Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/LrkAE9AJMIk4TOJUHMpyNfOgBGg.roa
File: LrkAE9AJMIk4TOJUHMpyNfOgBGg.roa (raw, json)
Hash identifier: 2jzFr0XcYVi6XRnDyhJaxPz64QN8ivIhx4Kvb2zHpWA=
Subject key identifier: 2E:B9:00:13:D0:09:30:89:38:4C:E2:54:1C:CA:72:35:F3:A0:04:68
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019F98B3490BA52EC922DA36612A6A7773F6
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/LrkAE9AJMIk4TOJUHMpyNfOgBGg.roa
Signing time: Sat 25 Jul 2026 09:55:14 +0000
ROA not before: Sat 25 Jul 2026 09:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35362
IP address blocks: 37.17.240.0/22 maxlen: 22
95.158.0.0/18 maxlen: 18
146.0.80.0/21 maxlen: 21
185.11.28.0/22 maxlen: 22
2a07:1080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:b3:49:0b:a5:2e:c9:22:da:36:61:2a:6a:77:73:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jul 25 09:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb90013d0093089384ce2541cca7235f3a00468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:52:05:27:d0:dd:46:02:de:f0:04:a4:81:
26:95:a0:e6:da:c4:f6:f0:44:a7:64:88:53:1d:f5:
5f:f3:31:a3:43:80:0f:24:42:7f:86:5b:b6:eb:f2:
05:e1:12:b1:a0:79:26:ee:ca:02:b4:69:bc:1b:76:
4d:a4:e0:28:2d:48:15:35:1d:b9:c8:50:18:e1:9a:
cb:7b:5f:69:30:ce:17:49:68:2f:19:15:fe:dd:a0:
f6:e1:38:07:1d:a3:c1:7d:51:6a:89:d0:f2:2b:e5:
01:8a:52:e3:dc:df:e8:51:ab:51:3a:64:d9:89:7d:
a2:80:cf:20:11:25:c8:49:46:7d:ce:c1:fb:65:72:
8e:00:4f:83:93:af:cb:35:29:c8:46:6e:5d:6e:4e:
ec:1f:c3:61:66:5d:e0:7b:5b:83:51:12:ce:46:67:
8f:f9:28:21:ba:d8:81:67:6f:62:6a:50:7d:41:a9:
51:46:6e:97:a8:51:a3:b5:bc:e2:03:22:21:f9:13:
0a:13:fc:0d:f1:70:71:15:9d:99:76:4d:3b:ef:fa:
bf:04:cd:27:23:52:ef:2a:7e:63:77:0f:eb:66:70:
09:f8:b6:79:e6:09:4e:5f:81:0c:d6:48:ce:f8:f1:
a2:e3:73:3a:a9:b2:b9:1a:a1:8c:f4:1d:28:31:b3:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:00:13:D0:09:30:89:38:4C:E2:54:1C:CA:72:35:F3:A0:04:68
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/LrkAE9AJMIk4TOJUHMpyNfOgBGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.240.0/22
95.158.0.0/18
146.0.80.0/21
185.11.28.0/22
IPv6:
2a07:1080::/29
Signature Algorithm: sha256WithRSAEncryption
02:a4:79:1b:25:b2:85:61:e4:ff:6c:83:64:56:6d:a8:7c:6e:
47:a1:bf:82:1f:29:e5:5e:b7:1a:e0:85:00:fb:79:5e:c4:e7:
64:b8:0d:9a:4b:e5:a6:9f:c4:fd:3b:54:14:1d:4f:23:fd:8a:
ec:91:ac:0c:b7:8b:77:c9:af:03:58:a9:df:2c:c7:bb:c3:f5:
eb:80:94:84:68:8b:42:05:38:a1:a0:af:83:62:99:54:c5:d3:
6c:25:b7:d5:f7:57:37:7e:60:5f:b3:59:2c:d4:97:e1:37:a4:
b5:a6:28:2f:ca:7e:1f:99:db:87:79:ad:bf:55:85:64:41:64:
28:0c:56:48:d4:76:91:00:4d:4b:69:23:56:14:7e:f2:fe:36:
4f:bc:73:b2:73:eb:c1:8f:38:44:71:5a:aa:77:0d:15:00:ae:
d1:ff:f2:33:78:f4:ca:23:c6:3a:d0:5b:37:09:0f:a7:ec:e4:
9e:15:71:b0:3a:c1:d9:83:76:77:17:6f:af:3b:59:fa:1a:26:
74:3e:72:02:14:f2:c9:2c:4c:63:aa:51:81:f5:e3:79:8e:f4:
2b:a1:f4:7c:44:0c:d4:fa:d7:5e:ae:88:d1:aa:65:ec:35:2e:
1a:22:4e:25:56:53:1a:a4:10:f2:6c:84:9a:64:c5:1f:03:63:
83:bf:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:30 2026 by rpki-client