Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lGxQc02s_Q2fV2t6tu_BaHoHFrA.roa
File: lGxQc02s_Q2fV2t6tu_BaHoHFrA.roa (raw, json)
Hash identifier: Fl+zzz06ZQZ7ovzwjvGi9u0TN/py4Wd7dRVhx4wVN5Q=
Subject key identifier: 94:6C:50:73:4D:AC:FD:0D:9F:57:6B:7A:B6:EF:C1:68:7A:07:16:B0
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A1A96347B31872C51B2FBE23C85C8D9015
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lGxQc02s_Q2fV2t6tu_BaHoHFrA.roa
Signing time: Thu 05 Nov 2026 01:46:58 +0000
ROA not before: Thu 05 Nov 2026 01:46:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 31.187.92.0/22 maxlen: 24
77.223.200.0/24 maxlen: 24
77.223.201.0/24 maxlen: 24
79.139.64.0/24 maxlen: 24
79.139.65.0/24 maxlen: 24
91.210.80.0/22 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/22 maxlen: 22
121.127.60.0/22 maxlen: 22
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/22 maxlen: 22
178.216.188.0/22 maxlen: 22
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
212.32.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:63:47:b3:18:72:c5:1b:2f:be:23:c8:5c:8d:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 5 01:46:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=946c50734dacfd0d9f576b7ab6efc1687a0716b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:01:a9:f4:fa:31:96:98:28:d8:be:8c:25:
b0:c8:e0:f4:fc:07:31:8d:29:7c:48:87:d8:05:92:
65:6b:4a:00:81:95:67:c3:40:ec:9b:58:2b:6f:09:
f6:82:c8:89:ef:3e:47:9b:9b:9d:28:cd:4e:03:d3:
da:38:68:10:71:5e:6c:a6:1b:f7:75:22:03:ac:10:
de:64:34:f4:e7:3f:06:ca:6f:32:61:8d:a0:65:20:
fb:42:c2:26:46:2d:0f:73:87:d7:a2:05:ac:fb:1d:
71:ec:92:80:6e:75:83:1f:17:9a:93:31:63:73:71:
d3:5a:47:0f:33:c1:3f:28:e3:ab:18:c3:c5:e6:4b:
10:86:32:72:47:fc:85:4c:29:7b:c3:a5:36:72:d9:
98:ba:3e:d9:93:48:cc:bf:db:a9:cc:54:a6:ca:90:
54:e2:0b:66:2e:70:82:75:ce:f9:f0:e8:b4:8f:60:
1b:7a:0f:0c:48:a0:02:98:65:9e:8b:c8:0c:15:ca:
9e:fd:47:7f:7f:3f:35:55:c9:1a:5c:2f:a4:ec:7f:
5f:de:20:13:78:64:4a:b6:1f:53:8c:cf:35:86:94:
1e:aa:68:54:d1:6c:68:81:b2:6d:3d:fb:e1:33:cf:
dc:23:a7:d2:f2:4b:46:af:c9:90:c3:fc:c1:8c:32:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:50:73:4D:AC:FD:0D:9F:57:6B:7A:B6:EF:C1:68:7A:07:16:B0
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lGxQc02s_Q2fV2t6tu_BaHoHFrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
77.223.200.0/23
79.139.64.0/23
91.210.80.0/22
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
121.127.56.0/21
141.193.108.0/22
162.250.216.0/22
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
192.109.205.0/24
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:43:9b:03:cd:a3:2c:dd:74:98:34:f3:d2:bf:a1:54:4b:ed:
54:f6:74:d5:a9:6b:52:b6:86:d9:c4:82:58:9d:fa:ba:a1:47:
c1:bb:ac:23:ab:38:78:4d:92:12:b2:44:d2:ef:26:5a:2e:80:
e4:f3:1d:45:df:56:9d:f5:93:fc:c5:c1:20:de:cd:1a:8f:fb:
10:25:b2:4f:4f:e5:75:af:aa:f3:57:c8:62:ad:92:8f:52:9d:
39:c6:f3:98:b7:8c:c1:b5:e0:2f:93:ee:7e:4d:35:e1:94:02:
a8:1e:9b:ca:de:3f:8f:98:45:29:bb:41:44:ca:3b:7c:6e:7e:
32:a7:0a:67:f2:44:6b:89:17:56:7f:2b:37:66:d3:c2:88:ec:
d0:b7:a1:df:e6:95:8a:b4:c0:13:5b:28:a7:37:e4:c2:c5:a5:
3b:24:d5:37:c1:e5:4f:fc:be:36:03:16:de:e9:7c:25:a1:dd:
84:e7:9a:cd:b7:09:ee:36:a3:8b:0a:09:ca:b4:aa:2a:91:9f:
dc:b9:8a:54:f1:8a:82:91:56:89:dc:c1:63:c0:ad:50:b6:76:
cc:8b:13:ec:85:de:8e:6d:53:82:cd:6b:74:54:da:fb:e1:a2:
00:1e:4f:8e:3b:02:46:cd:f5:ef:50:5c:ae:07:33:c5:9c:52:
2f:fa:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:36:25 2026 by rpki-client