Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/loonKh87j1JfQT3Dn_52JOEnZ1U.roa
File: loonKh87j1JfQT3Dn_52JOEnZ1U.roa (raw, json)
Hash identifier: FrraXYxBriCt6ZUnE28kpvG91WIcfWLwXgT69XX5IxY=
Subject key identifier: 96:8A:27:2A:1F:3B:8F:52:5F:41:3D:C3:9F:FE:76:24:E1:27:67:55
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 01A0D8A2F8E438B23FB06FDFD1C1B1E4B3FB
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/loonKh87j1JfQT3Dn_52JOEnZ1U.roa
Signing time: Fri 25 Sep 2026 12:55:54 +0000
ROA not before: Fri 25 Sep 2026 12:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52153
IP address blocks: 83.142.136.0/21 maxlen: 24
91.222.192.0/22 maxlen: 24
193.218.148.0/22 maxlen: 24
194.54.16.0/22 maxlen: 24
195.206.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a2:f8:e4:38:b2:3f:b0:6f:df:d1:c1:b1:e4:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Sep 25 12:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=968a272a1f3b8f525f413dc39ffe7624e1276755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:38:0a:35:ba:c4:2a:0d:c2:69:40:a2:0f:
57:50:eb:47:95:3b:6b:d2:6e:c0:48:ec:fc:e0:d8:
9c:21:36:5d:d5:05:20:d6:fb:22:7a:55:a8:d4:f1:
92:de:83:04:ed:54:5d:c6:13:06:40:67:43:4b:bd:
45:88:1b:be:19:8c:73:d6:b6:01:31:c6:2b:3d:b1:
a8:7b:14:c8:16:bb:f2:dd:a1:c1:38:c9:fd:13:b8:
c8:76:aa:3d:67:ac:78:50:ff:2f:4b:62:4d:bd:bb:
68:94:ef:47:11:c0:2d:c3:fb:80:6a:a1:be:50:6f:
19:7d:c4:ee:66:37:00:cf:be:f9:b8:c3:b6:10:9f:
95:46:63:d5:a1:dd:3e:27:35:f2:f4:72:29:46:7c:
d5:bf:d9:48:a6:33:8a:1c:52:76:a9:f5:77:bb:ba:
0d:c2:66:9e:37:35:86:ea:ae:5a:3c:14:45:f0:2c:
3d:28:f0:77:60:7f:c6:44:54:7b:eb:ec:1d:2b:69:
f5:22:3d:42:8b:36:ef:c6:ed:ed:fc:b7:d8:0d:38:
44:ca:04:bd:93:46:e6:b6:f1:cd:1a:6c:34:d8:72:
95:4d:a3:1c:b1:33:e3:ca:b8:60:97:5e:31:0f:76:
eb:f1:f9:e1:82:92:03:7f:fc:7e:ab:a1:af:de:46:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:27:2A:1F:3B:8F:52:5F:41:3D:C3:9F:FE:76:24:E1:27:67:55
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/loonKh87j1JfQT3Dn_52JOEnZ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.136.0/21
91.222.192.0/22
193.218.148.0/22
194.54.16.0/22
195.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5d:85:58:35:88:64:a0:66:a0:d7:91:bc:7c:d9:22:1e:68:
96:cd:6d:42:54:b8:6d:c8:a4:42:24:4a:25:c0:b8:92:d1:bf:
e7:29:f1:00:7e:ef:e9:7b:8d:07:d9:03:6b:de:6c:2b:1e:9c:
9c:d3:b3:44:88:3c:f9:99:38:98:a4:b0:6f:49:fc:6a:cb:c2:
93:6b:08:20:cb:bd:4f:b1:72:f9:01:00:b9:8f:21:a1:7d:f9:
5a:b2:ba:a8:3e:36:10:03:78:5b:55:9e:97:1d:67:ab:d9:67:
85:55:af:cf:14:d6:7c:43:e7:81:aa:12:18:f0:3f:29:f9:18:
61:72:90:f2:43:6a:12:ec:ba:bd:c0:76:e0:bc:15:76:f3:b6:
d6:77:41:8b:97:44:2b:ff:62:c7:9f:e8:4e:a8:3c:9e:9a:dc:
74:0b:a4:97:93:40:80:a6:7a:64:a0:1e:12:32:7c:58:59:12:
73:47:42:07:7f:f1:ad:9b:d8:2f:19:71:89:a2:5d:ba:7d:60:
cb:62:8e:00:ba:39:ef:4d:62:36:fb:a1:78:49:39:83:46:f3:
0d:0c:3f:46:b0:c5:cb:ba:87:7f:39:a2:82:27:72:c4:76:fd:
d5:6e:ff:c2:88:b5:48:6b:7c:f9:e2:14:db:0d:95:8c:62:67:
93:64:88:24
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaDYovjkOLI/sG/f0cGx5LP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzMyMzIwNDdlOWY5NzAxZDgxZjcxMWJjNzNkNWRhN2Jm
YTEzNTIwHhcNMjYwOTI1MTI1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjhhMjcyYTFmM2I4ZjUyNWY0MTNkYzM5ZmZlNzYyNGUxMjc2NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OI4CjW6xCoNwmlAog9XUOtHlTtr
0m7ASOz84NicITZd1QUg1vsielWo1PGS3oME7VRdxhMGQGdDS71FiBu+GYxz1rYB
McYrPbGoexTIFrvy3aHBOMn9E7jIdqo9Z6x4UP8vS2JNvbtolO9HEcAtw/uAaqG+
UG8ZfcTuZjcAz775uMO2EJ+VRmPVod0+JzXy9HIpRnzVv9lIpjOKHFJ2qfV3u7oN
wmaeNzWG6q5aPBRF8Cw9KPB3YH/GRFR76+wdK2n1Ij1Cizbvxu3t/LfYDThEygS9
k0bmtvHNGmw02HKVTaMcsTPjyrhgl14xD3br8fnhgpIDf/x+q6Gv3kZZQwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJaKJyofO49SX0E9w5/+diThJ2dVMB8GA1UdIwQY
MBaAFL1zIyBH6flwHYH3Ebxz1dp7+hNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt
ZDk1YTM4ZjBjMDZlLzEvbG9vbktoODdqMUpmUVQzRG5fNTJKT0VuWjFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl
LzEvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDU46IAwQC
W97AAwQCwdqUAwQCwjYQAwQCw85wMA0GCSqGSIb3DQEBCwUAA4IBAQADXYVYNYhk
oGag15G8fNkiHmiWzW1CVLhtyKRCJEolwLiS0b/nKfEAfu/pe40H2QNr3mwrHpyc
07NEiDz5mTiYpLBvSfxqy8KTawggy71PsXL5AQC5jyGhfflasrqoPjYQA3hbVZ6X
HWer2WeFVa/PFNZ8Q+eBqhIY8D8p+RhhcpDyQ2oS7Lq9wHbgvBV287bWd0GLl0Qr
/2LHn+hOqDyemtx0C6SXk0CApnpkoB4SMnxYWRJzR0IHf/Gtm9gvGXGJol26fWDL
Yo4AujnvTWI2+6F4STmDRvMNDD9GsMXLuod/OaKCJ3LEdv3Vbv/CiLVIa3z54hTb
DZWMYmeTZIgk
-----END CERTIFICATE-----
Generated at Wed Sep 30 10:57:48 2026 by rpki-client