Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa
File: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (raw, json)
Hash identifier: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=
Subject key identifier: 2F:E9:3F:48:BF:EC:F7:68:C7:38:D4:D0:E3:FA:AD:40:C4:34:84:2A
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019D71ACC0AD0E7FF8B8763EA481EE6B9E15
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa
Signing time: Thu 09 Apr 2026 09:57:20 +0000
ROA not before: Thu 09 Apr 2026 09:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 193.178.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:ac:c0:ad:0e:7f:f8:b8:76:3e:a4:81:ee:6b:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 9 09:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fe93f48bfecf768c738d4d0e3faad40c434842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:b8:1b:b9:be:61:e8:2f:23:68:dd:94:1e:
4c:b5:85:08:cc:af:1f:9d:40:13:f5:e2:8f:8b:2e:
52:77:61:90:f4:cd:96:6a:8b:6e:59:1b:e0:f5:3c:
69:fe:bf:8d:bc:c7:b6:c5:0f:28:c8:40:7e:77:66:
de:46:1f:86:e9:87:09:70:61:de:99:1c:6a:05:05:
45:10:54:73:ad:f4:26:ed:c0:df:37:bb:2e:3b:38:
54:b8:cd:05:fd:be:d3:36:2a:00:e1:d6:0f:4c:28:
75:a8:eb:06:9e:76:2c:17:30:43:e9:7f:c5:9d:e7:
5f:8a:5d:e1:dd:58:d0:79:ee:b7:f2:c2:c9:44:7f:
bb:c9:24:7a:39:99:38:56:4c:a0:a5:cd:03:60:f1:
c0:37:43:7e:3e:8d:0c:53:e8:23:81:36:97:3d:2a:
54:c3:4b:e0:da:d8:55:74:4f:a8:c7:23:ae:33:ce:
27:4c:eb:0f:f6:47:03:f1:87:f4:3b:d6:88:8c:a4:
bc:d9:59:23:ee:28:7a:f4:23:d9:aa:52:2a:44:c9:
4f:0b:b3:d7:2a:0e:f4:81:83:b6:4e:47:c0:c7:37:
53:b1:69:e2:e0:e5:eb:0b:27:97:ba:a8:3c:65:c9:
d8:6f:0e:90:b7:ff:9f:4e:ce:78:6b:d0:6a:6b:e1:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:3F:48:BF:EC:F7:68:C7:38:D4:D0:E3:FA:AD:40:C4:34:84:2A
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.33.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:7c:3c:39:16:10:ec:ef:3b:a2:fb:d1:2c:81:90:35:ab:
b4:66:4a:4c:f7:7c:a7:9d:45:f2:9b:73:67:71:ac:f9:84:8b:
41:27:a9:eb:7e:96:d7:87:e0:93:f9:8a:5b:70:3f:32:b1:56:
44:e5:bb:f6:83:59:c5:9c:10:eb:64:da:e2:35:06:83:02:e3:
aa:04:6d:9d:9e:68:12:83:31:9e:1b:43:e4:59:36:b6:c6:d6:
a8:d6:3a:4c:c8:62:78:4d:8d:87:0e:a3:f2:dc:b1:ac:be:63:
53:a4:0b:7c:34:98:8e:d3:82:74:8d:11:9c:b3:d1:2c:2a:87:
c6:de:70:9a:5f:fd:9d:ab:24:83:c4:0b:32:a7:a2:21:aa:de:
36:6b:eb:87:88:a3:3f:33:8a:d2:a8:02:20:5d:98:d1:30:ab:
7b:59:bc:a3:0d:77:9c:b2:0e:4a:71:66:a2:61:19:07:fb:7b:
cc:51:80:a4:8c:27:4e:60:3d:dc:93:65:fd:4b:b4:24:47:3f:
c1:d8:9a:24:9c:4c:99:5b:43:21:92:3b:03:96:65:b0:66:37:
53:2f:18:90:78:c0:82:a2:ce:45:b8:09:55:2b:95:da:87:cc:
5a:2d:b5:16:27:38:20:f9:87:a1:ca:a1:62:3d:24:9d:96:5b:
6a:26:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:10 2026 by rpki-client