Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa
File: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (raw, json)
Hash identifier: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=
Subject key identifier: 96:60:D0:D1:89:81:55:F6:97:35:1E:1A:02:AE:3F:6F:2E:8C:C5:F0
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019C6B736E4F4E5ABAB0F57027889A7ADF11
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa
Signing time: Tue 17 Feb 2026 11:54:12 +0000
ROA not before: Tue 17 Feb 2026 11:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 92.61.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:73:6e:4f:4e:5a:ba:b0:f5:70:27:88:9a:7a:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Feb 17 11:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9660d0d1898155f697351e1a02ae3f6f2e8cc5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:fd:31:f5:12:9c:1c:79:34:fc:ba:d1:fe:
3f:07:0d:a2:b3:ff:3a:0a:1a:60:4a:f6:21:3c:86:
6e:11:ce:71:84:78:45:81:70:1f:37:9d:ba:79:f1:
98:cd:9c:12:c3:48:c8:ef:6e:09:ce:f6:cf:1b:6b:
8d:0a:0b:7b:b2:b6:8c:5e:37:cf:69:f6:6f:52:8e:
1d:89:1f:69:4b:5a:a8:21:77:10:f7:45:05:e6:3a:
86:1d:15:3a:3c:11:03:ca:93:f2:5a:7a:0e:3d:35:
38:7b:81:19:56:70:d0:a2:05:d6:6e:15:85:2f:fa:
a6:01:0d:f2:60:2b:e4:38:e1:62:ca:85:f3:c4:86:
7e:5b:24:05:c9:4f:e7:ea:57:a3:59:8d:5e:a4:87:
eb:5b:c8:57:99:f7:d6:41:ef:da:f1:db:6a:5c:fc:
3a:05:0d:7b:10:ad:04:5e:32:68:48:4e:69:d6:0f:
13:39:7e:05:6d:82:79:d4:ca:a8:25:8c:68:a1:b1:
5a:f7:ab:d9:b9:4f:d0:64:b3:c5:5d:7f:a2:29:b2:
62:b6:90:fc:b4:9c:c1:04:44:20:29:64:a8:c3:18:
07:2d:43:26:5d:d1:96:b0:fc:66:39:fc:88:02:03:
5e:3c:72:2e:c0:c1:e8:66:06:ca:07:0d:7f:ed:bf:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:D0:D1:89:81:55:F6:97:35:1E:1A:02:AE:3F:6F:2E:8C:C5:F0
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6b:e3:0b:2c:cc:bf:9b:8a:e4:db:bf:1f:a8:52:01:42:7e:
3d:a0:ee:7c:7d:26:b1:cc:0e:50:a1:12:ab:d3:ea:b5:1c:6d:
e0:cb:e2:57:02:d9:73:3e:c3:f7:96:ab:bf:c7:ed:e8:ac:b1:
6b:c2:cf:72:a7:4c:42:af:d0:63:b6:e4:f5:5b:6c:8e:ff:ac:
14:87:f0:5d:05:49:11:c3:b9:e2:71:3f:89:96:66:2d:b4:e3:
88:b6:5b:a1:77:9b:db:09:f1:d9:e9:c0:e7:45:bb:39:09:62:
c1:52:76:4e:6b:5c:00:6f:1d:e7:16:16:d8:c1:48:12:92:e2:
42:a5:ea:83:a1:f0:b6:ba:3d:c4:4f:64:3d:73:8f:d5:dc:28:
3a:81:ca:af:18:c1:a3:e7:63:97:a5:a6:91:e6:5f:c9:8a:c4:
43:74:8f:26:28:74:41:46:2b:41:34:e5:11:31:59:a9:d6:f8:
38:f9:a8:12:09:95:2a:2a:a4:7b:6a:b7:84:41:e9:98:3a:67:
06:f5:3d:3a:82:e6:0e:a1:a7:67:7c:ae:43:ad:3a:e1:2b:c7:
4e:f0:84:b4:b5:ff:b1:80:aa:39:b6:96:27:f7:65:04:d5:ca:
65:7e:20:c4:82:21:87:8e:c4:60:16:60:0e:0e:ac:c0:67:ce:
28:22:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:11:50 2026 by rpki-client