Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LsqZJ-liqkwzfmGVzUmfgPJoIps.roa
File: LsqZJ-liqkwzfmGVzUmfgPJoIps.roa (raw, json)
Hash identifier: qjgzTQsnXIhhZwzB6boh9+lS8GzNg2OcdfodevJM6LU=
Subject key identifier: 2E:CA:99:27:E9:62:AA:4C:33:7E:61:95:CD:49:9F:80:F2:68:22:9B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01A0A93D162520DCE3BD5C3BD6DC68E736F9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LsqZJ-liqkwzfmGVzUmfgPJoIps.roa
Signing time: Wed 16 Sep 2026 08:02:27 +0000
ROA not before: Wed 16 Sep 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12332
IP address blocks: 77.34.0.0/15 maxlen: 24
77.34.72.0/24 maxlen: 24
81.2.0.0/18 maxlen: 19
81.2.0.0/19 maxlen: 24
82.162.0.0/16 maxlen: 18
86.102.0.0/16 maxlen: 18
212.91.192.0/19 maxlen: 24
212.107.192.0/19 maxlen: 24
212.107.192.0/20 maxlen: 24
212.107.208.0/20 maxlen: 24
212.122.0.0/19 maxlen: 24
212.122.0.0/20 maxlen: 24
212.122.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:3d:16:25:20:dc:e3:bd:5c:3b:d6:dc:68:e7:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 16 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eca9927e962aa4c337e6195cd499f80f268229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:b2:9b:b8:70:b9:97:19:39:4b:b0:07:81:
2e:94:55:77:98:c3:cc:a1:ca:84:b4:2e:ed:dd:86:
6c:a9:72:8a:e3:a2:42:0c:34:25:ca:ed:8b:3c:51:
9f:82:95:a1:fb:1a:58:c2:8d:6b:3c:42:40:da:95:
99:63:7d:fe:e0:8f:94:ec:f7:3e:0b:80:30:c5:2e:
62:1f:ba:dc:a0:69:65:2b:d1:b7:82:8e:8e:d7:12:
af:a8:2d:5b:f1:af:96:70:82:d5:21:ed:8e:d1:82:
d1:3d:90:61:c1:81:6f:60:e3:fe:c9:12:c2:77:93:
ac:6c:e4:1e:63:13:70:7a:f8:d9:76:22:63:06:8a:
2f:d4:6d:aa:e6:48:d5:53:72:cf:27:89:b7:8b:e6:
57:d2:83:a4:8b:27:9e:fa:5c:ea:47:91:c1:ea:2a:
ab:76:87:a9:b8:02:c6:7a:6e:3d:37:bb:5a:c0:28:
05:0d:2d:23:60:f9:f9:49:1b:34:d2:02:cc:2d:69:
89:f5:76:11:0d:3c:33:4d:35:06:08:c6:f0:17:0a:
a9:61:58:67:4c:3f:3f:4e:83:b0:e2:34:02:81:49:
44:ed:00:dd:7a:5b:31:72:9a:b6:f0:18:6e:0d:5e:
b8:2a:ce:24:af:11:83:e9:5f:b8:7d:9e:a4:f2:ca:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:99:27:E9:62:AA:4C:33:7E:61:95:CD:49:9F:80:F2:68:22:9B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LsqZJ-liqkwzfmGVzUmfgPJoIps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.34.0.0/15
81.2.0.0/18
82.162.0.0/16
86.102.0.0/16
212.91.192.0/19
212.107.192.0/19
212.122.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:24:ee:10:8a:01:06:cc:cd:df:a7:6c:2d:84:d6:a5:4d:9e:
51:ad:c8:03:66:32:a2:03:0c:88:41:c2:0c:34:5a:ee:5a:d3:
d3:52:84:f0:d4:f5:44:a7:d7:c7:7b:2f:38:0a:65:82:fe:fb:
3f:7d:e5:91:63:66:23:45:81:ad:d5:84:54:b0:21:4a:88:5d:
8e:ad:df:6a:50:9d:d9:92:34:a8:03:01:17:ab:6d:39:3c:7f:
ed:b2:47:13:55:5c:3d:15:0a:f2:f9:aa:0b:69:1d:66:ad:42:
14:cc:df:1d:8f:2b:ca:ab:48:7b:9c:bd:25:73:e0:1d:0c:08:
fc:be:2b:5f:cd:4b:28:d4:03:6e:2a:06:aa:0c:65:42:3f:d3:
c4:fa:aa:75:65:ac:f3:d5:99:01:63:27:85:6f:42:da:2e:9d:
60:da:c9:ed:8a:db:ed:44:71:98:b4:eb:ee:4f:a2:07:70:de:
f6:a9:00:e4:f4:97:64:d3:64:8b:63:80:73:e3:36:e1:9c:22:
f5:b7:45:63:d6:fd:60:1d:14:34:6e:23:d5:5a:21:ad:7b:f1:
d9:bd:28:3b:49:e4:f8:92:26:de:e4:eb:b9:01:ba:77:2a:36:
61:16:79:d9:2c:f8:a2:d5:fc:f9:98:20:07:64:08:bf:06:c6:
1b:56:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:13:51 2026 by rpki-client