Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lpkf5Y2iJ8smNFaBryEUAgYBJko.roa
File: lpkf5Y2iJ8smNFaBryEUAgYBJko.roa (raw, json)
Hash identifier: J4sTGIeoTZrh8kRT3oL6xp3qmvnzplCxLb5yyKsEGlU=
Subject key identifier: 96:99:1F:E5:8D:A2:27:CB:26:34:56:81:AF:21:14:02:06:01:26:4A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1D6B11CA1ED20D2BEB4B833CF1FCCAE44
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lpkf5Y2iJ8smNFaBryEUAgYBJko.roa
Signing time: Fri 13 Nov 2026 20:54:53 +0000
ROA not before: Fri 13 Nov 2026 20:54:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 9.247.52.0/24 maxlen: 24
9.247.64.0/24 maxlen: 24
9.247.86.0/24 maxlen: 24
9.247.92.0/24 maxlen: 24
9.247.136.0/24 maxlen: 24
9.247.164.0/24 maxlen: 24
9.247.169.0/24 maxlen: 24
9.247.178.0/24 maxlen: 24
9.247.221.0/24 maxlen: 24
9.247.239.0/24 maxlen: 24
9.247.245.0/24 maxlen: 24
9.247.253.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.221.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.125.208.0/24 maxlen: 24
89.125.235.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.215.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
162.35.231.0/24 maxlen: 24
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.45.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
185.193.100.0/24 maxlen: 24
185.193.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:b1:1c:a1:ed:20:d2:be:b4:b8:33:cf:1f:cc:ae:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 13 20:54:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96991fe58da227cb26345681af2114020601264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:e3:d6:88:54:60:68:9d:4e:8f:28:a7:5d:
80:73:e1:fd:75:0f:90:91:47:7b:3d:fa:a1:1f:02:
4e:fb:3d:b2:fd:fd:1d:31:95:05:f5:e7:b5:9a:3f:
90:1d:34:28:0f:db:82:0b:db:4a:c1:e1:ba:a2:52:
1d:c6:44:48:e9:1a:1d:0c:ec:f7:29:3a:ec:e5:a0:
58:7a:39:7e:be:c5:81:bd:10:01:5b:62:01:69:c6:
93:86:50:a6:b6:75:23:be:eb:c5:28:69:f3:e6:46:
d3:c7:4d:f3:a3:cc:2b:93:5e:35:7c:dc:00:28:a3:
a4:86:69:31:2c:e2:e3:b4:0e:09:29:a5:ab:67:52:
b1:64:64:91:08:f5:8a:a2:77:be:fd:9a:e4:fa:05:
ac:2a:ba:7e:c6:90:6d:4a:77:22:a8:6a:d9:f0:95:
28:09:a7:b4:09:50:01:89:4f:a3:55:ec:36:6b:75:
68:5e:e8:7a:73:45:77:47:38:23:8a:59:b8:52:67:
0c:fb:86:56:d0:72:55:8e:01:c3:81:85:23:6a:4d:
92:5d:30:b0:b9:2b:c2:bf:7d:b3:b1:bd:af:68:ab:
72:f9:df:b9:fe:18:af:f7:2e:71:f9:85:3e:04:1d:
ae:70:b2:37:fc:5e:7a:0b:57:32:a3:68:8a:a5:1d:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:1F:E5:8D:A2:27:CB:26:34:56:81:AF:21:14:02:06:01:26:4A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lpkf5Y2iJ8smNFaBryEUAgYBJko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.52.0/24
9.247.64.0/24
9.247.86.0/24
9.247.92.0/24
9.247.136.0/24
9.247.164.0/24
9.247.169.0/24
9.247.178.0/24
9.247.221.0/24
9.247.239.0/24
9.247.245.0/24
9.247.253.0/24
45.88.12.0/24
77.81.100.0/24
78.17.26.0/24
78.17.221.0/24
89.34.106.0/24
89.37.194.0/24
89.125.208.0/24
89.125.235.0/24
93.114.183.0/24
140.225.194.0/23
140.225.215.0/24
153.76.198.0/24
162.35.231.0/24
167.17.38.0/23
167.17.41.0/24
167.17.45.0-167.17.46.255
167.17.59.0/24
185.193.100.0/23
185.254.66.0/24
194.58.47.0/24
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
05:60:e1:1e:e5:ec:cd:0e:7e:85:75:fd:b6:44:6e:f3:d4:42:
f1:17:8a:28:78:01:07:45:03:d3:20:83:b7:0c:1d:c0:8f:9e:
aa:f0:ed:8a:71:86:5d:28:09:0b:4a:2f:f3:5d:05:1b:a6:cc:
d1:45:5f:72:9b:63:5e:51:0a:23:3f:75:05:78:95:fa:d3:51:
62:8a:66:0b:f8:6a:c8:0c:9c:14:df:61:76:16:05:57:0b:49:
e8:24:c5:3f:6e:6f:6d:9e:fe:cf:27:44:db:c3:19:30:66:f3:
f0:8e:cb:83:bc:fe:d4:b2:df:67:26:3a:53:71:42:af:f8:c5:
b8:77:f3:f2:d1:ce:ce:00:4e:91:a2:c6:3a:91:10:c0:7f:bc:
d7:c2:d4:d3:83:6f:5b:8e:0e:a7:f6:35:87:c4:d1:c6:05:67:
59:b0:c5:91:f4:59:1b:8a:2b:76:02:0f:7b:fa:50:86:29:fe:
72:84:ff:d7:5b:c8:37:a7:9b:70:f7:4a:bd:9f:da:65:d8:b2:
e5:f2:cd:ce:b5:6c:f2:85:e7:39:40:95:04:fb:d3:5d:c5:60:
5c:8a:bd:a4:78:fe:5c:fb:65:51:f9:ea:bd:f6:f5:ad:1f:2c:
26:91:96:15:8b:e0:3e:b2:f1:12:b7:bc:83:73:d1:1e:8f:90:
40:92:c1:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:24 2026 by rpki-client