Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/lWNFxd1Gj0MT4veUOTu-eVVA-80.roa
File: lWNFxd1Gj0MT4veUOTu-eVVA-80.roa (raw, json)
Hash identifier: 85lL7kKUinH67VqupmaYwZZaBJjLm6Q1ocKj+e+bV0c=
Subject key identifier: 95:63:45:C5:DD:46:8F:43:13:E2:F7:94:39:3B:BE:79:55:40:FB:CD
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01A0C2EC1A926D1978CBA58D5DD326927D81
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/lWNFxd1Gj0MT4veUOTu-eVVA-80.roa
Signing time: Mon 21 Sep 2026 07:44:08 +0000
ROA not before: Mon 21 Sep 2026 07:44:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/24 maxlen: 24
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ec:1a:92:6d:19:78:cb:a5:8d:5d:d3:26:92:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Sep 21 07:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=956345c5dd468f4313e2f794393bbe795540fbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:52:00:22:ca:38:7a:66:82:9c:72:d8:a2:
e8:8c:bc:24:74:bf:de:ab:2a:a4:4b:c7:a0:9b:3e:
1b:6c:2d:14:df:4d:1e:9e:bc:1e:2e:1b:0e:36:3c:
49:d9:6f:4b:1c:40:b7:1a:e0:e6:2f:1f:0c:d4:04:
16:cf:44:35:5b:93:e9:56:ce:ac:34:24:8c:f9:b2:
3a:86:95:b8:4e:ae:e9:38:3a:dd:01:76:35:38:68:
03:22:22:9f:5c:54:a3:9c:20:c4:c2:c6:c3:38:ea:
80:46:54:be:35:61:c5:c2:d2:73:92:32:6f:e4:fc:
23:eb:7f:95:a9:43:21:dd:65:a2:ab:b1:9b:62:32:
55:ab:a4:00:23:d2:cf:36:54:04:a7:ae:48:75:16:
9f:ce:b2:41:d2:1e:17:e1:4c:a5:0e:92:e1:0c:50:
fc:6d:35:20:a1:de:fd:01:d9:ab:80:ef:97:6f:78:
b6:f3:05:db:3e:ce:a6:2d:90:be:db:cb:55:44:29:
85:c2:b3:19:c6:d1:2c:d3:76:a2:18:31:d2:95:b2:
28:82:cb:8e:15:10:3c:6f:e6:49:5f:9b:1d:3b:e4:
f8:30:26:22:5a:41:68:ba:18:a0:47:8b:7c:c2:bf:
3f:07:15:3c:b5:64:d4:70:13:3f:fc:e5:39:2e:c3:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:45:C5:DD:46:8F:43:13:E2:F7:94:39:3B:BE:79:55:40:FB:CD
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/lWNFxd1Gj0MT4veUOTu-eVVA-80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
87.192.64.0/20
87.192.82.0-87.192.87.255
87.192.216.0/22
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0/24
89.127.248.0/22
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b9:bc:41:07:18:fa:b5:fb:0f:af:3d:c1:4f:eb:e5:9d:d5:
35:fb:da:ac:b6:f0:6c:70:85:20:51:11:61:b3:6a:37:c7:8d:
11:12:32:4e:e2:b6:62:58:a6:4d:68:1f:34:f6:35:3e:b1:2a:
38:cb:7c:08:b9:4f:f6:b6:0e:94:84:55:9a:4d:6e:fc:4f:e4:
09:64:95:fd:75:ec:a1:bf:75:b2:5a:bc:30:3f:b5:0f:1f:e0:
5d:34:9f:55:59:5c:9d:ac:1a:33:b4:77:13:41:43:fb:24:8e:
9b:e3:8d:45:7a:dc:a1:a6:d0:7d:40:f1:67:1b:97:02:5b:26:
36:16:fc:ce:9d:84:87:b0:cd:b7:8b:5e:9b:17:23:e8:c1:b4:
4b:ae:cd:70:ff:f7:84:d0:0e:51:27:e6:2c:75:45:de:76:ba:
e6:ff:b0:e2:27:38:0a:11:9d:74:e5:bd:79:7a:a5:e0:63:b1:
ee:15:3f:e1:f2:46:4e:66:9b:85:2a:ac:85:36:c3:49:4a:5b:
58:88:82:37:00:cf:44:fe:81:24:59:f8:f3:86:c3:3a:4c:50:
4b:12:0e:01:ec:92:f4:0d:a4:aa:39:7e:2f:fe:c9:98:94:36:
6f:27:60:02:b0:df:a4:82:dc:fb:bd:55:73:e0:c7:9f:60:89:
4e:15:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:20:59 2026 by rpki-client