Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa
File: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (raw, json)
Hash identifier: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=
Subject key identifier: 95:B2:43:32:A9:25:DE:BF:F3:3F:FF:11:72:30:B0:76:09:D1:AA:A4
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019F8E6690ECBEEA1894A9D63667A77ACC7B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa
Signing time: Thu 23 Jul 2026 09:55:14 +0000
ROA not before: Thu 23 Jul 2026 09:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5503
IP address blocks: 62.171.192.0/19 maxlen: 24
62.171.224.0/22 maxlen: 24
62.171.252.0/22 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/20 maxlen: 24
194.154.16.0/21 maxlen: 24
194.238.32.0/21 maxlen: 24
194.238.48.0/21 maxlen: 24
194.238.60.0/22 maxlen: 24
194.238.64.0/21 maxlen: 24
213.18.248.0/21 maxlen: 24
217.177.16.0/20 maxlen: 24
217.177.36.0/22 maxlen: 24
217.177.56.0/21 maxlen: 24
217.177.64.0/21 maxlen: 24
217.177.76.0/22 maxlen: 24
217.177.88.0/21 maxlen: 24
217.179.0.0/22 maxlen: 24
217.179.8.0/21 maxlen: 24
217.179.16.0/20 maxlen: 24
217.179.32.0/20 maxlen: 24
217.179.52.0/22 maxlen: 24
217.179.60.0/22 maxlen: 24
217.179.64.0/21 maxlen: 24
217.179.76.0/22 maxlen: 24
217.179.84.0/22 maxlen: 24
217.179.92.0/22 maxlen: 24
217.179.96.0/20 maxlen: 24
217.179.112.0/21 maxlen: 24
217.179.120.0/22 maxlen: 24
217.179.192.0/20 maxlen: 24
217.179.208.0/21 maxlen: 24
217.179.216.0/22 maxlen: 24
217.179.224.0/22 maxlen: 24
217.179.232.0/21 maxlen: 24
217.179.240.0/20 maxlen: 24
217.180.24.0/21 maxlen: 24
217.180.32.0/22 maxlen: 24
217.180.48.0/22 maxlen: 24
217.181.0.0/18 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:66:90:ec:be:ea:18:94:a9:d6:36:67:a7:7a:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 23 09:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b24332a925debff33fff117230b07609d1aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:df:ef:08:df:38:16:86:1f:79:a0:19:ad:
af:72:ff:6a:d1:f7:b3:bc:6b:32:ac:4a:8b:2f:9f:
39:2f:c9:ae:96:b3:f6:5c:f9:52:d9:4d:44:c5:ac:
83:df:0c:ee:1d:f5:de:58:d3:eb:7b:ac:5a:9b:0c:
68:72:7a:ca:a4:bc:e0:19:f0:12:19:e2:e7:20:82:
36:86:0c:3c:c8:3f:28:0b:07:5b:fb:c1:37:86:6e:
77:9b:89:4d:c1:18:1f:48:77:52:fc:54:ec:10:28:
b9:44:86:99:a3:d8:0f:02:4c:66:29:79:da:63:65:
a1:c0:3b:4b:93:13:f3:43:53:e7:be:40:48:ee:1e:
a0:91:eb:77:27:12:31:e6:6e:06:f1:92:af:68:e6:
e4:f5:de:52:27:d0:1e:2e:11:b3:23:d6:cd:4b:36:
25:f1:0e:ae:14:5c:ee:f7:48:1b:b9:49:e6:9f:68:
4b:0c:f7:cb:86:05:a0:cb:b0:01:b0:11:a0:a4:e0:
f0:79:c4:d5:59:46:3e:6d:1d:04:6b:9e:7d:f3:03:
58:fa:31:c2:9a:71:4c:d0:20:9c:38:71:f2:fc:01:
20:ae:82:70:f6:cf:fa:ff:60:4e:a5:d0:80:2f:8c:
3e:30:c9:22:ff:a6:7c:11:67:81:43:b9:86:73:7c:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:43:32:A9:25:DE:BF:F3:3F:FF:11:72:30:B0:76:09:D1:AA:A4
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0-62.171.227.255
62.171.252.0/22
185.192.228.0/22
194.154.0.0-194.154.23.255
194.238.32.0/21
194.238.48.0/21
194.238.60.0-194.238.71.255
213.18.248.0/21
217.177.16.0/20
217.177.36.0/22
217.177.56.0-217.177.71.255
217.177.76.0/22
217.177.88.0/21
217.179.0.0/22
217.179.8.0-217.179.47.255
217.179.52.0/22
217.179.60.0-217.179.71.255
217.179.76.0/22
217.179.84.0/22
217.179.92.0-217.179.123.255
217.179.192.0-217.179.219.255
217.179.224.0/22
217.179.232.0-217.179.255.255
217.180.24.0-217.180.35.255
217.180.48.0/22
217.181.0.0/18
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
33:7a:aa:3c:dc:81:d5:ac:bf:eb:93:0a:9a:88:7b:df:b7:1a:
e1:8a:96:22:01:b1:24:a8:65:92:32:c2:dd:46:9b:74:de:e4:
c6:a8:4b:77:71:6e:4c:3f:f9:33:80:37:d6:09:f1:5a:9e:70:
b6:b1:01:29:ef:1b:16:2b:84:d1:95:4e:0a:1a:61:f6:82:3d:
1e:ea:3c:0f:8d:39:02:0d:1f:b6:11:e7:5f:a8:3f:69:c5:20:
08:a2:7d:9e:9c:d2:3b:e1:16:50:11:bd:1c:8b:a0:7b:17:fc:
eb:91:6c:7c:8c:71:d4:e1:10:ba:98:fb:b9:8b:73:52:16:f1:
37:9d:05:28:da:bd:d6:f5:37:91:5f:03:58:68:f2:09:05:e8:
44:b9:55:a7:a8:47:ea:77:82:70:07:80:aa:bf:84:72:59:71:
af:5d:11:a4:2f:ce:29:9d:5c:e7:9e:b5:61:6c:e8:3f:0f:ee:
e4:cc:b6:16:0f:ed:92:0b:de:ed:72:07:0d:85:56:4e:c6:55:
85:70:90:06:69:78:1b:1f:db:e9:69:dd:a7:c5:a6:42:89:a5:
15:11:46:94:7c:80:e4:45:ec:06:89:04:ec:d7:3f:23:01:f9:
08:bb:5e:c9:af:5c:8c:e1:62:e6:4a:33:f5:1f:a3:c9:d5:59:
da:d1:af:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:52 2026 by rpki-client