Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/LqlXRkUNKwk_-dmKpSc5KGKpKes.roa
File: LqlXRkUNKwk_-dmKpSc5KGKpKes.roa (raw, json)
Hash identifier: 1jOcNl6r3kwVN+AqleFupD5CggyBXmRcpL/EsxE+2Ks=
Subject key identifier: 2E:A9:57:46:45:0D:2B:09:3F:F9:D9:8A:A5:27:39:28:62:A9:29:EB
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 019E1668F2C9D8DD75DAB231D66B5579ADB4
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/LqlXRkUNKwk_-dmKpSc5KGKpKes.roa
Signing time: Mon 11 May 2026 09:40:37 +0000
ROA not before: Mon 11 May 2026 09:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201996
IP address blocks: 87.246.41.0/24 maxlen: 24
87.246.42.0/24 maxlen: 24
87.246.43.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:68:f2:c9:d8:dd:75:da:b2:31:d6:6b:55:79:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: May 11 09:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ea95746450d2b093ff9d98aa527392862a929eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:d5:5e:9d:e9:f5:eb:8d:c8:83:1d:33:c8:
b1:2c:ce:18:5e:28:61:3a:84:85:c0:a7:52:5d:9e:
61:2f:4b:54:75:62:5b:39:14:ca:1f:f9:a1:d4:92:
5c:3e:a3:7b:86:bf:8a:6d:df:6e:56:9c:89:d5:5e:
0c:1c:85:be:54:30:0c:df:d2:5e:0b:d8:59:55:f0:
36:8d:25:66:ea:c0:58:0e:3c:d9:9b:da:0c:cf:41:
40:74:a2:84:48:45:ff:c8:63:73:b3:e6:3b:f4:9c:
c7:38:0d:20:47:93:4b:a4:0f:74:4e:0a:75:43:af:
43:b0:66:c8:2a:e4:5a:63:42:e3:f1:0e:8f:03:b9:
2e:39:02:6f:ab:67:f0:84:df:53:eb:c9:b4:49:a2:
10:1f:78:82:81:a8:2a:07:2b:e8:48:7e:bd:be:86:
ea:81:39:e6:19:47:93:f8:13:59:75:e9:9f:70:b1:
19:ca:a1:73:2e:25:7a:df:97:fb:3c:10:eb:ee:c8:
bc:9f:61:53:0c:36:5a:26:e0:80:39:f5:7a:84:3c:
eb:d1:ae:65:f4:9b:fe:29:3d:2d:ad:04:04:ae:62:
f0:e9:ba:dc:46:ca:cc:83:e8:9b:d3:1a:78:e0:ed:
5e:39:33:a7:be:c0:e6:48:2b:03:20:3e:87:ca:ac:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:57:46:45:0D:2B:09:3F:F9:D9:8A:A5:27:39:28:62:A9:29:EB
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/LqlXRkUNKwk_-dmKpSc5KGKpKes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.41.0-87.246.43.255
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4c:fa:f9:1b:23:e1:52:15:a2:a0:0b:27:e3:b9:c7:a5:62:
fd:0f:4c:fc:a8:82:e6:e6:8e:36:50:6a:75:97:36:f2:a2:17:
f1:7a:bb:be:91:ec:39:50:e1:45:90:10:50:5d:24:d1:92:dc:
29:50:27:c5:ba:78:08:24:8a:1d:ed:9c:96:44:03:2d:fc:37:
ae:17:21:41:f8:da:d1:e3:6c:49:24:e2:77:2d:f3:a7:7b:6d:
26:c2:22:bf:c0:86:44:22:8f:eb:23:e5:8b:68:33:a7:62:0e:
29:44:0c:1b:9b:86:c3:f5:3b:7f:23:82:57:e5:43:74:20:95:
f6:63:43:e4:59:fa:35:05:d6:b1:0b:5f:69:08:3f:7c:96:27:
97:13:d9:08:d2:1f:55:1d:1f:94:72:cb:93:dd:26:64:c0:b3:
2a:14:ac:08:9f:ff:e5:f6:36:a0:e5:f4:f9:ee:32:d6:cb:1e:
f3:5a:0d:1c:90:2c:d6:69:dc:01:b7:d5:ab:e3:24:f5:58:27:
6b:28:a0:59:1d:ee:2d:3f:0e:2d:71:10:ea:c4:7f:34:ff:9e:
ff:7f:11:bd:3a:7f:cb:ac:eb:a3:f1:d4:e3:89:8a:3e:e3:f8:
2d:e7:ea:f6:00:89:7c:06:52:44:02:a0:9a:b2:05:52:91:8c:
ff:54:25:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:19 2026 by rpki-client