Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/lJvFDE3LUXzUhHwCRhXuMp7CqVY.roa
File: lJvFDE3LUXzUhHwCRhXuMp7CqVY.roa (raw, json)
Hash identifier: kQXwpFmZAnTAO5oTo9csBX2DJ7XbZewEGS4Nmz1+oEI=
Subject key identifier: 94:9B:C5:0C:4D:CB:51:7C:D4:84:7C:02:46:15:EE:32:9E:C2:A9:56
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 01A0D4A7135947EDE07523FD57ED986FDB3C
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/lJvFDE3LUXzUhHwCRhXuMp7CqVY.roa
Signing time: Thu 24 Sep 2026 18:21:54 +0000
ROA not before: Thu 24 Sep 2026 18:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198178
IP address blocks: 83.242.100.0/24 maxlen: 24
2a13:7e40:1::/48 maxlen: 48
2a13:7e40:2::/48 maxlen: 48
2a13:7e40:4::/48 maxlen: 48
2a13:7e40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:a7:13:59:47:ed:e0:75:23:fd:57:ed:98:6f:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Sep 24 18:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949bc50c4dcb517cd4847c024615ee329ec2a956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:b9:4c:6c:d9:4d:11:79:b8:77:86:e2:1d:
70:74:95:90:f0:cc:6f:a6:ef:b3:62:f8:ad:a9:ad:
e2:cd:65:7d:f2:b2:db:c4:86:ba:79:7f:fe:aa:09:
ac:59:af:23:d4:38:d7:49:29:64:46:78:a0:a8:82:
f4:88:67:30:58:56:3a:a1:b6:1d:15:5e:6d:1b:74:
4c:25:e1:81:5b:39:77:17:1d:4b:e7:f6:57:94:a9:
bf:ef:ab:d8:63:d3:34:91:50:7d:f7:4a:d5:b4:b4:
44:03:b3:26:a6:3e:1e:2e:06:a9:b8:bd:0d:ec:dd:
2a:57:f7:31:e3:7e:5f:05:bb:3a:c2:0d:2b:79:60:
8e:62:eb:bf:0a:3e:8f:ce:5d:03:4f:2a:f0:e6:37:
47:47:f6:19:9f:6b:dd:66:ef:20:32:42:71:67:d2:
14:d9:52:6a:88:df:05:b8:a6:af:bd:80:24:9c:c4:
6c:8c:34:0b:50:cf:dd:08:b9:97:c1:6c:f4:5a:42:
7a:49:b6:e5:17:03:a2:ee:e1:a3:bd:31:a5:95:0a:
8c:fe:ad:9b:dd:0b:d3:57:83:9e:83:a8:50:7c:67:
a0:e9:5b:5e:ba:d6:4f:37:04:96:eb:10:af:07:da:
f9:4c:ae:a9:35:9d:a6:41:14:95:bc:aa:b9:38:ec:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:C5:0C:4D:CB:51:7C:D4:84:7C:02:46:15:EE:32:9E:C2:A9:56
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/lJvFDE3LUXzUhHwCRhXuMp7CqVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.100.0/24
IPv6:
2a13:7e40:1::-2a13:7e40:2:ffff:ffff:ffff:ffff:ffff
2a13:7e40:4::/47
Signature Algorithm: sha256WithRSAEncryption
66:68:46:63:d7:ad:41:bb:b1:3b:79:ff:45:9f:ba:c5:69:53:
f2:3b:2c:a9:91:df:6f:b7:dc:d2:31:72:5e:07:86:e4:82:c1:
15:5b:a8:63:42:e1:1e:fe:ed:98:f5:b1:0c:fd:4e:44:1e:65:
47:d0:70:39:ed:8e:b6:ad:01:d1:e6:7f:d3:fa:14:8e:10:99:
2f:4e:50:a7:3c:a2:a4:4a:09:c0:ec:76:32:90:76:2f:fc:71:
a4:81:ee:d2:05:c2:1e:f1:59:7e:78:f5:35:5c:2d:9d:b7:ca:
c5:ee:10:8b:ee:9d:4d:d1:1a:ea:b0:d6:5f:88:c1:04:ff:f0:
eb:1d:72:0c:3b:21:2a:6f:e6:4b:29:74:df:2c:ed:6b:10:ab:
e4:f4:da:ba:80:03:68:01:64:37:a1:9b:d1:b8:cb:82:d5:af:
49:f6:a8:d2:d3:c9:6a:73:f1:bc:44:ae:6e:e0:87:36:50:cc:
b5:b5:55:93:00:22:3e:49:7f:e8:0a:29:11:17:c9:86:de:84:
61:33:c8:0a:89:ed:ad:a1:08:5c:29:3f:c6:fc:bf:db:67:52:
25:3e:49:a8:a0:d4:58:14:23:f6:cb:49:10:ef:8f:b8:af:d2:
d9:13:e1:39:7f:83:8a:c3:c7:bb:5e:db:ca:2f:20:86:da:91:
d0:d7:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:23:27 2026 by rpki-client