Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/l-ePUX2kUdenPExi55wvbcvzjeE.roa
File: l-ePUX2kUdenPExi55wvbcvzjeE.roa (raw, json)
Hash identifier: VCQQ4h7et5JujMAMR2JXJzWE5yCp+HqlZaQybPczicM=
Subject key identifier: 97:E7:8F:51:7D:A4:51:D7:A7:3C:4C:62:E7:9C:2F:6D:CB:F3:8D:E1
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019F42ECD00055DD7371D04B5F74932BBE28
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/l-ePUX2kUdenPExi55wvbcvzjeE.roa
Signing time: Wed 08 Jul 2026 18:10:43 +0000
ROA not before: Wed 08 Jul 2026 18:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136787
IP address blocks: 45.157.124.0/22 maxlen: 24
45.157.124.0/24 maxlen: 24
45.157.125.0/24 maxlen: 24
45.157.126.0/24 maxlen: 24
45.157.127.0/24 maxlen: 24
95.181.216.0/24 maxlen: 24
95.181.217.0/24 maxlen: 24
95.181.218.0/24 maxlen: 24
95.181.219.0/24 maxlen: 24
167.160.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ec:d0:00:55:dd:73:71:d0:4b:5f:74:93:2b:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 8 18:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97e78f517da451d7a73c4c62e79c2f6dcbf38de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:67:07:16:e8:00:d2:cb:65:9b:f8:b5:63:
69:1a:8b:b0:67:55:2f:65:73:4e:8c:88:aa:4b:26:
46:b2:7d:95:0e:83:4b:20:a1:dc:ba:01:b1:0d:bf:
85:42:8a:e0:db:3a:11:8e:35:48:e9:8b:de:f9:88:
bb:d7:d4:91:f8:b5:49:58:93:65:b9:8b:e8:e0:35:
10:11:cd:60:04:46:65:a2:72:ae:45:d8:f2:0d:59:
88:10:48:87:7f:73:8c:b6:a3:6a:74:7e:e4:97:1a:
b8:51:b9:42:0f:bd:ae:b8:c8:82:66:43:35:4d:6d:
a3:56:18:1c:5d:65:83:2f:5a:26:7f:12:42:77:c3:
33:4a:dd:75:d3:0e:f0:75:52:08:1b:70:9a:a9:f5:
28:fd:4d:62:66:a9:e7:d5:22:32:bc:70:e9:fb:77:
7e:df:94:bf:30:d0:da:0e:55:6e:1b:a5:05:4a:da:
65:e1:11:cc:09:a9:e6:0f:0a:7c:4c:ec:2f:28:db:
9d:40:41:43:c0:a6:01:1e:8d:35:aa:9c:11:9b:ed:
8f:b7:99:5c:2a:06:0a:69:51:08:aa:44:ba:fd:7e:
14:93:4f:a3:c9:1f:9f:8c:64:45:bd:0e:dc:74:d0:
80:7a:60:2c:f3:e9:18:e6:b9:8f:cf:6d:d7:31:4b:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:8F:51:7D:A4:51:D7:A7:3C:4C:62:E7:9C:2F:6D:CB:F3:8D:E1
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/l-ePUX2kUdenPExi55wvbcvzjeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.124.0/22
95.181.216.0/22
167.160.122.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cf:08:c4:e6:4f:08:cd:1c:99:32:be:94:cb:ec:0a:3c:b0:
e0:c3:d6:01:ab:c0:a2:8f:64:f2:6f:8b:ca:77:87:47:d7:e2:
32:05:ba:b0:9c:17:c1:9d:65:6c:79:30:27:ce:bb:9d:11:dd:
7d:78:d9:ce:fb:3a:ae:54:f4:b7:84:4d:27:b3:d7:05:35:8e:
34:68:c9:37:47:99:bf:30:0d:01:27:95:19:9c:2e:7e:84:6f:
66:5d:a7:bb:b2:a6:95:31:d2:dc:19:56:03:59:91:88:93:e2:
12:c1:56:68:2e:15:7a:70:7f:48:6d:40:e1:c2:cd:20:e0:8e:
46:60:dd:b1:2a:83:e3:16:6e:cc:9f:a5:11:66:70:fe:7e:5d:
88:7e:1a:9f:8a:5a:de:ac:b9:49:d6:31:c0:a9:1a:6e:58:85:
18:22:b1:bb:9e:b7:03:ee:b2:04:ac:25:35:8e:7f:4f:e4:90:
64:29:75:d0:bd:31:33:80:65:4a:fa:cc:52:1c:c1:91:e1:50:
b1:ce:4a:b5:ac:9e:8a:c5:43:eb:6f:81:b3:56:76:4e:a4:eb:
fc:b4:c8:72:11:eb:7b:a4:19:96:cf:cd:63:2a:9e:5a:02:48:
6b:7b:06:4b:a3:d2:9e:4c:21:5e:c0:76:fe:21:70:a6:5a:5e:
0c:c7:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:49 2026 by rpki-client