Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/lUVl9Benklpiw6Ylck0dSuxSo-Q.roa
File: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (raw, json)
Hash identifier: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=
Subject key identifier: 95:45:65:F4:17:A7:92:5A:62:C3:A6:25:72:4D:1D:4A:EC:52:A3:E4
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 019F2368D34EA5CCF29053DEB9C3F549864B
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/lUVl9Benklpiw6Ylck0dSuxSo-Q.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198857
IP address blocks: 91.223.250.0/24 maxlen: 24
194.113.248.0/24 maxlen: 24
194.116.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:4e:a5:cc:f2:90:53:de:b9:c3:f5:49:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=954565f417a7925a62c3a625724d1d4aec52a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:bd:60:ca:29:00:84:69:21:5c:70:0d:a6:
3f:28:ec:85:a2:b0:de:c8:15:ce:6d:b9:88:2c:f6:
1a:c5:c0:00:e5:89:2e:48:69:f5:37:cc:2a:ec:86:
61:56:fc:0e:86:ff:81:4f:ba:5a:27:e3:87:20:77:
14:15:9e:8c:17:29:9a:d9:38:cb:ad:37:3a:a6:69:
22:6c:30:45:8a:ff:e6:6e:1d:4d:ee:a7:26:5b:fd:
ec:0d:f8:38:55:46:5a:89:cd:9e:e4:9e:fc:00:bc:
ee:03:ea:aa:fd:79:5e:d8:39:2b:8f:cc:58:a2:ee:
1e:0d:07:c6:a6:fd:2d:21:50:2f:9f:eb:21:c9:f2:
7c:c1:4b:ef:14:0b:9e:bb:13:8a:5c:29:24:82:e3:
f1:bf:5f:ce:f9:c4:bf:cc:fa:59:47:16:c5:cc:7a:
fc:ca:5e:89:14:fa:d3:01:14:fb:0d:09:6d:f9:37:
80:a8:20:02:34:20:ec:15:a4:ac:da:95:d3:36:0d:
8b:33:09:4d:5d:fb:50:58:f0:ff:22:78:23:3f:a9:
b5:e0:6d:fc:99:4e:29:0c:b1:a9:f4:8a:de:b7:66:
08:68:3a:60:1c:e4:f1:f9:14:aa:06:c5:cb:a2:9f:
63:9d:7c:ae:27:2b:29:43:40:78:b8:54:0f:bc:ae:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:65:F4:17:A7:92:5A:62:C3:A6:25:72:4D:1D:4A:EC:52:A3:E4
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/lUVl9Benklpiw6Ylck0dSuxSo-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.250.0/24
194.113.248.0/24
194.116.154.0/23
Signature Algorithm: sha256WithRSAEncryption
21:21:f0:dd:2e:e1:a6:bb:80:aa:91:5f:13:1b:9a:d2:c2:47:
bc:09:12:ba:e8:f5:58:07:40:4d:89:b2:86:cd:ac:0c:b0:89:
6f:4b:33:8a:c8:60:4a:50:df:7b:f8:8e:e7:8b:73:b0:05:32:
c2:0c:02:15:9a:30:2a:65:75:16:2f:28:77:53:ee:05:28:47:
09:aa:f8:9a:e0:8f:1e:91:a0:6a:74:4b:04:20:aa:24:35:22:
aa:07:82:d8:28:f3:f0:54:3c:f7:fa:5f:85:b7:b0:0a:b7:26:
07:c0:a6:8b:5a:da:21:de:d5:5f:c5:c2:3b:67:b1:2e:dd:16:
c6:c8:ef:fa:bc:e1:c4:7f:38:40:1f:b0:36:2c:17:3e:3d:7c:
e6:56:ad:61:36:44:94:f5:fd:35:c8:8b:6e:f0:a3:b4:3c:44:
d2:f9:bb:4b:b8:1d:10:6f:8a:50:27:8b:93:e0:65:37:e0:0f:
c1:5f:cb:6b:ce:bb:80:9b:43:e6:f7:30:3e:a2:34:27:4e:49:
eb:01:6b:bf:49:24:7e:cc:3d:db:9b:0a:a5:5e:8a:a1:12:5a:
95:df:6d:7c:73:6c:45:b7:89:06:e9:85:ee:a5:f9:84:65:b9:
8a:bc:40:0e:4a:14:3e:1f:3c:42:b4:0d:68:b6:89:6f:c3:9e:
a9:4c:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:21 2026 by rpki-client