Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/liTgDvCT_doZsu5bATRt_7iAAsw.roa
File: liTgDvCT_doZsu5bATRt_7iAAsw.roa (raw, json)
Hash identifier: +6VadlUXihiz/RNrdHfUpiTrmBAWYc1wih7FLFGRFpQ=
Subject key identifier: 96:24:E0:0E:F0:93:FD:DA:19:B2:EE:5B:01:34:6D:FF:B8:80:02:CC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019C52226DBF9B3C5380B50575BB25FE83DC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/liTgDvCT_doZsu5bATRt_7iAAsw.roa
Signing time: Thu 12 Feb 2026 13:55:13 +0000
ROA not before: Thu 12 Feb 2026 13:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.150.168.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
89.40.161.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.73.0/24 maxlen: 24
91.242.123.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
91.242.126.0/24 maxlen: 24
91.242.127.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
193.31.104.0/22 maxlen: 22
195.138.103.0/24 maxlen: 24
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:22:6d:bf:9b:3c:53:80:b5:05:75:bb:25:fe:83:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Feb 12 13:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9624e00ef093fdda19b2ee5b01346dffb88002cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:d5:c4:5a:45:52:38:f4:aa:1b:31:cf:af:
54:42:83:0a:79:6c:6a:81:51:42:88:2f:43:29:22:
35:a2:6d:7c:ee:10:ac:96:98:9c:3b:2d:e4:af:ec:
1a:57:2a:59:e6:99:09:ec:f3:de:fe:a4:81:b6:48:
f9:dc:22:53:29:2f:39:76:1c:71:46:ff:82:f4:00:
e1:d8:a9:58:b8:7b:85:8c:f4:13:b5:c7:43:63:7c:
95:2f:da:33:69:e5:9f:57:51:54:15:0d:a5:4f:56:
a8:bc:5b:af:4a:98:91:3b:00:f6:23:75:80:b1:5f:
ca:4a:17:c2:86:2d:43:c2:fa:6f:c8:5a:f9:d0:7f:
0d:96:9b:43:bf:9a:71:eb:11:10:7b:7e:af:d9:2c:
34:05:c1:ed:83:ef:ba:c4:15:16:74:a6:07:3a:e6:
7b:3c:ec:23:fd:8a:b0:4a:44:34:c1:53:3c:c1:c5:
20:a0:ab:d2:d3:72:d1:cb:3f:79:f6:dc:8f:6b:7f:
49:f8:fd:ac:c8:6e:ca:3c:63:71:dd:55:02:c6:a5:
37:8c:89:da:28:26:e7:34:01:32:cd:be:e5:4b:52:
db:7e:1b:a4:1d:f4:40:88:80:95:37:f8:99:eb:98:
b7:cb:2b:ed:e2:d5:cc:17:e3:66:31:7c:5b:18:c1:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:E0:0E:F0:93:FD:DA:19:B2:EE:5B:01:34:6D:FF:B8:80:02:CC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/liTgDvCT_doZsu5bATRt_7iAAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.67.117.0/24
45.150.168.0/22
45.151.196.0/22
89.40.161.0/24
91.242.70.0-91.242.73.255
91.242.123.0-91.242.124.255
91.242.126.0/23
185.180.145.0/24
193.31.104.0/22
195.138.103.0/24
195.138.109.0-195.138.111.255
195.138.113.0/24
195.138.115.0/24
195.138.120.0/24
195.138.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:83:9e:88:c7:15:6c:a7:17:7c:81:0f:35:15:86:0a:c8:c0:
25:30:6a:7f:67:17:42:53:f5:7a:48:eb:fd:47:df:3c:b6:fd:
1d:ae:27:c1:e5:3a:01:03:e2:56:95:85:f8:67:7c:51:5a:2f:
15:36:b6:62:74:17:c9:21:f5:71:73:1d:70:f0:d2:5b:78:be:
10:dd:86:ed:55:93:55:64:40:38:b3:54:fe:73:2f:f4:bb:dd:
9b:1f:a2:df:f3:f1:cc:ac:ff:62:1c:60:e0:c8:25:05:20:b7:
cb:41:40:62:3a:18:41:bd:14:81:30:ce:c3:c6:fd:22:77:66:
61:eb:44:69:40:09:d6:6e:fa:57:b6:f7:e1:6e:46:08:d5:a0:
ae:49:5f:fe:30:6e:fe:40:96:2f:d4:2c:f4:2e:d3:62:07:9a:
7f:8f:dc:48:00:3c:fb:15:4b:4b:f4:ea:62:37:53:12:22:45:
c3:29:67:dc:5f:a9:c4:5a:cb:45:35:d2:2b:0e:64:a1:c4:e4:
77:6d:06:bf:fc:fc:9f:d0:8a:1f:c7:ca:f3:c5:17:76:61:e7:
12:7c:e0:96:ef:95:03:10:94:8b:4e:b0:39:44:3c:4b:6c:ab:
24:c1:ec:57:8f:b6:eb:2d:62:39:a0:2c:9f:cd:91:26:a0:f0:
56:d1:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:46 2026 by rpki-client