Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lLMQIaroKYWFB31VcL9dmnECkRk.roa
File: lLMQIaroKYWFB31VcL9dmnECkRk.roa (raw, json)
Hash identifier: vt5R6brp6Jbqtmbr11+IGTCsyRzKqudpEUz3BtmTXKE=
Subject key identifier: 94:B3:10:21:AA:E8:29:85:85:07:7D:55:70:BF:5D:9A:71:02:91:19
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 01A0A963877DDF1D62722560C6779C5C22E5
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lLMQIaroKYWFB31VcL9dmnECkRk.roa
Signing time: Wed 16 Sep 2026 08:44:27 +0000
ROA not before: Wed 16 Sep 2026 08:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33923
IP address blocks: 94.246.128.0/18 maxlen: 32
94.246.128.0/19 maxlen: 19
94.246.160.0/19 maxlen: 19
185.183.236.0/22 maxlen: 32
194.6.246.0/24 maxlen: 32
194.145.184.0/22 maxlen: 32
2a00:1a40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:63:87:7d:df:1d:62:72:25:60:c6:77:9c:5c:22:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Sep 16 08:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b31021aae8298585077d5570bf5d9a71029119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:8f:df:4c:d3:f7:44:13:1c:dd:af:ec:15:
d5:45:b7:69:1c:6e:31:40:68:8a:2e:cb:72:30:70:
30:31:1d:7d:84:bc:71:75:0b:87:11:aa:9c:c1:79:
44:c1:cc:a8:35:a2:b2:b4:d8:36:0f:7f:11:eb:e7:
79:86:4a:62:3b:0c:d0:06:01:17:ac:f0:82:ff:c7:
8a:ec:40:34:83:16:3d:01:80:53:3b:23:8d:04:dd:
87:c9:12:b4:92:c6:2c:d3:1e:9d:5c:36:36:16:ae:
81:81:c2:9e:76:5b:27:3f:c4:c6:7d:7b:d9:5d:20:
dc:97:6d:2c:58:55:22:92:ab:09:e6:e0:05:f8:43:
b9:4a:a0:b4:42:0f:d2:b7:d1:34:20:3c:57:95:f0:
ce:28:c2:b4:c6:90:a4:2b:68:10:08:e2:2a:b1:68:
ab:d0:7a:44:11:7e:51:0a:52:56:c3:53:24:15:6e:
79:b0:1d:50:07:ac:d4:f9:e7:2f:b0:3b:34:30:c0:
76:ce:ee:b2:e0:7c:8f:81:58:c9:f0:7f:0d:3b:e3:
3d:77:6d:0b:f9:9c:e2:71:a9:c1:3e:c0:2b:f2:5d:
9d:92:5c:44:bd:bb:77:1c:24:30:9e:17:74:f2:70:
a3:2b:51:77:2e:24:11:ec:72:8b:8c:56:40:61:4b:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:10:21:AA:E8:29:85:85:07:7D:55:70:BF:5D:9A:71:02:91:19
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lLMQIaroKYWFB31VcL9dmnECkRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.128.0/18
185.183.236.0/22
194.6.246.0/24
194.145.184.0/22
IPv6:
2a00:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
27:40:70:6f:c6:c1:c9:b3:9b:f9:68:11:e5:d7:ab:b2:9f:15:
7d:aa:4e:3b:9b:ed:51:32:e6:b8:1a:2f:9e:98:74:66:6a:cf:
33:a0:95:2b:72:11:55:a8:f2:b0:b5:57:31:fb:ee:d6:b2:aa:
16:89:d8:dc:61:05:a4:c2:81:d5:f8:54:92:57:59:a0:f8:84:
37:d2:34:cd:9c:1b:85:61:15:06:f4:50:25:61:e2:36:b5:49:
f2:2c:25:af:d2:2a:3d:7f:f5:91:21:e2:05:65:a9:65:e1:42:
d9:60:3d:f5:5e:1c:e2:a7:80:9d:a2:25:bd:b2:f7:16:78:97:
19:87:60:ef:c6:e2:64:49:35:93:b9:33:2c:c5:6f:02:9a:44:
61:5b:5d:dc:66:74:60:32:ec:31:67:47:2f:57:cf:07:1b:9a:
9e:57:25:b1:d9:52:bf:88:99:82:a4:b2:7a:09:fe:43:d2:0d:
ab:d4:4c:08:91:06:9e:29:d7:e8:5a:39:1f:31:50:54:4c:1e:
f1:c5:9c:d9:fa:54:a4:02:02:5b:73:d7:76:5d:e3:c6:df:aa:
91:c3:f4:9f:22:62:a4:dd:31:49:2a:bf:1e:7a:09:8a:c1:69:
6e:c4:0d:f1:f1:60:9f:d6:ae:e7:01:29:19:95:04:7f:6d:08:
0d:3d:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:09 2026 by rpki-client