Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lo4AMmkJU70dpL16bJEcQX1CnuA.roa
File: lo4AMmkJU70dpL16bJEcQX1CnuA.roa (raw, json)
Hash identifier: qDQHS3ec66GmrYNs8OCEy2n0tsEz1PnlU1U37E1h6TM=
Subject key identifier: 96:8E:00:32:69:09:53:BD:1D:A4:BD:7A:6C:91:1C:41:7D:42:9E:E0
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019CD8A2738327F868D5331DFB1E3106B79A
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lo4AMmkJU70dpL16bJEcQX1CnuA.roa
Signing time: Tue 10 Mar 2026 16:44:10 +0000
ROA not before: Tue 10 Mar 2026 16:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:a2:73:83:27:f8:68:d5:33:1d:fb:1e:31:06:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Mar 10 16:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=968e0032690953bd1da4bd7a6c911c417d429ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:e2:b9:67:57:6c:1f:6e:6f:0a:cd:9f:6a:
6b:8d:00:28:ff:02:d9:ab:a8:c4:0c:8b:bf:01:38:
4e:12:df:9c:d4:38:a4:fd:cc:49:f5:f5:f6:bd:4b:
5f:27:91:5d:fd:f7:74:18:fe:16:07:ab:c9:19:0a:
d7:00:db:c6:5f:e1:3f:09:bd:eb:29:8b:43:d6:b5:
41:dd:9d:10:5e:51:27:3a:a5:2e:b8:1b:13:1b:3c:
49:a3:42:15:c8:8f:79:4e:6b:eb:8e:43:57:ed:3c:
f8:68:d7:c0:ca:64:9e:35:f3:5d:4b:2e:8c:d5:b2:
10:64:67:41:24:5d:6f:ea:cd:93:9f:f6:b1:d7:17:
a1:60:d2:e8:6c:0b:ab:10:f7:f3:93:8c:de:05:eb:
fa:21:35:57:11:f4:49:78:7c:1e:50:7d:d3:a1:14:
1b:20:97:7c:b6:7c:b6:91:7a:ad:7b:55:eb:77:37:
fe:c2:02:84:90:65:4b:10:81:d9:b1:5b:68:e4:ea:
b7:a6:59:f8:cd:3f:97:ac:5b:42:1f:18:de:03:11:
dd:8a:a6:ea:7e:fb:32:1b:77:4a:9b:f3:47:99:a2:
11:71:ff:ff:ae:fe:2b:97:4f:9c:06:bf:64:ee:c5:
07:1d:f9:68:82:1b:f6:40:4a:6d:b3:13:5c:64:3f:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:00:32:69:09:53:BD:1D:A4:BD:7A:6C:91:1C:41:7D:42:9E:E0
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lo4AMmkJU70dpL16bJEcQX1CnuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
14:4e:38:b4:7d:42:e6:c5:84:0c:40:41:16:14:ba:b1:14:8b:
9e:36:b9:fb:0c:f7:fa:1c:4e:7d:a5:41:9a:30:83:a4:c0:38:
92:09:ab:07:75:7b:63:dc:50:ad:83:d7:80:5f:68:fd:80:ef:
84:6a:a6:7d:93:05:6a:47:db:4e:e3:84:1d:08:fb:eb:31:82:
20:b1:6f:e5:81:07:d2:a7:d1:f4:06:c9:90:46:58:94:ff:b2:
fd:b4:3a:a4:aa:68:fe:fd:24:d4:cc:02:d3:e6:b1:89:0f:76:
10:52:70:a0:22:4d:44:0f:43:2a:0c:9c:d1:ee:35:dc:54:e1:
9d:27:fb:dc:8c:4e:67:e1:37:c4:7f:2e:2a:24:f6:56:44:22:
94:16:39:d7:cd:e6:c4:5d:59:d3:f8:ec:5f:a4:16:5e:ae:36:
6c:55:c1:fe:3f:e9:37:14:86:27:d2:a8:6c:dd:15:9f:67:c0:
dd:ac:44:81:98:b5:b1:33:b7:21:2c:e4:4d:f5:80:1f:a7:0b:
be:18:f1:ff:ec:11:96:2c:06:37:d1:53:ee:a8:37:56:2d:65:
de:ea:93:41:ab:01:5c:6f:bc:c8:2f:ef:ae:33:17:60:bb:d7:
9f:a6:3e:13:ef:7d:23:90:f0:5a:fa:73:f6:40:bf:50:0e:30:
83:69:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:00 2026 by rpki-client