Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LvBj94-TugLZPHKjYSpZnAppXY.roa
File: 9LvBj94-TugLZPHKjYSpZnAppXY.roa (raw, json)
Hash identifier: dftURLQgyteMGpwayhqIOsnaddlV0WDWSkoehV9auCU=
Subject key identifier: F4:BB:C1:8F:DE:3E:4E:E8:0B:64:F1:CA:8D:84:A9:66:70:29:A5:76
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A1A670E23AA54E9F595652B6ECA61933EE
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LvBj94-TugLZPHKjYSpZnAppXY.roa
Signing time: Wed 04 Nov 2026 12:02:58 +0000
ROA not before: Wed 04 Nov 2026 12:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.158.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.243.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:70:e2:3a:a5:4e:9f:59:56:52:b6:ec:a6:19:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 4 12:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4bbc18fde3e4ee80b64f1ca8d84a9667029a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:51:ce:c0:be:e5:77:39:96:bc:57:11:1b:
71:94:67:4a:1d:87:f7:ec:37:61:85:40:30:d4:9a:
71:a4:86:87:16:af:2a:d9:20:84:6c:06:24:71:56:
60:e8:e4:80:5f:0e:fc:1b:5e:cd:80:41:15:6e:ae:
b0:8f:69:05:f6:42:a6:fa:bd:62:c1:75:7e:ef:68:
43:60:07:1f:c0:80:23:5f:53:03:db:be:09:0c:75:
d5:83:9e:44:d5:a5:f6:1b:ba:6e:6f:90:a0:77:8e:
69:5c:d9:ea:84:b5:40:ad:a1:a7:89:97:eb:b0:8b:
d4:2c:8f:1b:9c:de:3c:eb:16:e0:da:8a:00:23:3d:
b3:44:26:cd:14:f8:4e:ad:9f:a2:ca:7d:a5:e3:80:
b2:5a:06:9c:b3:8d:b5:49:cb:0e:6e:61:e7:bc:3d:
86:4a:b8:af:fd:d8:93:75:aa:e0:af:58:a8:58:3f:
51:7c:76:3b:5b:ed:fc:7c:16:f6:1b:1d:c3:38:a3:
35:ef:a4:fd:cd:9f:ec:1f:5f:87:b1:a6:52:be:96:
74:f2:c0:71:74:1b:e4:e9:dd:73:38:fb:f8:0d:78:
df:c7:54:b1:92:24:94:cf:f1:64:0f:2e:bc:9b:d2:
e3:dc:53:79:d8:f9:8e:d5:cf:a2:8d:3c:ab:8e:84:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:C1:8F:DE:3E:4E:E8:0B:64:F1:CA:8D:84:A9:66:70:29:A5:76
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9LvBj94-TugLZPHKjYSpZnAppXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0/24
178.239.158.0/24
185.26.32.0/24
185.243.48.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4a:27:b7:f3:44:04:e4:91:62:43:dd:66:bc:38:13:95:47:
a4:dc:97:71:20:6d:02:d9:5a:e6:8b:ab:e9:e7:02:79:44:9c:
d1:96:e1:56:e5:5c:60:96:bc:fc:69:aa:32:ee:13:2f:87:2f:
6a:dc:62:ff:a0:fd:ab:a5:f6:ed:33:c7:8c:e0:92:46:e1:19:
96:d4:b9:8a:7a:77:1e:23:96:5f:97:f1:3a:36:64:72:a2:b0:
c6:16:ed:f2:37:e5:e5:f6:89:22:90:47:89:ad:74:41:f3:aa:
85:bd:67:ff:98:26:be:ff:80:ec:53:c7:e3:ec:22:93:3a:1c:
c9:63:4f:a7:29:c4:8f:63:ea:5b:43:29:d5:d7:b6:e5:06:48:
33:8d:c8:86:40:2d:6b:fe:fa:6f:83:91:e3:81:a3:56:06:33:
a5:90:44:92:31:27:58:28:dd:fb:e0:06:73:42:06:e8:ef:56:
18:ee:54:a4:5a:4e:a0:2d:89:ee:f9:61:86:fc:7b:ac:bd:7a:
b2:46:4f:fe:76:d2:ba:a1:ae:16:14:f7:2f:76:04:0a:d9:d6:
99:61:f0:a9:21:2f:fd:7d:73:9e:69:b6:0d:bd:35:22:7d:8c:
d4:0e:b2:f9:4f:7c:60:e5:a2:9c:30:b2:df:24:07:7d:1d:96:
0a:11:f8:c7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGmcOI6pU6fWVZStuymGTPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYxMTA0MTIwMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGJiYzE4ZmRlM2U0ZWU4MGI2NGYxY2E4ZDg0YTk2NjcwMjlhNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTBRzsC+5Xc5lrxXERtxlGdKHYf3
7DdhhUAw1JpxpIaHFq8q2SCEbAYkcVZg6OSAXw78G17NgEEVbq6wj2kF9kKm+r1i
wXV+72hDYAcfwIAjX1MD274JDHXVg55E1aX2G7pub5Cgd45pXNnqhLVAraGniZfr
sIvULI8bnN486xbg2ooAIz2zRCbNFPhOrZ+iyn2l44CyWgacs421ScsObmHnvD2G
Sriv/diTdargr1ioWD9RfHY7W+38fBb2Gx3DOKM176T9zZ/sH1+HsaZSvpZ08sBx
dBvk6d1zOPv4DXjfx1SxkiSUz/FkDy68m9Lj3FN52PmO1c+ijTyrjoQDWQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPS7wY/ePk7oC2Txyo2EqWZwKaV2MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvOUx2Qmo5NC1UdWdMWlBIS2pZU3BabkFwcFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsu+XAwQA
su+eAwQAuRogAwQAufMwMA0GCSqGSIb3DQEBCwUAA4IBAQBzSie380QE5JFiQ91m
vDgTlUek3JdxIG0C2Vrmi6vp5wJ5RJzRluFW5Vxglrz8aaoy7hMvhy9q3GL/oP2r
pfbtM8eM4JJG4RmW1LmKenceI5Zfl/E6NmRyorDGFu3yN+Xl9okikEeJrXRB86qF
vWf/mCa+/4DsU8fj7CKTOhzJY0+nKcSPY+pbQynV17blBkgzjciGQC1r/vpvg5Hj
gaNWBjOlkESSMSdYKN374AZzQgbo71YY7lSkWk6gLYnu+WGG/HusvXqyRk/+dtK6
oa4WFPcvdgQK2daZYfCpIS/9fXOeabYNvTUifYzUDrL5T3xg5aKcMLLfJAd9HZYK
EfjH
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:40 2026 by rpki-client