Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lRLZcw0AUxexQUsgmm5Lthh-qLw.roa
File: lRLZcw0AUxexQUsgmm5Lthh-qLw.roa (raw, json)
Hash identifier: xwADeveMyk8zUGUVoUqEnJhahfrU618JzSZ6bYZHYyY=
Subject key identifier: 95:12:D9:73:0D:00:53:17:B1:41:4B:20:9A:6E:4B:B6:18:7E:A8:BC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A1BF61AF5B38198069A90308B027A50618
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lRLZcw0AUxexQUsgmm5Lthh-qLw.roa
Signing time: Mon 09 Nov 2026 08:16:52 +0000
ROA not before: Mon 09 Nov 2026 08:16:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201674
IP address blocks: 95.82.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:61:af:5b:38:19:80:69:a9:03:08:b0:27:a5:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 9 08:16:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9512d9730d005317b1414b209a6e4bb6187ea8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ab:bb:7f:9b:49:f8:2f:76:26:a6:9c:e7:d4:
1e:a2:e0:c2:bf:dc:10:c8:54:85:ce:48:0e:06:18:
a2:77:89:1d:45:32:ba:72:8d:86:3d:77:f8:d2:0f:
05:6c:b7:78:98:5d:1a:27:2b:97:9d:7c:03:88:c9:
fc:93:a7:53:eb:e9:df:b2:29:d4:b4:2e:60:df:7c:
85:af:b7:cd:3e:a1:b6:51:97:11:b9:c7:55:df:7a:
50:a8:96:06:61:1e:6b:20:64:87:e4:1b:5f:ec:92:
d1:c1:9c:2d:32:5d:a3:38:a3:b8:e3:37:7b:33:be:
f5:64:04:92:f1:5f:cf:59:7f:c7:8e:4a:1d:30:5f:
44:b2:2e:12:50:e1:b2:99:f8:fd:f8:02:9b:0b:01:
1e:06:8d:b4:52:9f:5d:03:2b:8f:d5:34:a7:57:7d:
81:d3:d9:86:76:af:2b:d1:38:d2:e6:06:eb:ea:18:
36:4e:31:40:aa:ad:92:11:22:78:eb:a8:fd:dd:fa:
1e:a7:ae:d1:0d:ac:9e:37:9f:2c:cf:fb:27:a5:7d:
75:b6:60:7d:55:78:d0:d1:5e:c7:b6:21:a1:f4:70:
be:9b:2d:d5:7d:af:77:94:87:7a:b8:0c:23:91:dc:
bb:2d:6d:f6:c3:f0:02:79:d7:0b:e0:75:2c:bc:29:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:D9:73:0D:00:53:17:B1:41:4B:20:9A:6E:4B:B6:18:7E:A8:BC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lRLZcw0AUxexQUsgmm5Lthh-qLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:ac:7c:74:ab:ab:c8:c6:22:dd:96:81:dc:fe:03:70:78:0c:
ec:3c:a0:8a:33:a1:b0:1d:e0:24:99:2a:81:ff:27:81:22:63:
d4:06:fb:bb:92:e9:cd:b2:a8:67:a8:53:a5:0a:c1:d4:fc:94:
74:9b:0f:fe:fc:45:0a:09:4a:b1:53:6f:09:74:85:93:58:ba:
26:38:15:71:6a:c8:6f:d6:f2:9d:f2:5b:09:da:9c:a2:f7:95:
b6:7f:6c:3f:a9:c3:2a:68:70:8e:bd:e3:d2:87:4f:e6:a4:0e:
69:07:49:5a:f3:cd:51:9c:a0:4b:3d:f1:9e:6d:17:33:d6:5f:
31:7b:e1:9a:88:3f:96:76:ed:1d:85:30:48:26:66:5b:1a:b6:
19:43:f1:53:d6:75:f8:9d:0d:97:59:98:57:6e:f0:d9:9a:3e:
a5:1d:ef:70:59:4c:01:48:88:12:ee:de:97:20:2c:c6:0c:28:
8d:23:b7:b4:60:fc:2a:0b:b9:bf:37:f9:aa:97:15:33:cc:6b:
d8:86:89:01:21:cd:c0:b1:9c:d1:45:47:af:77:17:2a:52:cb:
36:2b:92:38:5a:d7:4f:18:91:1b:03:cd:11:ce:7b:bb:02:9f:
cb:bd:bc:b8:19:77:04:17:43:9b:64:94:e6:e9:02:e9:4e:0b:
c5:bc:f6:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG/Ya9bOBmAaakDCLAnpQYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjYxMTA5MDgxNjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTEyZDk3MzBkMDA1MzE3YjE0MTRiMjA5YTZlNGJiNjE4N2VhOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86u7f5tJ+C92Jqac59QeouDCv9wQ
yFSFzkgOBhiid4kdRTK6co2GPXf40g8FbLd4mF0aJyuXnXwDiMn8k6dT6+nfsinU
tC5g33yFr7fNPqG2UZcRucdV33pQqJYGYR5rIGSH5Btf7JLRwZwtMl2jOKO44zd7
M771ZASS8V/PWX/HjkodMF9Esi4SUOGymfj9+AKbCwEeBo20Up9dAyuP1TSnV32B
09mGdq8r0TjS5gbr6hg2TjFAqq2SESJ466j93foep67RDayeN58sz/snpX11tmB9
VXjQ0V7HtiGh9HC+my3Vfa93lId6uAwjkdy7LW32w/ACedcL4HUsvCnD7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUS2XMNAFMXsUFLIJpuS7YYfqi8MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvbFJMWmN3MEFVeGV4UVVzZ21tNUx0aGgtcUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX1IIMA0G
CSqGSIb3DQEBCwUAA4IBAQC7rHx0q6vIxiLdloHc/gNweAzsPKCKM6GwHeAkmSqB
/yeBImPUBvu7kunNsqhnqFOlCsHU/JR0mw/+/EUKCUqxU28JdIWTWLomOBVxashv
1vKd8lsJ2pyi95W2f2w/qcMqaHCOvePSh0/mpA5pB0la881RnKBLPfGebRcz1l8x
e+GaiD+Wdu0dhTBIJmZbGrYZQ/FT1nX4nQ2XWZhXbvDZmj6lHe9wWUwBSIgS7t6X
ICzGDCiNI7e0YPwqC7m/N/mqlxUzzGvYhokBIc3AsZzRRUevdxcqUss2K5I4WtdP
GJEbA80Rznu7Ap/Lvby4GXcEF0ObZJTm6QLpTgvFvPYD
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:54 2026 by rpki-client