Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/lZfWHFdXsQrVGHZWgIb1guhUVJ4.roa
File: lZfWHFdXsQrVGHZWgIb1guhUVJ4.roa (raw, json)
Hash identifier: gOiM7w/t6FJGTbY9fy4zmAi1p6k9tw1xjNKGmizdc2w=
Subject key identifier: 95:97:D6:1C:57:57:B1:0A:D5:18:76:56:80:86:F5:82:E8:54:54:9E
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019F31AB64ACED3398FD755DD440E181D819
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/lZfWHFdXsQrVGHZWgIb1guhUVJ4.roa
Signing time: Sun 05 Jul 2026 09:45:43 +0000
ROA not before: Sun 05 Jul 2026 09:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:ab:64:ac:ed:33:98:fd:75:5d:d4:40:e1:81:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 5 09:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9597d61c5757b10ad51876568086f582e854549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:ae:90:60:a8:68:2d:7a:fa:b1:27:4a:11:
8f:e2:1e:2d:61:e4:5a:b8:21:31:10:f9:40:95:fc:
ec:a2:a3:05:7c:fc:f8:39:50:8d:b5:31:a9:d4:5f:
ac:78:5c:43:5c:b7:cb:cc:9e:5f:0e:db:bf:ad:81:
e1:dc:ae:f8:e1:62:72:d9:65:bd:cc:23:66:6a:29:
c0:d6:d4:e0:58:a7:9b:0e:a3:81:1d:18:a9:7f:39:
8c:50:ee:3f:55:9e:3d:2d:00:8f:00:a7:30:53:bc:
d7:63:fa:21:68:02:42:90:2f:1b:9e:3a:a5:92:f3:
7b:03:11:47:a2:4c:1a:f2:ab:18:35:e9:1b:68:f7:
44:a2:df:a4:c2:ac:73:8d:84:b5:78:93:e4:04:a6:
28:2c:9b:b5:c0:05:58:af:d2:84:1d:7b:c5:d3:eb:
27:88:17:71:e4:ea:f1:e9:a4:89:eb:68:76:c2:a4:
82:d5:2d:04:01:13:60:1e:0e:4f:f9:c1:70:46:dc:
47:42:cb:c0:c5:b4:e2:c1:ec:6d:f1:61:8b:57:d3:
b0:62:d8:cc:3f:bb:76:cf:f3:5f:ec:a5:1f:62:09:
c1:97:8a:09:f4:51:53:05:5a:30:30:48:d7:74:5b:
67:c8:85:e1:bd:b8:5b:c9:6a:be:3e:3d:d4:d7:5e:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:D6:1C:57:57:B1:0A:D5:18:76:56:80:86:F5:82:E8:54:54:9E
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/lZfWHFdXsQrVGHZWgIb1guhUVJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.252.128.0/20
94.252.160.0/19
185.136.144.0/22
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
72:84:e4:15:b3:86:01:33:9f:4f:f6:96:b7:ea:4e:36:7b:1a:
b3:d8:fb:70:2e:c4:ce:8f:80:26:45:c1:15:48:3f:c6:c3:c5:
93:1c:6d:fc:7b:63:7a:e0:a0:ed:4a:87:8e:85:40:2b:81:91:
59:0f:91:ed:1a:82:ba:47:a4:ff:a3:6e:ac:1c:bb:7c:7f:58:
1b:bc:ac:62:6f:c6:9c:80:69:1a:c1:dd:bd:06:2f:75:4b:cb:
8f:16:9b:9d:30:39:e3:7b:25:e8:9a:67:60:34:f8:55:aa:9b:
6a:bd:46:a5:47:4a:d3:e5:c3:15:3a:e9:c7:81:f9:74:de:5f:
1b:ab:a5:1d:89:7e:e4:3a:55:dc:f1:7e:97:11:56:d3:2a:93:
b8:60:e5:57:40:a5:89:97:d3:f6:d0:82:50:b5:b9:a4:76:4b:
ef:49:71:4b:89:52:fc:89:05:26:0d:86:7d:d5:85:4b:72:08:
b4:6c:ed:c5:4b:22:49:51:b1:4d:8d:9a:33:12:4e:eb:01:50:
33:96:75:e0:ce:f2:94:2a:79:9f:ff:7a:38:e6:fd:14:e7:10:
b9:dc:e1:be:1b:0e:52:8b:6d:5b:97:0d:80:90:3a:5f:45:d2:
9c:36:b8:a1:8e:81:c4:6d:e0:03:7d:62:35:f8:b0:18:ec:28:
e3:71:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:51 2026 by rpki-client