21:d0:08:0d:89:af:aa:
86:98:38:1c:ec:ad:17:ab:d7:28:c3:0e:a6:9d:2b:a2:50:64:
d6:eb:b3:90:47:fc:40:7f:25:bf:6f:31:87:09:f6:01:0d:6e:
f1:c8:d8:56:ea:80:3f:17:27:4c:52:4a:ff:18:1b:8e:50:52:
ed:58:16:c9:2a:47:e6:c2:7f:21:1c:03:5c:d7:e1:b2:7c:51:
26:6a:5d:0a:04:e1:82:cc:a4:41:34:1f:25:75:3a:f9:a2:d8:
b5:2f:3f:b2:c4:8f:f2:8c:a0:ad:d0:80:15:f0:e0:c5:2f:dd:
72:2b:66:76:54:52:53:05:32:9f:53:8f:2b:97:c9:79:f1:92:
39:4e:a0:b5:e8:94:6f:f3:f1:67:ae:df:ca:8f:5b:07:d7:1d:
63:0e:ff:4b:07:f0:bb:47:10:8d:a1:8d:3c:97:07:04:b5:c3:
6c:a4:82:6d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ788g44PlTO86yyw8x2umjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi
MjRhZjcwHhcNMjYwNjI1MDQwMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTM3OGU1NDdiMWRjNDc2MjVmMzcxMmQyY2I1MDI2NGY2MTY5OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27hhwt+IcEnUSuaq1YyAvgul7jqB
6ypVXnSoLQejyuXci8izueXuFg667/8UR/DmhnLijf1W8Vs5g55oK8KGGmXCi66r
XqI5hBVDxpwCB6rTriYY5UUFe0fT2NeNHAaZ5MlTKhxsQfj0w9foUwks5GtOqHu+
jpGTHb3cpkg4Q5QJ3q+0rhheALhwNnLv16CQbF1gvf2MOvwqh+4r8wmqZr0yQdcz
cDCLgWpA8wK6/IWX0zyLz/UMbnCZgsEyIQYn2ZC13f1edPwy7nMh5oEEdf4KpSVB
euIH+Vm358eGfwRFcU89R/S8mnJOeE6DjVMOI7qVHzCsJ+ZWuPWoIHWJDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJU3jlR7HcR2JfNxLSy1AmT2FpnMMB8GA1UdIwQY
MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt
MTBiYjQ1NzlkNTI4LzEvbFRlT1ZIc2R4SFlsODNFdExMVUNaUFlXbWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4
LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUnM2AwQA
W5NtAwQAba+vAwQAba/hAwQA1GxWMA0GCSqGSIb3DQEBCwUAA4IBAQALjWll7+Zp
uzidge/oy9hWb3lg2vZ7xYc52HScHX9l4/audOWXZ4TsOJ/9v8CIHFyUXC/n/JpA
o7s9DgM9Sp+J6wO+IlYcEHRdA4a/5hkrDFxHwCHQCA2Jr6qGmDgc7K0Xq9coww6m
nSuiUGTW67OQR/xAfyW/bzGHCfYBDW7xyNhW6oA/FydMUkr/GBuOUFLtWBbJKkfm
wn8hHANc1+GyfFEmal0KBOGCzKRBNB8ldTr5oti1Lz+yxI/yjKCt0IAV8ODFL91y
K2Z2VFJTBTKfU48rl8l58ZI5TqC16JRv8/Fnrt/Kj1sH1x1jDv9LB/C7RxCNoY08
lwcEtcNspIJt
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:27 2026 by rpki-client