Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa
File: lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa (raw, json)
Hash identifier: M0V4xWc5XxTvzmYTKrejIX4n2xNZ52yU26YzaFysbjM=
Subject key identifier: 95:78:1E:3B:AB:0B:F9:92:06:B3:54:1B:BB:AA:FA:86:13:99:F2:94
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A0D0B2A50FE63128B59440D49F40690F28
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa
Signing time: Wed 23 Sep 2026 23:56:03 +0000
ROA not before: Wed 23 Sep 2026 23:56:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209763
IP address blocks: 94.141.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b2:a5:0f:e6:31:28:b5:94:40:d4:9f:40:69:0f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 23 23:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95781e3bab0bf99206b3541bbbaafa861399f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:34:0f:45:39:74:51:46:9b:8e:41:db:57:
db:8a:ec:5a:ea:ce:bd:05:70:fc:bc:71:f6:41:81:
4d:41:69:42:da:36:6a:68:74:6a:4e:18:c8:36:f8:
a2:c2:81:18:d0:72:b0:23:a1:03:1e:f1:e6:35:e4:
04:4a:96:5a:8c:30:ab:a0:34:37:79:6c:d0:9d:aa:
be:a9:6b:de:5a:49:31:9b:1a:25:a0:53:65:17:8d:
e2:77:ab:91:5a:7f:91:df:30:cf:ca:ce:db:76:9e:
b4:63:40:2a:fb:4f:8c:9d:de:34:b0:af:37:6f:0e:
84:27:6b:41:02:57:91:bb:74:6b:7a:62:15:55:69:
dd:4d:b9:93:48:83:d6:9c:df:7c:8e:00:8f:1f:dd:
c0:7a:91:61:68:fa:a8:cc:0e:a0:06:1a:98:73:ef:
bb:19:f6:f5:b7:1f:8f:37:eb:81:8a:81:58:f9:86:
33:30:14:5e:9d:fb:e1:f4:03:28:8d:a2:be:91:79:
fe:ae:9d:b0:20:78:be:58:28:34:e7:05:c5:85:fa:
1f:a8:ab:29:f6:7b:cf:47:05:9a:2c:7a:47:51:0d:
fe:89:14:b0:da:01:4c:9a:90:54:c1:3a:b4:ab:4f:
01:50:78:17:af:fc:df:90:11:61:01:b9:e8:87:08:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:1E:3B:AB:0B:F9:92:06:B3:54:1B:BB:AA:FA:86:13:99:F2:94
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/24
Signature Algorithm: sha256WithRSAEncryption
78:63:9e:dd:b3:32:ae:b6:93:10:2f:43:d7:6a:88:14:e7:51:
db:d2:87:e2:11:8d:f6:54:97:af:e4:ba:c1:f3:d7:a4:cb:08:
33:e5:6a:cc:ee:6c:4c:69:82:d6:90:05:36:f5:86:59:91:aa:
18:61:3d:dd:24:e9:10:d9:93:d6:f9:06:c7:60:78:f4:b4:9a:
61:de:55:70:6b:a6:36:2c:ce:38:16:94:f1:6e:e1:28:59:92:
f9:6a:22:6c:15:92:de:95:14:e1:ee:a6:bd:7d:dc:27:57:dd:
4c:a7:36:86:9b:3a:15:97:ea:22:e0:d6:06:a9:cf:b7:d2:42:
5d:cc:19:9d:c7:21:97:ea:7d:d5:79:21:3f:8b:b2:0c:41:d4:
97:75:b3:ac:73:68:1e:80:5f:d2:c2:0f:41:14:21:b9:86:f4:
8d:a6:ee:6f:1d:20:38:9a:e9:01:62:b1:0c:7f:cd:15:d5:18:
a8:ff:e2:fc:ed:9e:28:5f:80:53:d6:8b:f1:24:9a:b5:91:52:
0e:dd:4b:2b:69:78:4a:b9:5e:46:19:be:57:37:70:a0:12:20:
40:95:b6:13:80:73:9a:83:78:5e:df:ed:f7:f9:d9:49:6a:6a:
5f:6f:0c:dd:b3:03:56:95:73:f7:0f:93:8b:12:9e:7d:74:52:
48:32:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:43 2026 by rpki-client