Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa
File: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (raw, json)
Hash identifier: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=
Subject key identifier: 95:FD:10:DB:BF:CC:EC:61:4F:12:C8:15:70:95:55:C6:80:1F:5D:43
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 019F850179D779ED6690AD25DCDEE1732A9C
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa
Signing time: Tue 21 Jul 2026 14:08:14 +0000
ROA not before: Tue 21 Jul 2026 14:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50782
IP address blocks: 2.57.48.0/22 maxlen: 22
185.159.200.0/22 maxlen: 22
185.246.20.0/22 maxlen: 22
194.127.196.0/24 maxlen: 24
194.127.202.0/24 maxlen: 24
194.127.206.0/24 maxlen: 24
194.127.214.0/24 maxlen: 24
2a07:b6c0::/29 maxlen: 29
2a09:c940::/29 maxlen: 29
2a0d:6680::/29 maxlen: 29
2a0f:afc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:01:79:d7:79:ed:66:90:ad:25:dc:de:e1:73:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Jul 21 14:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95fd10dbbfccec614f12c815709555c6801f5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:75:2c:82:8e:ed:4d:64:f9:12:07:82:3a:
0e:37:b4:c8:4c:1e:05:4f:5e:d3:35:fc:f2:90:8f:
fc:f4:e5:6d:62:8d:66:6c:ca:c0:cb:de:3b:a7:db:
8b:07:f5:65:6b:aa:06:e9:bf:32:87:fa:12:13:6d:
66:5a:1d:2f:36:f6:66:de:7b:2b:06:ab:c3:45:15:
bc:49:12:6f:25:91:97:2c:a2:75:74:0f:c8:d6:e9:
7c:1a:55:5a:c1:2b:62:88:31:06:b5:2e:f4:04:9c:
b7:62:2f:ec:a3:c1:d1:23:d7:68:33:c8:e8:de:db:
12:6e:90:15:18:c7:ca:a7:4a:00:ca:1d:13:35:09:
0d:0b:05:e5:49:91:5a:9c:07:18:e6:be:95:04:3a:
f9:0c:33:80:61:85:36:7e:a8:ca:3a:c6:46:14:04:
9f:f5:ca:bf:de:a1:6f:f4:83:24:b7:68:9e:4b:93:
56:04:ab:82:4b:b7:cc:06:8f:d0:84:b2:6c:87:68:
e5:e1:22:ca:5e:7c:d1:08:6c:85:f2:b7:34:c4:d6:
3f:06:54:0e:54:73:e6:d2:10:3c:9f:48:bd:2e:37:
4e:6e:fa:c9:1d:3a:f5:6b:92:11:c4:67:5e:9e:fb:
30:58:85:37:04:a5:0e:77:bb:01:47:c2:19:de:bb:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:10:DB:BF:CC:EC:61:4F:12:C8:15:70:95:55:C6:80:1F:5D:43
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.48.0/22
185.159.200.0/22
185.246.20.0/22
194.127.196.0/24
194.127.202.0/24
194.127.206.0/24
194.127.214.0/24
IPv6:
2a07:b6c0::/29
2a09:c940::/29
2a0d:6680::/29
2a0f:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
17:e3:83:67:a4:24:04:1c:1e:e3:d0:d3:00:3f:07:77:49:0a:
43:0c:b0:4c:41:0b:89:c8:c2:e7:39:ac:e2:8c:04:8d:7f:1c:
d9:d8:4d:23:81:de:00:6b:38:ec:c9:7d:c3:d4:bd:23:fd:1b:
ca:42:29:6d:c9:ef:95:4d:36:45:c1:88:8d:be:65:61:48:42:
2e:de:da:69:a1:d2:f1:3e:f8:72:a7:bc:20:d8:24:31:5f:e7:
fd:ed:89:59:e5:45:bf:0d:02:92:b9:25:4c:02:7c:b5:82:10:
ce:36:53:f6:b1:35:1c:5e:aa:02:ca:48:5c:0e:f3:91:d1:d5:
46:0b:12:03:98:61:7a:15:2a:4d:07:9d:7d:09:64:e2:86:88:
82:2c:ff:f7:92:e4:e0:f5:df:3a:5a:dd:d7:9c:ec:b2:35:4d:
12:80:96:e8:48:50:94:d3:32:3c:c1:4d:e1:bb:e8:3d:27:48:
86:a5:a1:1a:15:1f:3a:a9:77:c1:df:8c:04:4b:8a:ba:86:c1:
5f:a9:c9:fd:35:53:80:b5:d9:c0:d1:73:04:1f:b0:ec:ad:bb:
0c:77:83:0a:aa:44:3e:4b:4d:74:38:3d:21:62:fe:bb:d4:33:
44:d0:22:c9:30:84:5d:ce:1b:3f:96:52:4c:72:2a:c5:79:17:
57:8b:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:46 2026 by rpki-client