Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/L2OPlOtvUKQ6ymKaRlnpfzSblfU.roa
File: L2OPlOtvUKQ6ymKaRlnpfzSblfU.roa (raw, json)
Hash identifier: rX7M0TPJ4i6TLdQcNxez20HLHCSjtteUcHs9ngY2OiY=
Subject key identifier: 2F:63:8F:94:EB:6F:50:A4:3A:CA:62:9A:46:59:E9:7F:34:9B:95:F5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A19BCAD7953EB80761179B15E1BE38545B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/L2OPlOtvUKQ6ymKaRlnpfzSblfU.roa
Signing time: Mon 02 Nov 2026 10:25:24 +0000
ROA not before: Mon 02 Nov 2026 10:25:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:ca:d7:95:3e:b8:07:61:17:9b:15:e1:be:38:54:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 2 10:25:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f638f94eb6f50a43aca629a4659e97f349b95f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:8b:76:6c:91:0b:71:74:8a:12:ab:90:c8:
97:e6:9f:fa:0f:43:e8:20:fb:89:69:f6:7b:ab:25:
d3:4b:f3:87:45:c5:8a:d9:9d:3a:b8:2a:85:86:f7:
4a:db:0f:82:3a:3a:c8:34:29:fd:74:92:51:a8:75:
7f:e5:05:cf:55:f6:88:f6:a9:60:f6:91:cb:c6:e5:
3c:fa:4d:31:2b:ea:13:89:0c:87:99:87:f8:13:dc:
28:ac:84:b9:1e:0e:71:2b:76:70:42:93:16:25:ed:
67:36:79:87:4a:42:58:95:59:cf:cc:99:41:81:38:
47:54:ce:ed:01:74:59:13:71:12:5d:9b:00:7f:e9:
05:ae:0d:c0:5f:ec:9a:42:65:e1:09:20:d0:52:c9:
b6:ae:fd:d2:ec:8a:3d:33:a4:99:87:d3:79:34:4f:
f2:ed:03:26:fb:fa:8c:b7:c7:e9:d9:98:ad:17:c8:
48:50:85:a0:cb:51:cb:cd:6a:7a:a4:eb:e7:01:4b:
63:83:54:60:45:2a:5c:ff:4b:ca:5b:60:46:b0:c6:
ea:71:82:7f:92:6b:b1:23:5c:34:ae:c4:ef:1c:ce:
5f:ea:a8:ee:6a:93:4f:2b:b9:f6:1c:ba:af:33:43:
eb:9a:3a:5f:2e:2d:f1:22:20:a5:1c:20:3c:ac:11:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:8F:94:EB:6F:50:A4:3A:CA:62:9A:46:59:E9:7F:34:9B:95:F5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/L2OPlOtvUKQ6ymKaRlnpfzSblfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b8:86:66:86:4b:97:6c:c8:c1:20:f5:73:e9:07:7a:06:73:
49:35:17:93:94:42:86:5d:1f:e1:81:e2:80:0d:46:6f:45:1b:
de:66:b8:38:c3:0c:8e:13:c5:41:24:0f:91:21:d3:9d:51:0d:
73:04:c8:55:16:5b:8d:29:b8:f1:7a:86:78:25:8d:eb:b8:5e:
f3:ab:d0:79:2d:8f:15:43:f6:58:34:e2:ce:38:59:b0:a5:a3:
78:86:f5:89:26:4d:52:c4:66:87:99:4d:72:f4:91:35:96:f1:
9d:f7:45:03:33:1e:a0:0d:ff:b9:72:44:a2:b7:ae:5e:c9:f9:
61:30:6b:50:a8:26:9f:1b:05:45:ef:d1:e0:05:dd:74:e5:29:
2b:74:7d:f9:61:a5:98:95:5f:91:f0:da:12:f3:65:56:c9:1e:
73:5a:33:c5:df:de:a5:b7:3d:5e:91:87:fd:e6:f8:d9:cf:1d:
2c:c5:bb:a1:a6:e4:f5:4f:de:55:cc:32:9e:77:84:b4:8a:7c:
ef:87:dc:c1:e2:45:f2:25:65:45:25:ad:0b:ca:59:83:af:19:
1f:2e:28:8d:74:52:30:3d:ae:3f:b6:95:79:c2:64:46:39:d9:
1a:0a:da:28:cb:b3:13:b9:ef:4a:3f:fb:03:3f:73:10:82:cf:
90:3b:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:10:14 2026 by rpki-client