Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa
File: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (raw, json)
Hash identifier: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=
Subject key identifier: 96:71:B9:CD:A6:6D:FB:BC:4E:FE:10:27:F3:0B:99:4D:F4:EA:92:03
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019F3BBAC6039FB01022D9AD7D2DAC2FFB1E
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa
Signing time: Tue 07 Jul 2026 08:38:43 +0000
ROA not before: Tue 07 Jul 2026 08:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.194.86.0/24 maxlen: 24
185.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:ba:c6:03:9f:b0:10:22:d9:ad:7d:2d:ac:2f:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jul 7 08:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9671b9cda66dfbbc4efe1027f30b994df4ea9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:d3:a9:87:71:99:24:78:89:e9:2a:5c:7e:
07:6c:c3:23:90:7b:e3:f0:ee:4f:4b:22:1a:20:0f:
68:18:c0:f0:57:c7:5f:65:64:5a:20:b2:ee:6a:c6:
9b:7e:d0:2e:47:84:ab:91:89:4c:44:b5:5b:40:7d:
70:cd:f8:bd:77:45:e5:77:cd:15:20:1c:c5:51:29:
a4:6d:d5:4d:e3:08:82:48:31:62:80:45:ba:d1:26:
2a:43:83:ae:f3:07:40:60:4b:b7:5f:64:cf:f4:b7:
fb:df:de:2c:54:95:54:a2:6e:d7:db:41:f6:2a:4b:
b2:95:4a:1c:f5:3c:01:fe:85:5c:fb:02:45:ec:0e:
b5:b7:e0:4b:d2:39:ae:b9:04:e6:0e:56:ab:05:81:
37:61:6d:60:a7:0e:35:43:23:10:d1:c4:db:0d:3b:
e3:40:27:b0:8f:d4:ec:83:7a:65:20:c5:30:f6:49:
33:af:fd:6b:f4:5e:09:5f:cc:c9:38:b3:de:55:fa:
7b:13:8e:34:78:64:43:93:87:25:8c:21:2f:75:00:
7e:c0:da:0b:07:a3:d3:ff:8b:33:35:54:69:a9:5d:
5f:d0:3f:35:7f:ae:57:8c:a6:f0:7e:70:92:d1:20:
ac:1d:87:7e:c7:60:d6:f2:73:32:8f:80:8a:2c:73:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:B9:CD:A6:6D:FB:BC:4E:FE:10:27:F3:0B:99:4D:F4:EA:92:03
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.86.0/23
Signature Algorithm: sha256WithRSAEncryption
89:c6:a6:5f:7c:3a:fc:6d:7c:a8:da:a8:1c:6f:4c:25:db:39:
ec:74:31:99:a0:85:7c:fb:ec:05:60:10:ac:a0:2b:ed:1f:f3:
49:0e:82:f4:ee:77:22:50:31:81:1b:24:69:8f:02:1c:da:dd:
e5:97:f3:e2:ec:51:cf:99:2a:a5:73:94:0b:3e:c6:fa:62:22:
e5:34:cc:66:5a:d0:63:eb:cd:5a:10:a4:92:87:c5:82:0c:64:
f0:61:90:ae:31:43:48:0c:16:7e:5a:7b:97:f3:df:3f:27:eb:
f5:2c:72:f9:74:0c:34:b5:74:79:38:e9:90:55:60:7c:a4:62:
ba:6a:37:2f:b9:e8:15:34:8d:fa:9e:ff:a8:49:71:eb:d1:d9:
36:7b:3c:96:eb:37:7a:41:ef:86:96:ed:57:98:d5:13:34:d2:
82:a0:85:29:f8:d4:71:ce:14:37:75:2b:2c:53:c3:b1:47:af:
2d:f6:68:e6:4b:64:e4:34:ca:64:c0:51:15:39:fa:93:64:31:
e7:17:ac:a4:e6:fc:88:ae:f5:6e:aa:cf:40:31:d0:a3:90:1d:
54:f6:24:09:b8:8e:b3:27:b3:43:c7:6d:ef:35:14:60:5f:ad:
77:54:89:c4:f2:0a:98:6e:e0:53:95:a1:a6:db:ad:8b:e1:44:
ed:49:aa:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ87usYDn7AQItmtfS2sL/seMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjYwNzA3MDgzODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjcxYjljZGE2NmRmYmJjNGVmZTEwMjdmMzBiOTk0ZGY0ZWE5MjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2HTqYdxmSR4iekqXH4HbMMjkHvj
8O5PSyIaIA9oGMDwV8dfZWRaILLuasabftAuR4SrkYlMRLVbQH1wzfi9d0Xld80V
IBzFUSmkbdVN4wiCSDFigEW60SYqQ4Ou8wdAYEu3X2TP9Lf7394sVJVUom7X20H2
KkuylUoc9TwB/oVc+wJF7A61t+BL0jmuuQTmDlarBYE3YW1gpw41QyMQ0cTbDTvj
QCewj9Tsg3plIMUw9kkzr/1r9F4JX8zJOLPeVfp7E440eGRDk4cljCEvdQB+wNoL
B6PT/4szNVRpqV1f0D81f65XjKbwfnCS0SCsHYd+x2DW8nMyj4CKLHP0YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZxuc2mbfu8Tv4QJ/MLmU306pIDMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvbG5HNXphWnQtN3hPX2hBbjh3dVpUZlRxa2dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucJWMA0G
CSqGSIb3DQEBCwUAA4IBAQCJxqZffDr8bXyo2qgcb0wl2znsdDGZoIV8++wFYBCs
oCvtH/NJDoL07nciUDGBGyRpjwIc2t3ll/Pi7FHPmSqlc5QLPsb6YiLlNMxmWtBj
681aEKSSh8WCDGTwYZCuMUNIDBZ+WnuX898/J+v1LHL5dAw0tXR5OOmQVWB8pGK6
ajcvuegVNI36nv+oSXHr0dk2ezyW6zd6Qe+Glu1XmNUTNNKCoIUp+NRxzhQ3dSss
U8OxR68t9mjmS2TkNMpkwFEVOfqTZDHnF6yk5vyIrvVuqs9AMdCjkB1U9iQJuI6z
J7NDx23vNRRgX613VInE8gqYbuBTlaGm262L4UTtSart
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:06 2026 by rpki-client