Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/lTSu-_goZ6WOGMk5fQuX5HNBsEk.roa
File: lTSu-_goZ6WOGMk5fQuX5HNBsEk.roa (raw, json)
Hash identifier: 6W6cMWiv5hRgx8grAeA4pofmiH98gBs3rUiuBjlvWwo=
Subject key identifier: 95:34:AE:FB:F8:28:67:A5:8E:18:C9:39:7D:0B:97:E4:73:41:B0:49
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F6A60F38DA6CCED1BEBD4A96BA444F8B9
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/lTSu-_goZ6WOGMk5fQuX5HNBsEk.roa
Signing time: Thu 16 Jul 2026 10:02:46 +0000
ROA not before: Thu 16 Jul 2026 10:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29522
IP address blocks: 91.198.146.0/24 maxlen: 24
91.225.28.0/22 maxlen: 24
91.225.31.0/24 maxlen: 24
94.152.0.0/16 maxlen: 24
94.152.32.0/19 maxlen: 19
94.152.176.0/21 maxlen: 21
94.152.184.0/21 maxlen: 21
94.152.205.0/24 maxlen: 24
94.152.216.0/21 maxlen: 21
94.152.224.0/21 maxlen: 21
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
185.11.100.0/22 maxlen: 24
185.84.136.0/23 maxlen: 24
185.140.120.0/22 maxlen: 24
193.218.154.0/23 maxlen: 24
194.60.251.0/24 maxlen: 24
194.169.227.0/24 maxlen: 24
195.62.12.0/23 maxlen: 24
195.149.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:60:f3:8d:a6:cc:ed:1b:eb:d4:a9:6b:a4:44:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 16 10:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9534aefbf82867a58e18c9397d0b97e47341b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:9c:3f:f8:37:b2:32:b4:19:c8:25:54:59:
4e:91:8d:b7:11:34:04:c3:92:0c:d3:6a:73:30:67:
76:9a:bc:60:c1:29:64:99:85:e5:db:9b:ee:f7:a2:
d9:8d:d7:40:99:1b:49:bd:08:18:c0:81:62:65:88:
ff:3c:bf:e8:20:80:7e:6e:6e:66:ed:77:e8:d0:a6:
17:a1:c4:ed:bb:9c:85:31:5d:2b:1e:65:3f:16:a2:
dd:c7:c2:8e:08:3c:66:b3:12:2f:30:c1:df:c9:2c:
0c:fa:2e:91:c4:e0:95:ff:8d:aa:a3:75:f1:19:2a:
82:9b:59:bc:5d:43:dd:c3:8f:30:36:bf:fe:9f:a4:
3e:18:3d:cb:8e:7b:8b:b5:0f:a1:e8:f0:07:62:d3:
db:42:0b:eb:dc:ba:75:c4:7f:46:1b:1f:45:5c:7c:
5c:10:5f:d2:b4:87:02:14:ee:7c:39:77:79:cd:e6:
13:62:74:6f:17:cf:d5:46:56:18:1f:0e:54:48:2f:
12:39:32:14:46:ea:e9:b7:60:a0:b4:f2:f2:6d:6c:
fa:a2:08:5b:5d:67:e0:a5:81:28:f2:f5:9c:12:53:
33:ef:d3:dd:19:f5:02:64:b7:dd:fc:75:00:d1:a6:
fd:cf:b5:2e:5f:7f:23:6a:8f:27:94:93:d7:41:47:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:AE:FB:F8:28:67:A5:8E:18:C9:39:7D:0B:97:E4:73:41:B0:49
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/lTSu-_goZ6WOGMk5fQuX5HNBsEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.225.28.0/22
94.152.0.0/16
185.11.100.0/22
185.84.136.0/23
185.140.120.0/22
193.218.154.0/23
194.60.251.0/24
194.169.227.0/24
195.62.12.0/23
195.149.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:8f:b6:67:13:6e:7b:fd:11:50:61:1c:27:f9:01:81:c5:7e:
b6:52:ca:66:7e:64:c7:a3:26:98:44:0f:96:47:b5:a5:a7:7b:
c8:fd:2f:d4:5b:cd:c6:5b:3b:8b:58:d0:0f:e0:29:e9:07:eb:
f3:23:7b:b4:08:21:7e:90:3c:32:8e:88:65:bf:8f:62:1e:f6:
c6:ff:f5:37:4b:0b:62:36:5c:d4:6b:66:1e:fa:bd:fc:ef:c9:
b2:21:ef:25:6d:1b:ca:29:5e:a4:61:b1:fb:be:0b:90:26:39:
81:2b:e5:27:f2:ed:64:de:7e:18:ba:1d:a3:36:33:52:8e:80:
24:b7:91:d8:1a:12:52:de:49:72:42:a6:68:df:8f:4d:8f:6d:
b7:65:ef:db:3a:cb:58:a6:ef:9f:d9:e2:9a:9c:eb:66:57:f4:
6d:7e:6e:79:07:28:13:6a:7c:6b:6d:73:5a:98:2e:90:c3:5d:
61:ef:65:4a:75:77:b2:7b:f7:8e:2a:91:29:83:61:cf:6c:96:
c9:84:ac:b8:88:ae:4a:95:e2:4c:17:e2:6a:9c:c8:25:f5:ef:
f3:e4:5e:ad:1c:f8:51:7d:44:35:07:48:8d:73:72:cb:dd:75:
a6:a2:45:24:20:d9:3c:21:5a:56:9b:a8:47:38:e4:84:85:d5:
af:46:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:12 2026 by rpki-client