Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LuSonklyy5ZptHoA7oiSvT7MFo.roa
File: _LuSonklyy5ZptHoA7oiSvT7MFo.roa (raw, json)
Hash identifier: P+JKKSCxoTamrDrfrhoYy3PgizQLEQu0bl6UMB0sbUk=
Subject key identifier: FC:BB:92:A2:79:25:CB:2E:59:A6:D1:E8:03:BA:22:4A:F4:FB:30:5A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F9345636E4967F811F1091E559854AE16
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LuSonklyy5ZptHoA7oiSvT7MFo.roa
Signing time: Fri 24 Jul 2026 08:37:05 +0000
ROA not before: Fri 24 Jul 2026 08:37:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.107.83.0/24 maxlen: 24
79.99.147.0/24 maxlen: 24
81.168.64.0/24 maxlen: 24
212.38.80.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:45:63:6e:49:67:f8:11:f1:09:1e:55:98:54:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 24 08:37:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcbb92a27925cb2e59a6d1e803ba224af4fb305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:bd:12:f3:1a:75:47:58:ea:c2:79:08:40:
a0:fd:1f:6a:be:d5:78:48:b4:1b:fd:81:6d:68:90:
59:07:f2:66:41:f1:0a:5a:ab:93:51:b5:55:8d:63:
01:7b:21:07:5e:91:c3:8e:56:65:82:ce:3f:f3:cc:
61:d7:85:c4:17:ca:4d:e4:f4:d4:5f:d7:35:19:08:
26:64:ae:a1:3a:42:f1:9d:74:54:e7:59:94:c8:a7:
51:40:36:d7:34:01:04:c5:92:e3:19:f6:6e:7e:54:
73:89:95:00:83:41:30:ac:b7:d2:d7:1e:fd:07:ea:
04:3b:c5:cc:fe:39:23:02:0e:5b:ac:5e:4d:c0:60:
fa:24:e0:cf:6a:b7:62:bf:ed:a7:93:08:dd:02:9a:
29:e9:45:b5:23:43:be:2b:f0:19:93:03:e4:59:d0:
cd:69:66:6b:ca:92:29:b1:3b:b4:34:c4:72:c9:37:
73:8a:50:55:91:fc:a4:70:62:d3:bf:27:3a:ea:bc:
a9:b6:29:ed:5c:ec:d3:6a:fc:5c:3c:fe:5c:c9:0f:
d1:ef:df:ea:92:6c:89:04:ee:3a:ca:55:3e:a8:dc:
f4:27:c1:b8:7f:b2:90:42:d1:2b:b7:ea:a5:9c:22:
33:f7:23:34:30:c1:45:75:9f:30:51:5a:90:c3:aa:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:92:A2:79:25:CB:2E:59:A6:D1:E8:03:BA:22:4A:F4:FB:30:5A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LuSonklyy5ZptHoA7oiSvT7MFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.83.0/24
79.99.147.0/24
81.168.64.0/24
212.38.80.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2f:84:6b:18:56:dd:f7:32:1d:c7:64:95:58:98:05:f2:a3:
cd:4d:59:6f:22:49:d5:2b:b4:b3:99:a0:81:2e:b6:1e:cb:cd:
fa:3f:20:d5:2a:cd:4e:e5:a1:e7:cf:9c:13:67:d2:76:72:1c:
6c:91:ac:5e:b1:03:43:76:af:48:dd:a4:76:9c:cc:15:3b:ef:
67:c2:05:af:d3:83:c3:1f:4c:2f:4e:bf:b9:81:f4:e3:13:ae:
12:a8:23:9c:9d:61:49:ec:79:03:20:66:51:14:d9:15:76:bb:
e1:6d:d3:f5:04:e0:a8:ca:05:a2:e8:71:30:6d:05:ce:fc:2a:
56:46:d2:7c:20:6c:0e:72:d7:e0:20:8f:ef:06:29:03:8f:42:
2a:12:4d:18:82:03:0a:d4:0e:e8:48:4b:1c:e3:62:98:0f:a1:
c3:3e:cb:a2:49:9c:d7:88:d5:e8:d3:67:66:ed:df:be:11:b5:
cf:be:34:f0:a0:d6:1c:66:4b:21:2b:fa:a0:76:d8:9f:db:4f:
0d:d7:30:e6:9d:cb:e1:69:f6:f7:04:f6:86:a1:47:0e:24:4d:
17:da:21:bb:af:f7:aa:a4:83:40:42:0e:bf:18:da:84:38:ba:
64:16:a9:5e:ee:18:78:ca:f6:95:60:f5:f0:e9:1a:47:ed:8a:
d2:12:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:46 2026 by rpki-client