Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/lzH2Yov3fiWBugwfQkPr-CbQzZA.roa
File: lzH2Yov3fiWBugwfQkPr-CbQzZA.roa (raw, json)
Hash identifier: SIbu8bqMFOSObFqDqe0pz8FZIm/OkR2EQDfzdHEYrkM=
Subject key identifier: 97:31:F6:62:8B:F7:7E:25:81:BA:0C:1F:42:43:EB:F8:26:D0:CD:90
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01A1B68E68ACFB6C0DD829587077D427D373
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/lzH2Yov3fiWBugwfQkPr-CbQzZA.roa
Signing time: Sat 07 Nov 2026 15:09:08 +0000
ROA not before: Sat 07 Nov 2026 15:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4601
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
2a0d:3dc0::/29 maxlen: 29
2a0d:3dc3::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b6:8e:68:ac:fb:6c:0d:d8:29:58:70:77:d4:27:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Nov 7 15:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9731f6628bf77e2581ba0c1f4243ebf826d0cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:b8:3a:52:30:eb:da:dc:0a:c2:27:2c:58:
91:58:b6:e7:20:19:ca:48:c6:fa:a9:2b:ad:b3:30:
77:84:57:56:07:16:a4:c7:80:b7:a6:b0:80:24:88:
c1:2f:df:c9:84:84:aa:4f:96:d4:27:0f:1e:aa:0a:
ab:86:20:05:f3:2f:cf:69:5f:99:c3:be:58:da:77:
b4:6d:a2:75:ed:00:4a:11:89:23:e3:0d:50:f4:2d:
6f:85:1d:af:f6:04:43:c6:29:70:57:82:95:e7:39:
a0:23:51:dc:ae:6c:8e:92:1e:cc:b7:6f:a1:6b:10:
4c:02:23:9a:1f:c5:24:72:95:37:fb:6d:35:b0:99:
2f:53:bb:c8:12:f2:64:02:c5:0d:01:0a:30:4d:6e:
ca:c9:19:3e:b6:b0:58:9c:3b:79:be:a1:08:df:ca:
1e:bc:ae:37:96:65:e0:23:f7:5d:c0:69:53:85:33:
3e:b5:67:e8:92:52:4a:9d:a5:5d:19:95:09:2c:dc:
4a:8d:77:58:83:c5:f2:7f:3c:34:53:a3:ca:f4:87:
50:7e:e8:5a:6f:3d:00:04:c2:4e:71:30:e1:14:46:
0c:82:0a:6f:97:76:27:e1:ca:f2:eb:00:42:47:ae:
d2:eb:67:c3:84:de:4b:8f:87:f3:68:50:f4:4a:e9:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:F6:62:8B:F7:7E:25:81:BA:0C:1F:42:43:EB:F8:26:D0:CD:90
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/lzH2Yov3fiWBugwfQkPr-CbQzZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:27:3f:3e:87:c1:69:0c:d4:c5:a9:f7:d8:ac:42:f0:5a:bf:
ca:4f:6d:3a:3f:6c:69:05:cc:32:1a:f2:c2:2b:7e:14:38:e8:
bc:05:c3:f2:4a:97:54:c8:e2:23:72:63:25:e7:d4:0d:59:d7:
59:b3:77:f4:80:73:d8:ab:5a:77:55:f2:95:54:01:a2:ba:39:
1b:1c:6e:1a:00:ac:25:e4:d8:ef:61:32:6e:17:32:da:e5:95:
a5:1c:e6:e6:82:50:ce:2f:f3:46:00:16:de:5d:55:d4:d2:00:
7c:85:34:e6:e3:a4:67:26:31:8c:61:00:32:13:74:51:d4:12:
bb:1a:d7:ab:ce:5a:c5:dd:f7:87:23:f6:32:b1:22:43:d8:32:
b5:be:f6:c9:c5:9b:08:2b:af:ca:0f:37:26:49:c9:65:1a:b0:
e6:a8:d1:d2:4c:12:a0:c6:c0:b6:d8:23:2f:32:07:ea:e6:6f:
d8:37:7a:b4:8f:33:f5:d3:fc:1b:02:3f:7e:d7:f4:5e:6f:41:
83:0b:b2:c9:37:d0:ae:c6:40:9d:a6:05:d9:6a:8e:81:9f:e7:
d5:a0:9f:ca:a8:77:98:eb:b1:08:53:d3:7e:cd:6c:80:b6:87:
fe:19:c7:c6:18:e4:36:64:fa:eb:b2:36:66:93:a8:bb:36:80:
81:dd:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:35:38 2026 by rpki-client