Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/lC5eXBCYaKRVcF62GOlnP5JdMyE.roa
File: lC5eXBCYaKRVcF62GOlnP5JdMyE.roa (raw, json)
Hash identifier: kgNsunmi1acOQgTaAvMGtUTAhGf1cFlQBCkuvpjTFGg=
Subject key identifier: 94:2E:5E:5C:10:98:68:A4:55:70:5E:B6:18:E9:67:3F:92:5D:33:21
Certificate issuer: /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial: 019B7F14FF2CA3B2A900060C91C98BC43E46
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/lC5eXBCYaKRVcF62GOlnP5JdMyE.roa
Signing time: Fri 02 Jan 2026 14:20:41 +0000
ROA not before: Fri 02 Jan 2026 14:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48189
IP address blocks: 91.209.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:ff:2c:a3:b2:a9:00:06:0c:91:c9:8b:c4:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Validity
Not Before: Jan 2 14:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=942e5e5c109868a455705eb618e9673f925d3321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:34:3d:d6:47:b9:7e:48:a8:2a:48:2c:4c:
32:7c:8f:1f:3e:8c:b9:8d:e2:b3:89:4c:64:6e:a0:
27:8f:20:82:49:5b:4e:31:f4:71:9e:15:86:b1:46:
77:ca:21:86:5a:ca:58:26:96:50:b8:90:7e:fa:b1:
cb:78:ff:37:0c:26:e0:d4:ea:1e:62:3b:a2:58:81:
71:4b:b4:f9:d0:bb:f8:ff:aa:56:67:b4:82:2b:a8:
57:1a:ed:88:31:d4:aa:56:b7:08:b3:3c:16:09:7c:
f3:95:ac:11:72:52:b1:70:60:07:4b:e7:2d:49:50:
9e:48:4b:73:2f:ee:76:a1:93:35:d2:e5:68:fe:18:
f1:9c:c3:e3:99:2a:29:7d:64:cc:0d:fc:2a:e1:cc:
93:cd:92:4d:4d:22:2e:2e:db:c7:4e:af:e8:d8:d5:
fc:b3:5a:93:96:aa:41:7e:2b:7d:d0:e2:a2:12:64:
5d:13:3d:3d:c5:58:e9:a6:cd:b2:22:48:88:80:e1:
5e:79:b0:e7:88:9b:03:ab:4a:f2:5a:d7:40:17:62:
44:70:c3:66:df:b8:86:df:61:e9:a0:67:3d:3f:8d:
73:27:15:db:91:74:92:d3:f6:47:7d:a9:88:2d:54:
6c:1c:34:5e:20:75:c8:27:c6:f7:aa:35:26:e2:c1:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2E:5E:5C:10:98:68:A4:55:70:5E:B6:18:E9:67:3F:92:5D:33:21
X509v3 Authority Key Identifier:
keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/lC5eXBCYaKRVcF62GOlnP5JdMyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.27.0/24
Signature Algorithm: sha256WithRSAEncryption
74:98:fc:04:b5:17:ba:c0:3d:cf:74:15:0d:b1:75:cd:cc:a2:
25:d2:9c:f6:2a:19:d0:16:31:71:a4:a9:4e:18:ad:a3:b9:9c:
56:1c:02:b4:f9:6e:4f:29:5b:ab:6e:76:a7:af:06:42:92:f2:
ef:f0:70:5e:9e:ff:7a:b5:c2:25:e1:95:41:1b:69:be:75:5e:
ac:f9:0c:11:4c:df:ce:84:b1:1e:6f:7d:0f:8e:48:e0:55:50:
f8:88:9d:31:19:e5:80:0a:1e:95:65:31:a2:22:41:43:d5:9b:
61:b5:cb:d4:83:e7:73:e8:c6:b8:b7:b3:79:c2:aa:80:ab:80:
aa:ec:30:f4:1a:b0:54:8e:77:4a:da:86:cb:1d:01:50:c5:ee:
87:d8:30:1e:a6:16:80:45:61:92:3c:05:58:4d:d7:49:94:93:
e5:e7:2c:c3:2c:b3:a9:7a:cd:f5:ca:be:34:af:bd:58:48:38:
55:c5:31:26:c6:c5:74:68:9c:4f:50:75:a7:f2:1d:b5:6f:c9:
a9:5b:61:0a:5b:b9:62:80:58:10:da:c1:63:b8:09:28:66:81:
83:44:8c:e5:c4:03:50:5e:12:9a:ad:c8:1e:78:52:fc:b4:12:
fd:5a:80:a7:44:7a:21:08:43:c6:22:5d:44:dc:82:c6:00:fc:
50:f6:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:55 2026 by rpki-client