Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lzyg-xbb0DQphaUdENPT3yyYWzY.roa
File: Lzyg-xbb0DQphaUdENPT3yyYWzY.roa (raw, json)
Hash identifier: m9lr3nZIFcFdBsVYmDUxwJz/uOsQM1a7YFbYw7lhglY=
Subject key identifier: 2F:3C:A0:FB:16:DB:D0:34:29:85:A5:1D:10:D3:D3:DF:2C:98:5B:36
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D95391CF579C8AA2DC49FC56540EBEE66
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lzyg-xbb0DQphaUdENPT3yyYWzY.roa
Signing time: Thu 16 Apr 2026 07:37:21 +0000
ROA not before: Thu 16 Apr 2026 07:37:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 81.5.177.0/24 maxlen: 24
81.5.186.0/24 maxlen: 24
81.168.70.0/24 maxlen: 24
81.168.76.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.129.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.110.0/24 maxlen: 24
82.163.5.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
89.213.166.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.178.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:39:1c:f5:79:c8:aa:2d:c4:9f:c5:65:40:eb:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 16 07:37:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f3ca0fb16dbd0342985a51d10d3d3df2c985b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:0a:e3:59:20:37:b5:df:43:6d:2c:ac:88:
ba:3f:67:57:ba:8f:df:d0:0a:05:48:e9:cc:f1:88:
97:5a:2e:33:4d:3d:e6:6c:a7:5f:1d:b5:21:ab:6a:
bd:10:f6:bd:af:d8:43:90:3b:4a:78:2a:6f:f8:82:
32:1f:84:42:54:d4:55:59:9b:cd:8f:c8:bf:e9:22:
7b:4a:9b:6f:37:98:d0:39:51:4a:9d:f6:0c:61:84:
8e:5a:6a:46:ae:c1:58:85:10:83:f5:f9:b8:80:bd:
86:97:a5:8c:1f:75:4a:ed:75:c1:87:91:11:fc:15:
04:c7:0b:90:c1:20:7b:ef:92:c9:49:7e:d0:22:ea:
51:ed:a6:1a:e2:23:ff:11:33:0f:7b:c7:a5:d6:90:
20:48:56:ad:7c:7f:df:6e:db:b4:74:23:b5:b2:38:
91:f2:e7:5f:57:2f:61:cd:06:49:80:7e:1b:df:55:
17:0a:a2:ef:10:7b:eb:32:4b:3c:ee:83:a2:d0:c9:
d5:3f:41:fa:c3:76:62:29:b1:fd:66:20:39:5f:57:
2a:ba:23:78:fd:40:6f:45:8c:6f:a7:d0:98:44:f8:
37:23:e7:e2:07:30:ff:d3:2e:e6:4a:67:20:f5:4d:
04:d3:45:f4:bd:ae:1d:d7:62:0b:88:2e:39:89:fc:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:A0:FB:16:DB:D0:34:29:85:A5:1D:10:D3:D3:DF:2C:98:5B:36
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lzyg-xbb0DQphaUdENPT3yyYWzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.177.0/24
81.5.186.0/24
81.168.70.0/24
81.168.76.0/24
81.168.80.0/24
82.152.129.0/24
82.152.255.0/24
82.153.110.0/24
82.163.5.0/24
89.28.234.0/24
89.213.5.0/24
89.213.166.0-89.213.168.255
89.213.170.0-89.213.173.255
89.213.175.0/24
89.213.177.0-89.213.178.255
185.49.124.0/24
213.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
65:94:91:66:62:2e:59:54:e0:d8:dd:f1:e9:d9:ce:ca:46:1b:
9a:d3:e3:d8:ca:84:9b:60:ee:38:27:ff:96:4e:6f:41:f1:c8:
78:67:50:a9:ba:3f:35:44:5b:22:f5:a7:c9:c6:eb:44:c3:e3:
b7:52:3d:09:0b:da:ca:03:74:b4:09:37:29:68:89:9e:cb:b9:
61:4e:5e:51:5c:12:2f:ef:6b:89:3f:55:14:58:a3:1a:c9:a8:
69:90:73:dd:7a:c3:b3:f8:bf:10:f2:1a:c7:86:07:04:af:ea:
7b:2e:d5:a9:91:35:c1:05:0f:1f:33:87:2b:4b:81:23:0d:11:
a7:97:e0:b9:e4:ec:31:02:24:4c:65:08:4a:e0:d5:33:77:03:
c0:cf:83:06:c1:cc:7a:e9:81:e5:63:a7:8b:c0:d1:20:d3:ae:
27:ac:a5:33:16:cc:2c:4e:34:13:bb:5c:e7:bb:29:99:ae:d8:
7d:08:38:6a:54:37:24:97:0f:52:4e:b4:45:10:a3:82:d9:97:
26:b4:88:8b:0d:bd:aa:fc:c1:ba:6f:83:f4:53:5b:f3:b7:59:
b5:9e:08:55:aa:86:fe:18:b0:bb:b2:0f:e9:b0:76:89:80:c5:
7e:37:56:d3:9b:78:00:26:89:7f:9b:9c:8b:60:49:41:45:dd:
9c:e5:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:15 2026 by rpki-client