Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/LsSQmC_-rCiQYaygyKvWlRY8mCY.roa
File: LsSQmC_-rCiQYaygyKvWlRY8mCY.roa (raw, json)
Hash identifier: oBqqVFOWNVmG9s/k9r52SWz1AmcmC9z1tPLhK+7cnj8=
Subject key identifier: 2E:C4:90:98:2F:FE:AC:28:90:61:AC:A0:C8:AB:D6:95:16:3C:98:26
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A0CDC6B7121216B038BDF3BC23994E7DAD
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/LsSQmC_-rCiQYaygyKvWlRY8mCY.roa
Signing time: Wed 23 Sep 2026 10:19:07 +0000
ROA not before: Wed 23 Sep 2026 10:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25393
IP address blocks: 5.149.120.0/22 maxlen: 24
5.149.124.0/22 maxlen: 24
77.87.192.0/21 maxlen: 21
78.27.224.0/19 maxlen: 24
89.184.68.0/22 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 24
195.39.197.0/24 maxlen: 24
195.177.116.0/22 maxlen: 22
2a02:2278:100::/44 maxlen: 56
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
2a02:2279::/40 maxlen: 56
2a02:2279:200::/40 maxlen: 56
2a02:2279:1200::/40 maxlen: 56
2a02:2279:1300::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:c6:b7:12:12:16:b0:38:bd:f3:bc:23:99:4e:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Sep 23 10:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec490982ffeac289061aca0c8abd695163c9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:1a:dc:9b:c0:37:8b:1a:28:35:48:35:39:
27:82:eb:c8:07:48:6a:f9:bc:50:c1:5f:4b:4e:23:
57:4b:43:c7:ef:5f:2a:20:1a:7b:dc:b6:26:e5:c6:
15:af:46:73:7a:ca:10:77:5c:6f:34:76:b0:9b:c7:
11:b0:83:5e:ba:76:51:05:5b:a7:3f:1f:44:7e:1a:
b1:2e:9c:d8:5e:ad:a3:f4:44:0e:a3:b6:cc:d6:17:
5d:41:d1:d4:50:1f:83:1c:d6:ce:e0:1f:7e:cb:1e:
4a:88:0c:06:56:e4:36:3f:2c:6d:81:5e:c8:d9:d6:
96:35:2d:0c:6f:bf:5c:3f:22:40:c9:5a:9b:7f:a3:
0f:b7:34:72:9c:98:30:2d:d5:95:a6:55:a0:08:d0:
b1:31:87:e2:50:88:df:44:12:83:6c:94:3a:58:37:
9f:d0:7f:e9:66:aa:0b:55:f1:fc:f0:e3:54:21:05:
f8:7d:00:bb:47:78:44:04:6e:93:ce:26:31:ae:1e:
5c:96:bc:70:ee:6c:77:22:dd:9b:ec:50:2d:60:34:
e0:88:2e:62:ae:d0:14:53:bf:f6:97:25:e5:9f:00:
07:c5:5b:00:e8:c7:1c:b4:f4:da:ff:36:f9:ea:1d:
c9:d3:ad:16:ed:47:f4:67:29:b1:c8:6d:40:78:07:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:90:98:2F:FE:AC:28:90:61:AC:A0:C8:AB:D6:95:16:3C:98:26
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/LsSQmC_-rCiQYaygyKvWlRY8mCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.224.0/19
89.184.68.0-89.184.79.255
89.184.88.0/21
193.178.144.0/22
195.39.197.0/24
195.177.116.0/22
IPv6:
2a02:2278:100::/44
2a02:2278:200::/40
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
60:f2:c1:73:12:eb:31:2e:52:8a:b1:66:d5:80:f5:bb:da:da:
1e:53:1b:a7:e9:13:36:9d:29:48:57:ca:c1:06:8a:55:6f:9a:
37:10:cd:e1:95:d8:52:c0:65:da:11:5e:4b:51:d2:bd:48:40:
c6:c0:24:6b:61:25:af:fe:03:be:12:c9:dd:24:b6:5b:83:84:
8b:3a:3b:32:b2:37:c8:b6:4c:f2:89:61:47:9c:7e:f3:5f:d1:
ee:ab:8f:ab:88:38:73:94:90:f8:8b:70:c7:f5:6e:81:0d:11:
14:be:a4:2c:e9:24:c4:e8:b2:fd:29:c1:9c:88:44:2d:d9:b7:
c1:a5:d3:b8:53:15:d3:74:20:d5:77:90:8e:97:9d:19:80:ab:
13:a1:e5:fc:70:c2:b6:aa:3f:c0:27:d6:d7:e7:82:2b:93:67:
33:32:c6:dd:77:ff:36:58:30:67:d5:0b:10:d7:c4:fd:3a:be:
3d:a6:b0:1f:8f:bd:70:2c:74:02:30:7e:99:7b:54:65:78:f5:
36:40:58:cd:27:a3:3f:db:93:2a:d5:8f:be:94:a3:b9:b0:c5:
9b:c6:53:f5:4f:12:1a:ed:e9:e2:94:49:81:1e:74:35:e6:8b:
67:3b:f2:5d:78:9e:90:11:83:b8:ff:3f:81:10:02:05:79:92:
9d:42:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:02:09 2026 by rpki-client