Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/lX8ec-kHtYQc2eYxJReNoElbToQ.roa
File: lX8ec-kHtYQc2eYxJReNoElbToQ.roa (raw, json)
Hash identifier: 6QTzsEZgHNywYoD3IZ6Z740+HwWFg/g5EfVeUxTu8gQ=
Subject key identifier: 95:7F:1E:73:E9:07:B5:84:1C:D9:E6:31:25:17:8D:A0:49:5B:4E:84
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019F4841D1FD195374A562853DAA78BD3C3F
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/lX8ec-kHtYQc2eYxJReNoElbToQ.roa
Signing time: Thu 09 Jul 2026 19:01:40 +0000
ROA not before: Thu 09 Jul 2026 19:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15874
IP address blocks: 37.130.0.0/18 maxlen: 24
37.130.49.0/24 maxlen: 24
37.130.55.0/24 maxlen: 24
46.174.232.0/22 maxlen: 22
46.174.238.0/24 maxlen: 24
91.231.24.0/24 maxlen: 24
91.231.25.0/24 maxlen: 24
91.231.26.0/24 maxlen: 24
91.231.27.0/24 maxlen: 24
2a0c:1680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:41:d1:fd:19:53:74:a5:62:85:3d:aa:78:bd:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jul 9 19:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957f1e73e907b5841cd9e63125178da0495b4e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:d3:4b:61:14:67:d0:6d:21:57:30:d3:4e:
60:3e:f5:d5:1b:83:a4:05:e6:e0:5a:25:a2:de:c9:
2c:cf:65:29:6e:40:a0:dd:61:9d:a6:a1:a6:cd:5d:
50:1a:2d:a6:0f:5f:37:bf:44:e3:4e:90:a6:e6:be:
d9:97:31:91:d5:4d:74:1d:bf:7b:66:17:9f:2f:1f:
58:56:1e:79:cf:59:33:8e:30:43:99:a6:a3:f0:7a:
0e:58:28:3b:09:4a:7a:49:81:c1:eb:b2:0f:4b:a1:
d7:2f:ba:5e:d3:a7:f4:5b:d2:22:7e:23:f4:db:1a:
8b:0a:03:8f:be:4a:35:39:e5:75:0b:5f:79:0d:a7:
d6:31:c4:4a:a4:8c:33:49:59:a5:5c:dd:32:2d:c9:
3b:21:9b:57:6f:b2:03:05:25:6c:d2:6c:59:9c:8d:
a7:27:1a:2c:d4:cb:25:8d:d3:e0:14:8f:77:bb:35:
5c:9e:a6:24:35:f6:01:c3:e1:f5:b2:72:ba:7b:45:
4b:2f:b0:aa:0e:a8:ad:f7:bd:f5:e6:df:2e:b6:d0:
fb:83:96:e7:1c:14:d5:b4:f2:13:13:f0:2d:ac:a6:
3e:70:6a:75:0d:57:f6:1d:ad:41:67:a9:47:00:b8:
93:f0:46:1a:30:39:c3:7b:59:91:cb:86:1b:0c:4b:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:1E:73:E9:07:B5:84:1C:D9:E6:31:25:17:8D:A0:49:5B:4E:84
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/lX8ec-kHtYQc2eYxJReNoElbToQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.0.0/18
46.174.232.0/22
46.174.238.0/24
91.231.24.0/22
IPv6:
2a0c:1680::/29
Signature Algorithm: sha256WithRSAEncryption
42:31:40:f0:63:26:93:c2:1c:bb:c7:7f:d5:a2:04:d5:db:ea:
27:e7:42:07:e3:46:77:cd:a9:8e:5f:30:9b:d9:4c:ce:14:5b:
0e:24:a9:c9:a7:f3:70:25:d5:61:b3:09:6b:20:a1:9a:d3:04:
bd:05:1e:2a:5d:d0:29:d5:27:a0:4a:c1:b6:68:4e:b8:5a:66:
83:1a:01:8d:90:b8:f8:ad:ce:f7:73:83:57:df:93:d0:32:bf:
eb:6b:f6:dd:74:7f:fa:6c:5c:00:0e:4c:33:62:17:c0:6a:db:
54:19:3b:6f:bb:b1:a4:41:ea:14:96:4b:04:de:54:7a:3c:6f:
b0:30:ac:0b:b6:e8:2e:05:62:3f:26:3b:9f:bb:db:4f:5c:0b:
0e:de:b0:1f:8d:79:94:48:bb:dc:d9:a7:db:4d:4b:47:84:d9:
25:29:1f:34:25:14:81:7f:0e:ab:4f:61:88:46:ca:1f:20:75:
57:e6:a9:b9:4d:60:15:18:64:34:7f:d1:a0:c5:25:c0:e7:d9:
11:d0:46:48:82:03:30:dc:db:87:f7:3a:73:bd:94:98:52:fb:
6b:8f:1d:5f:a6:10:d0:be:5c:49:14:d4:3c:7d:21:95:a0:f3:
89:37:f0:67:60:f2:47:f9:82:9d:1f:20:24:03:1e:36:2b:64:
cc:be:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:23 2026 by rpki-client