Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/lu5yurSkT9e_Taok7SCt_R26FuY.roa
File: lu5yurSkT9e_Taok7SCt_R26FuY.roa (raw, json)
Hash identifier: CeXf6vw9DkbZGqczzaPxh8skoxIspZwWkZW0SRU+ELM=
Subject key identifier: 96:EE:72:BA:B4:A4:4F:D7:BF:4D:AA:24:ED:20:AD:FD:1D:BA:16:E6
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 019F210B1ABFED1E0D8BBE02AEBE1F473D72
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/lu5yurSkT9e_Taok7SCt_R26FuY.roa
Signing time: Thu 02 Jul 2026 04:16:43 +0000
ROA not before: Thu 02 Jul 2026 04:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50247
IP address blocks: 193.106.238.0/24 maxlen: 24
194.1.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:0b:1a:bf:ed:1e:0d:8b:be:02:ae:be:1f:47:3d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jul 2 04:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ee72bab4a44fd7bf4daa24ed20adfd1dba16e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:a9:96:79:bf:66:6d:67:48:19:39:cc:8e:
53:d4:03:b5:23:09:25:3f:bb:66:6b:f8:6f:52:ca:
ff:bb:3d:ea:68:2e:fd:73:a9:67:9b:40:13:27:8c:
f3:5c:c8:28:ce:81:b7:ef:21:d0:9a:ad:00:fa:a4:
89:e3:22:4b:4c:ea:10:df:05:ef:c5:3f:ba:f4:f2:
aa:03:ef:ee:5d:29:11:3f:41:f6:44:d7:5d:1c:93:
d1:ef:aa:15:9a:06:dc:65:d6:00:73:18:be:6a:b6:
00:9d:aa:cb:b8:44:6a:65:c4:60:2d:91:98:6c:6b:
cf:ce:fe:5a:8b:b5:00:39:2d:1a:1f:ce:0d:0e:3d:
26:8b:93:fc:9f:93:30:73:7c:28:fb:44:e3:3a:17:
a4:a3:e3:41:88:52:c3:c9:7d:6e:89:1e:06:3d:2f:
61:58:db:d6:6d:29:d1:39:52:fb:7a:77:81:b1:aa:
d3:d2:8b:fe:f7:34:4e:63:b2:e4:c5:64:66:f9:70:
6b:2e:90:e8:9c:c8:db:94:28:35:89:26:6d:48:d4:
ca:0b:5a:8f:74:69:2b:3f:76:78:94:06:cf:3f:9c:
db:46:a5:ea:10:1a:d3:32:41:2e:a1:6b:89:a4:71:
29:ce:e7:1b:40:12:82:22:b9:44:5d:20:57:a8:16:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:72:BA:B4:A4:4F:D7:BF:4D:AA:24:ED:20:AD:FD:1D:BA:16:E6
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/lu5yurSkT9e_Taok7SCt_R26FuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.238.0/24
194.1.252.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9c:3b:be:e4:61:70:ee:24:ac:18:f8:7c:de:67:9f:78:07:
df:05:b2:09:6c:05:9f:f2:d4:03:a0:93:0a:e1:97:95:af:aa:
62:5b:d8:63:fd:0f:79:c8:55:04:73:a1:88:d6:47:5f:64:2f:
db:a3:3c:99:4e:56:2b:ba:71:a2:eb:5f:0e:45:8b:92:07:d8:
c9:b1:bc:ae:c4:8f:8e:af:7f:f8:4c:c7:69:1d:af:9e:0e:f4:
ce:db:7a:ff:f6:ce:42:3b:4d:d6:28:96:b4:02:2a:72:8e:16:
02:53:f4:32:ff:19:1f:a3:91:a3:f6:03:fb:3a:1d:ef:7a:5b:
c1:d4:43:20:4a:62:7e:67:61:2d:a2:f4:fe:04:77:07:08:ce:
1c:f8:a3:5b:f5:8a:31:d8:3c:b2:2a:e9:be:e7:8b:b2:d2:75:
01:0a:8b:1f:d4:9c:30:3c:e2:93:ae:59:3b:f6:50:e8:36:6d:
1f:f4:78:08:13:3b:3d:fe:e3:9d:ad:77:4d:76:52:5d:aa:73:
46:3b:07:ea:d3:a7:46:27:32:f0:87:35:f6:10:57:b5:6b:a3:
a0:ff:e5:b9:7b:f0:23:41:ee:97:5f:4d:92:10:a4:4c:6f:93:
50:3a:f4:97:31:14:b9:94:d7:dd:21:fa:15:96:4a:28:3a:cd:
eb:c7:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:27 2026 by rpki-client