Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/lwy90cbBNFV2wUDGvLc6hwXEjyY.roa
File: lwy90cbBNFV2wUDGvLc6hwXEjyY.roa (raw, json)
Hash identifier: DZWLbh4IISA9takKt+9LeDtaQPI4wwA7zL4yaNE9EXU=
Subject key identifier: 97:0C:BD:D1:C6:C1:34:55:76:C1:40:C6:BC:B7:3A:87:05:C4:8F:26
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 01A0ED50A1112EF4BAF3726D66A07E5043E8
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/lwy90cbBNFV2wUDGvLc6hwXEjyY.roa
Signing time: Tue 29 Sep 2026 13:17:59 +0000
ROA not before: Tue 29 Sep 2026 13:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210872
IP address blocks: 193.168.8.0/23 maxlen: 23
193.168.8.0/24 maxlen: 24
193.168.9.0/24 maxlen: 24
193.168.12.0/23 maxlen: 24
193.168.14.0/23 maxlen: 24
2a14:e480::/48 maxlen: 48
2a14:e480:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:50:a1:11:2e:f4:ba:f3:72:6d:66:a0:7e:50:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Sep 29 13:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=970cbdd1c6c1345576c140c6bcb73a8705c48f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:19:13:f2:ee:6d:0f:6b:b3:ab:4a:31:d0:
be:28:e2:c5:96:61:2b:77:c4:c3:9a:44:37:6a:c0:
c7:ba:a4:7b:f1:8b:9f:7d:08:b3:9a:66:2f:7a:77:
ca:62:c0:63:df:01:b7:f3:69:3e:77:7c:03:3a:68:
c0:91:a9:bd:59:ca:8c:fe:e6:ae:1e:ea:6e:4f:d0:
47:68:32:83:57:30:79:8d:5f:1c:97:25:f9:59:e8:
30:b2:a2:5a:16:e0:4f:73:bf:82:cc:14:40:68:c8:
f7:fc:0e:a8:80:e7:e8:8f:41:75:68:d0:82:d9:81:
24:60:63:c7:20:53:80:e2:c9:53:2d:87:79:73:a4:
a9:9b:93:7e:aa:b1:48:b8:45:35:cb:c1:dd:93:26:
c5:0d:d3:81:90:19:a1:d6:03:9e:29:23:2a:95:2c:
4d:02:76:48:d3:a7:1c:db:a0:cc:e5:42:b5:18:b3:
78:08:e9:00:67:6a:d7:f5:3f:e4:37:f8:72:cf:d1:
45:97:a1:a3:5e:f6:10:20:9b:88:9d:80:1d:00:c2:
61:73:f4:c1:98:55:36:b2:e6:38:58:92:65:55:d0:
5e:5b:e7:3f:24:97:fd:be:16:fe:7a:a0:c0:ac:90:
41:44:c2:2b:cf:02:08:9d:a2:a2:7c:a6:e7:8f:20:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:BD:D1:C6:C1:34:55:76:C1:40:C6:BC:B7:3A:87:05:C4:8F:26
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/lwy90cbBNFV2wUDGvLc6hwXEjyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.8.0/23
193.168.12.0/22
IPv6:
2a14:e480::/47
Signature Algorithm: sha256WithRSAEncryption
90:1f:21:ad:01:be:11:89:37:89:55:32:ad:5c:41:e1:06:33:
1b:54:28:1d:f6:f6:93:a6:66:25:6f:46:66:02:54:94:23:e9:
67:f1:84:42:f4:21:50:62:c1:1d:41:4c:8c:2f:a6:0b:29:4d:
da:b1:da:90:64:39:03:9e:2c:43:83:d7:07:3b:22:ce:30:49:
24:cc:8d:d4:3c:12:6a:c9:57:b8:89:8b:b6:94:d2:90:b3:cd:
29:1a:99:b6:28:87:15:f6:58:01:1e:be:35:82:cf:c6:40:43:
20:7d:98:24:db:59:2b:d1:5c:b4:8c:71:a9:06:6e:83:39:27:
d7:d8:83:d5:ab:c5:72:a3:a1:0f:1d:4d:11:bc:f1:07:4a:b7:
73:09:5a:f2:85:2a:83:7b:96:a9:8a:b4:e0:de:db:8d:c7:32:
8d:5d:fe:67:c9:0e:da:f1:f3:79:4f:ca:a4:57:3d:60:b2:00:
08:8c:e9:c4:4e:5f:d7:d9:6c:3f:3e:1e:5f:24:5f:27:5a:b6:
ca:b6:25:f4:c3:3f:82:6e:01:a6:33:b6:68:c8:23:fc:a4:fd:
bc:f1:51:78:07:b4:c4:f6:c2:3c:c8:1d:42:0c:2c:4a:77:e6:
fb:bc:ef:75:25:5e:c3:21:fb:f2:be:c3:7f:ad:96:aa:4c:e4:
cf:fc:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:23:59 2026 by rpki-client