Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa
File: lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa (raw, json)
Hash identifier: 8vRKXr3v7lfmQwJ46dN1JawVHnwZVtyt70o7OLDYeFA=
Subject key identifier: 95:50:80:1D:6A:AF:85:88:3C:58:25:AE:3C:32:3A:26:DA:E5:9A:85
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01A0F15699942141F6EDEAA433C75AF41B43
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa
Signing time: Wed 30 Sep 2026 08:02:59 +0000
ROA not before: Wed 30 Sep 2026 08:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213909
IP address blocks: 80.248.137.0/24 maxlen: 24
188.211.169.0/24 maxlen: 24
193.163.93.0/24 maxlen: 24
2a11:1f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:56:99:94:21:41:f6:ed:ea:a4:33:c7:5a:f4:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Sep 30 08:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9550801d6aaf85883c5825ae3c323a26dae59a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:5c:21:46:f4:d8:0d:e6:00:8e:d2:f3:b0:
f5:8f:e5:c2:38:8c:1b:5a:f8:74:07:1e:7d:9d:da:
96:9d:4f:fc:a5:71:32:96:b4:a2:a3:41:cc:19:58:
02:3d:92:d8:13:7d:04:87:d9:47:fe:4f:6c:b8:8d:
7a:58:16:20:d6:6f:04:8e:ae:ec:88:eb:2b:05:7b:
57:04:25:73:3f:c7:14:fe:fc:1a:2c:55:e7:d9:6e:
1c:c4:53:df:10:12:d5:63:a9:5c:53:44:88:80:4a:
a6:81:6d:4f:d5:f4:6f:68:40:95:37:5b:c5:98:dc:
1e:71:50:26:d6:5b:99:ba:0c:b6:b3:6b:ee:a6:d6:
6a:54:f5:00:8a:27:f6:3f:5d:97:7e:be:7b:f0:ac:
a7:cf:c0:31:90:92:4d:c9:d6:29:2a:8b:91:12:ec:
49:a0:01:a2:9d:28:32:dd:75:a2:7f:34:c7:d6:46:
bf:84:20:2b:64:04:d3:de:ed:9b:ce:1b:49:72:15:
9a:ae:a5:54:80:ec:85:1f:21:14:bb:1e:63:e7:65:
ea:bd:5b:0f:b5:53:da:4f:c1:b0:d0:c7:fd:69:9b:
b2:ca:61:e9:95:f3:fe:50:01:44:17:8d:de:80:22:
e6:d3:b9:35:39:b5:1b:36:f8:00:25:c8:c5:98:d7:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:80:1D:6A:AF:85:88:3C:58:25:AE:3C:32:3A:26:DA:E5:9A:85
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.137.0/24
188.211.169.0/24
193.163.93.0/24
IPv6:
2a11:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
1b:5c:14:e5:00:02:3f:15:45:39:dc:dc:45:80:e6:b1:f7:b2:
ef:02:20:91:78:13:6d:1b:2b:75:58:31:2b:db:7b:32:b3:cf:
e9:4e:6a:8c:a1:73:88:54:35:73:1f:be:28:75:be:39:ea:87:
8e:66:c2:3c:d3:46:31:ef:61:9a:70:03:2c:95:97:16:2e:0d:
03:41:f4:b9:32:25:cd:75:fa:3c:50:3c:36:6b:95:80:7e:ec:
a6:91:e4:10:91:25:84:35:32:22:b8:e6:61:f5:0e:13:01:62:
f3:ba:84:34:87:42:41:54:19:42:f4:54:d6:c3:23:db:b6:ce:
6e:06:4e:aa:7f:e5:e1:b7:17:83:9b:46:a4:bd:f5:3c:50:a7:
24:9c:05:a8:ce:38:67:47:55:06:ed:fa:40:e7:e6:8e:1b:21:
42:81:dc:ae:5f:7d:8a:f2:d1:be:81:e1:f9:0e:33:dc:12:73:
c3:89:24:01:32:48:a9:03:d6:83:76:c5:ab:a3:d3:10:88:4e:
7a:c3:61:8a:6c:45:d5:a7:da:ad:c2:9d:f9:2f:80:89:5f:7b:
fb:43:55:9d:d8:16:ca:2a:86:8f:94:d6:39:2f:d5:78:03:cc:
24:68:10:3e:e9:32:12:90:a9:e4:09:6f:3d:f6:f3:0b:a4:5e:
6e:f1:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:11:42 2026 by rpki-client