Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/lxI2bP-RbOseqiIeg4ll7U67NmA.roa
File: lxI2bP-RbOseqiIeg4ll7U67NmA.roa (raw, json)
Hash identifier: 9Z7qOwjkxiFujHt3P1/LDgIN/VCVJkJA0KjjP9BQQwo=
Subject key identifier: 97:12:36:6C:FF:91:6C:EB:1E:AA:22:1E:83:89:65:ED:4E:BB:36:60
Certificate issuer: /CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Certificate serial: 019F23685449718362EF32F5F36AA07110F3
Authority key identifier: D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/lxI2bP-RbOseqiIeg4ll7U67NmA.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43125
IP address blocks: 91.194.82.0/23 maxlen: 23
91.194.82.0/24 maxlen: 24
91.194.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:54:49:71:83:62:ef:32:f5:f3:6a:a0:71:10:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9712366cff916ceb1eaa221e838965ed4ebb3660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:a7:5a:1d:43:d9:20:cd:72:65:f0:55:20:
6b:f2:52:c2:e0:aa:18:06:4a:1e:39:8b:69:f6:f4:
7a:c4:73:ec:76:10:dc:d3:46:d9:94:d0:76:7f:92:
33:05:9a:2b:93:e1:59:ad:2a:92:b0:14:83:69:9f:
6d:2e:41:6d:bf:a8:8c:61:87:72:d3:39:ce:31:46:
80:0c:fb:ff:0c:77:52:da:fa:14:c3:fa:b9:59:a9:
e5:97:5c:ce:95:69:0d:53:75:0b:a1:f3:47:5f:2a:
93:26:9d:90:e6:23:cb:fc:e3:f8:25:3c:1f:f9:28:
4f:be:c3:3c:a3:af:7f:be:2a:90:28:32:98:81:17:
45:c3:71:1c:ee:6d:a2:d7:10:c0:95:11:52:6d:81:
fd:ad:f2:7b:86:94:30:fd:03:d6:e2:c9:15:11:06:
47:c6:38:80:52:81:0f:0b:bb:fe:6e:37:d7:a6:5f:
21:41:bd:45:c5:f7:ef:20:11:e8:a2:08:cf:2f:99:
ed:88:8a:2b:b3:86:58:8e:cd:0b:b0:10:97:87:e7:
ea:9e:d6:9d:d3:7c:0a:03:13:ef:59:46:00:6c:73:
0b:a0:71:f5:a4:e0:2e:b2:98:88:95:8f:52:bd:14:
c3:df:9e:44:ed:e5:06:1a:80:a7:8f:44:f5:0d:f7:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:36:6C:FF:91:6C:EB:1E:AA:22:1E:83:89:65:ED:4E:BB:36:60
X509v3 Authority Key Identifier:
keyid:D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/lxI2bP-RbOseqiIeg4ll7U67NmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.82.0/23
Signature Algorithm: sha256WithRSAEncryption
21:5a:eb:f5:fe:a8:88:2b:ef:ba:18:d2:8b:85:d2:ab:cd:35:
12:cc:e9:5d:ac:ee:3d:c5:e3:a8:d6:a2:b0:a1:15:76:c3:f2:
af:55:4c:5d:0f:83:7a:57:ae:3a:72:97:6a:87:37:fe:d7:eb:
a2:dd:c6:92:6c:b2:47:36:a0:c8:f8:d6:c0:1e:31:4a:0a:6c:
c4:2b:d3:ff:14:64:1c:78:ac:b9:d1:fa:a5:b4:8a:2a:02:76:
53:91:65:bb:3a:6c:3c:9a:4e:66:c0:85:78:ef:af:07:6b:c6:
e7:34:90:45:95:30:33:58:29:34:ec:80:53:c8:91:5f:e3:9a:
aa:b7:a9:35:4f:58:17:30:7f:2f:70:f1:53:ff:f9:d1:a1:07:
69:28:66:1f:e0:ac:71:0d:f2:a2:a5:aa:c7:5c:b2:f7:8c:13:
53:67:8e:a7:be:1a:08:78:07:b2:36:d5:b1:f6:c7:cd:42:31:
5d:ba:61:8e:bf:39:2a:5b:ef:33:b2:02:a5:1e:25:da:92:59:
2d:fe:1c:67:fd:95:1d:75:a4:d3:08:c2:6c:48:73:56:b3:29:
1a:e8:0c:25:c8:91:b9:03:9d:f4:eb:7d:e9:53:82:db:63:d8:
6d:ac:01:6f:9a:c2:56:c9:ff:1a:a2:4a:83:aa:b1:36:d2:dd:
25:f7:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:33 2026 by rpki-client