Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa
File: LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa (raw, json)
Hash identifier: Gs3AunGylHB59F42LYhpjb1I/VnyDGsD26/q43JcIi0=
Subject key identifier: 2E:B1:39:92:E3:F1:9F:63:AD:5E:3F:72:E1:FA:37:04:10:49:98:F8
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019F1E9E603E7E558D2CC3D1692A78B3A310
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa
Signing time: Wed 01 Jul 2026 16:58:43 +0000
ROA not before: Wed 01 Jul 2026 16:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29491
IP address blocks: 95.111.154.0/23 maxlen: 24
95.111.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:9e:60:3e:7e:55:8d:2c:c3:d1:69:2a:78:b3:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jul 1 16:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb13992e3f19f63ad5e3f72e1fa3704104998f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:59:af:db:15:9c:97:51:33:df:b5:19:ec:
9c:f0:74:02:39:27:fa:f9:69:e0:e7:77:96:2a:44:
a4:24:f6:ce:c1:70:11:e8:e1:5b:8c:6f:d5:87:28:
44:96:f1:9c:61:20:78:6d:a3:21:2f:e3:bc:58:83:
8a:6c:c8:3e:0f:33:04:4e:29:d1:22:50:0e:37:2b:
6d:c6:a5:e5:5a:82:62:d9:3a:ac:74:d1:75:c2:23:
db:eb:45:bf:23:c2:44:10:2f:4d:d8:5e:1d:88:3b:
77:20:a0:cb:70:70:6f:2c:06:69:06:c5:05:5e:0c:
06:ab:a8:07:4a:62:ec:23:41:8f:93:8d:88:a1:51:
99:9f:6b:ef:7a:6c:a0:9c:b7:66:67:c8:06:70:2d:
79:bd:db:3c:12:2d:3d:5c:82:ac:35:3f:68:cf:72:
c2:80:0a:5d:8b:11:08:71:47:e8:5e:6f:76:21:b1:
99:28:32:3f:a5:a1:28:16:cd:f1:69:6c:29:47:c3:
6f:6b:dd:48:bd:5a:92:a9:84:c6:d7:b4:06:d2:8e:
29:65:3b:f6:38:be:e0:23:65:72:e9:88:77:5f:4b:
c9:e5:8e:aa:61:04:71:c6:ac:c9:c7:7f:53:2d:c1:
16:34:43:3d:75:c1:aa:74:c7:c2:06:99:77:ef:e4:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:39:92:E3:F1:9F:63:AD:5E:3F:72:E1:FA:37:04:10:49:98:F8
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.154.0/23
95.111.157.0/24
Signature Algorithm: sha256WithRSAEncryption
65:60:e6:e3:35:0b:94:4e:f5:ea:d3:7d:9b:b0:bf:5c:58:2c:
9f:1d:12:93:48:16:c6:93:c2:dc:f9:aa:1d:07:70:fc:3d:b1:
d5:35:3c:1f:1a:07:a5:2c:db:b4:02:c8:17:f8:4b:c6:c5:a0:
64:5f:13:05:43:f7:1b:4d:d9:06:61:0b:e0:be:91:e3:d8:07:
8c:f5:2c:8d:cc:c9:38:a9:9e:9e:8a:90:05:73:de:b3:42:5b:
73:15:c7:eb:8a:a3:80:cc:ee:d1:a2:dc:ff:f3:81:4b:4a:19:
3b:39:9c:53:5e:4f:87:55:6b:dd:87:a8:c2:9e:2c:6e:d7:c4:
f4:f8:07:19:86:4d:a9:c2:0e:1c:01:96:06:20:49:bf:39:da:
67:cd:71:59:da:17:bc:d8:2d:06:a4:bd:73:27:60:cc:4a:6e:
cd:fa:f4:b4:ce:ea:c7:7b:d4:c6:c9:02:4e:21:15:0f:6a:da:
0b:09:91:5a:a6:a7:cb:1d:24:c3:ad:0d:8c:de:3d:64:df:b5:
22:fe:fe:25:b4:f0:6b:6a:17:ac:5e:06:49:2f:9b:63:07:f9:
9f:16:83:6d:54:50:74:38:00:5c:f7:c7:98:49:4d:d8:6a:56:
50:d2:24:dc:72:24:1e:a3:f4:08:ea:4c:57:98:21:15:e0:fc:
63:b8:bf:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8enmA+flWNLMPRaSp4s6MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwNzAxMTY1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWIxMzk5MmUzZjE5ZjYzYWQ1ZTNmNzJlMWZhMzcwNDEwNDk5OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVZr9sVnJdRM9+1Geyc8HQCOSf6
+Wng53eWKkSkJPbOwXAR6OFbjG/VhyhElvGcYSB4baMhL+O8WIOKbMg+DzMETinR
IlAONyttxqXlWoJi2TqsdNF1wiPb60W/I8JEEC9N2F4diDt3IKDLcHBvLAZpBsUF
XgwGq6gHSmLsI0GPk42IoVGZn2vvemygnLdmZ8gGcC15vds8Ei09XIKsNT9oz3LC
gApdixEIcUfoXm92IbGZKDI/paEoFs3xaWwpR8Nva91IvVqSqYTG17QG0o4pZTv2
OL7gI2Vy6Yh3X0vJ5Y6qYQRxxqzJx39TLcEWNEM9dcGqdMfCBpl37+Qr4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC6xOZLj8Z9jrV4/cuH6NwQQSZj4MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvTHJFNWt1UHhuMk90WGo5eTRmbzNCQkJKbVBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX2+aAwQA
X2+dMA0GCSqGSIb3DQEBCwUAA4IBAQBlYObjNQuUTvXq032bsL9cWCyfHRKTSBbG
k8Lc+aodB3D8PbHVNTwfGgelLNu0AsgX+EvGxaBkXxMFQ/cbTdkGYQvgvpHj2AeM
9SyNzMk4qZ6eipAFc96zQltzFcfriqOAzO7Rotz/84FLShk7OZxTXk+HVWvdh6jC
nixu18T0+AcZhk2pwg4cAZYGIEm/OdpnzXFZ2he82C0GpL1zJ2DMSm7N+vS0zurH
e9TGyQJOIRUPatoLCZFapqfLHSTDrQ2M3j1k37Ui/v4ltPBrahesXgZJL5tjB/mf
FoNtVFB0OABc98eYSU3YalZQ0iTcciQeo/QI6kxXmCEV4PxjuL//
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:40 2026 by rpki-client