Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lVR1dj5sMZzDe2mC1aLLAXodsvM.roa
File: lVR1dj5sMZzDe2mC1aLLAXodsvM.roa (raw, json)
Hash identifier: 7IRHOeENiOkbrMRhkhrOLltELF58SWoSjbRdGFYpjZg=
Subject key identifier: 95:54:75:76:3E:6C:31:9C:C3:7B:69:82:D5:A2:CB:01:7A:1D:B2:F3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E928B6BBEF19CD03A6460C83D974986D7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lVR1dj5sMZzDe2mC1aLLAXodsvM.roa
Signing time: Thu 04 Jun 2026 12:11:11 +0000
ROA not before: Thu 04 Jun 2026 12:11:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 81.168.63.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
89.213.68.0/24 maxlen: 24
89.213.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:8b:6b:be:f1:9c:d0:3a:64:60:c8:3d:97:49:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 12:11:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=955475763e6c319cc37b6982d5a2cb017a1db2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:2c:58:8c:81:e8:c2:99:54:09:b0:80:4a:
54:d4:76:7e:83:4f:8a:a5:46:dc:9e:ec:e1:2f:f5:
06:4a:5b:59:60:08:3c:ff:b0:c2:40:4f:27:01:6f:
7f:ec:c8:95:74:ac:f6:ac:aa:76:da:40:dd:03:d2:
db:77:45:8f:b4:df:81:2b:fc:40:5c:05:2b:11:28:
33:6a:e7:43:91:0c:90:d1:0f:4a:4e:68:58:3d:25:
93:0d:19:f8:32:2e:37:34:9a:dd:9d:a9:22:2d:15:
e4:a1:38:a8:7c:c2:0d:9e:9c:7f:11:4c:ac:94:3d:
50:4a:84:9c:e4:d0:7e:fe:5a:4a:89:8b:7c:a8:e6:
34:32:64:13:31:0b:ec:e6:e3:12:43:d6:78:5d:bf:
7f:f5:53:50:a4:9c:dd:18:ce:ab:7b:f7:2e:df:57:
bc:87:ce:57:d8:92:64:9e:30:7d:15:8c:32:bb:75:
cf:cd:68:d1:b1:d4:05:1b:62:3a:8d:77:f7:16:ad:
a7:e2:22:1f:64:ba:25:3b:13:ec:dd:8e:a1:6c:db:
67:5a:12:14:35:62:0c:8e:24:5b:05:bf:75:6c:e9:
ff:90:76:b0:b4:c0:02:f9:c0:90:ff:c0:e6:09:48:
f3:d7:31:ac:ed:1b:95:de:8d:54:bd:f0:8d:45:f6:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:75:76:3E:6C:31:9C:C3:7B:69:82:D5:A2:CB:01:7A:1D:B2:F3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lVR1dj5sMZzDe2mC1aLLAXodsvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.63.0/24
82.152.102.0/24
89.213.68.0/24
89.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:85:bd:0b:2e:b6:e3:2c:1e:a6:fd:c4:a9:37:87:45:fe:8e:
5a:00:73:1b:67:ed:40:f3:60:6a:85:66:52:79:4a:8d:23:a6:
0e:8c:21:08:92:e3:7d:05:53:13:a7:f8:52:af:84:bb:67:80:
c6:b7:b4:7c:2c:10:46:6c:7d:d1:61:88:df:c1:7c:04:d6:73:
b7:65:30:13:3f:d2:11:14:a5:44:8f:88:73:bc:11:a3:ba:53:
4e:ef:98:41:8f:a7:dd:70:7d:cb:38:44:67:42:77:5c:20:8f:
97:a0:1e:15:b7:01:0c:79:43:d5:ef:af:5f:8d:53:15:5e:6e:
d7:0f:ce:69:77:19:43:ae:ca:f3:13:8c:b0:c7:a3:fa:8a:f1:
6b:c8:d4:de:cd:75:b2:5c:d8:33:1a:9a:d2:a4:ac:e1:3d:63:
87:a9:a0:9a:da:36:15:5b:95:76:8f:73:d6:5a:7e:4e:0d:0c:
a3:99:bb:09:bf:f4:3e:25:a9:2e:9a:55:2f:a2:b5:6b:95:68:
47:b1:a3:49:a4:0b:80:b4:ad:25:ff:95:8c:a8:e7:98:41:ca:
71:d0:e5:17:f8:99:8e:95:7e:f3:4d:8a:94:a6:18:ec:af:2e:
b3:1f:0f:96:1c:44:c4:b6:66:5f:49:65:28:1d:83:56:53:0f:
24:97:05:c6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6Si2u+8ZzQOmRgyD2XSYbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNjA0MTIxMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTU0NzU3NjNlNmMzMTljYzM3YjY5ODJkNWEyY2IwMTdhMWRiMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5UsWIyB6MKZVAmwgEpU1HZ+g0+K
pUbcnuzhL/UGSltZYAg8/7DCQE8nAW9/7MiVdKz2rKp22kDdA9Lbd0WPtN+BK/xA
XAUrESgzaudDkQyQ0Q9KTmhYPSWTDRn4Mi43NJrdnakiLRXkoTiofMINnpx/EUys
lD1QSoSc5NB+/lpKiYt8qOY0MmQTMQvs5uMSQ9Z4Xb9/9VNQpJzdGM6re/cu31e8
h85X2JJknjB9FYwyu3XPzWjRsdQFG2I6jXf3Fq2n4iIfZLolOxPs3Y6hbNtnWhIU
NWIMjiRbBb91bOn/kHawtMAC+cCQ/8DmCUjz1zGs7RuV3o1UvfCNRfYaxwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJVUdXY+bDGcw3tpgtWiywF6HbLzMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbFZSMWRqNXNNWnpEZTJtQzFhTExBWG9kc3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUag/AwQA
UphmAwQAWdVEAwQAWdXBMA0GCSqGSIb3DQEBCwUAA4IBAQCdhb0LLrbjLB6m/cSp
N4dF/o5aAHMbZ+1A82BqhWZSeUqNI6YOjCEIkuN9BVMTp/hSr4S7Z4DGt7R8LBBG
bH3RYYjfwXwE1nO3ZTATP9IRFKVEj4hzvBGjulNO75hBj6fdcH3LOERnQndcII+X
oB4VtwEMeUPV769fjVMVXm7XD85pdxlDrsrzE4ywx6P6ivFryNTezXWyXNgzGprS
pKzhPWOHqaCa2jYVW5V2j3PWWn5ODQyjmbsJv/Q+JakumlUvorVrlWhHsaNJpAuA
tK0l/5WMqOeYQcpx0OUX+JmOlX7zTYqUphjsry6zHw+WHETEtmZfSWUoHYNWUw8k
lwXG
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:19 2026 by rpki-client