Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/LTbRZjuInoJe2zZk9sdIhi_2l5E.roa
File: LTbRZjuInoJe2zZk9sdIhi_2l5E.roa (raw, json)
Hash identifier: l9lz1/HRPJMUl2lzyrHr7jkpM+qTkgglwW7+y8zWC+8=
Subject key identifier: 2D:36:D1:66:3B:88:9E:82:5E:DB:36:64:F6:C7:48:86:2F:F6:97:91
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0809013997C3A8796A2B5173B320C3AFA
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/LTbRZjuInoJe2zZk9sdIhi_2l5E.roa
Signing time: Tue 08 Sep 2026 10:28:40 +0000
ROA not before: Tue 08 Sep 2026 10:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 95.155.128.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:90:13:99:7c:3a:87:96:a2:b5:17:3b:32:0c:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 8 10:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d36d1663b889e825edb3664f6c748862ff69791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:e0:89:46:e7:1e:1a:0f:04:da:c2:be:41:
3a:ec:94:b9:d2:73:2a:a6:6f:33:9e:2a:2e:78:57:
e4:7e:5c:4b:51:b0:5b:71:c6:c4:bc:7a:60:14:70:
64:e5:67:57:f7:fb:bd:6d:5f:69:40:ae:2a:26:41:
c7:da:44:ec:4b:0e:6a:4e:eb:b7:8b:f3:da:a1:38:
d5:8f:9b:e4:16:3b:99:2d:a4:de:10:9c:71:c4:6c:
e7:64:f0:98:95:3f:c7:1e:df:59:44:be:00:10:ed:
a0:b2:69:f0:5b:b2:cc:8b:42:7b:da:c0:21:f4:fe:
ad:36:46:cf:32:2f:16:c4:cd:c0:31:9a:9a:a3:fa:
57:21:19:cd:26:e6:39:53:24:43:a0:54:99:67:eb:
1b:5d:6e:58:e6:e1:1e:ab:f7:ce:38:52:ea:47:8c:
79:ff:9c:1f:9f:9a:f9:70:39:48:9d:4b:35:36:7c:
f5:9f:36:0a:d8:90:7b:91:49:d2:56:91:1d:ac:5e:
57:6e:bd:e9:83:ea:ef:46:c1:61:98:43:60:0c:98:
58:d5:55:6f:a8:bc:7a:e5:ed:87:d7:a8:ad:2e:6e:
06:59:30:84:5a:c9:00:f8:ed:fd:35:bb:ec:bd:ba:
3c:12:77:2f:0b:71:bd:9a:c1:59:f9:fb:17:08:e3:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:D1:66:3B:88:9E:82:5E:DB:36:64:F6:C7:48:86:2F:F6:97:91
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/LTbRZjuInoJe2zZk9sdIhi_2l5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.128.0/24
95.155.149.0/24
95.155.155.0/24
Signature Algorithm: sha256WithRSAEncryption
95:00:07:9f:eb:93:71:fa:40:a5:9c:85:6d:74:fd:c9:d3:d6:
09:76:d1:cb:65:19:76:d7:a7:28:6d:8b:80:c0:57:61:53:2c:
36:4b:94:c5:dd:e3:66:c4:ba:d9:90:7e:42:de:71:6c:00:26:
dc:e0:9c:f6:a1:7a:74:10:17:c6:a9:14:62:d9:78:74:c3:aa:
35:08:35:53:7e:d5:f2:b1:dc:b5:f5:db:86:1e:f6:9d:8a:ec:
d5:77:29:bc:93:ef:ce:b0:2b:19:a5:35:02:20:10:65:07:4c:
ce:d2:3a:2e:5e:3c:e9:e4:5d:91:ee:ca:25:44:25:d5:76:fc:
fc:9d:82:f2:8c:70:05:ad:45:27:19:ab:0d:8f:65:1a:61:94:
18:a2:b2:65:22:4c:24:86:30:64:21:aa:ef:6f:fe:7b:a7:a1:
0d:25:a5:3b:ef:0c:06:04:ee:a6:8c:50:18:e4:38:dd:73:27:
4d:74:b9:22:d9:7f:c3:bb:f7:a7:f4:89:f1:84:1c:7f:26:f3:
ad:f7:10:1e:e7:f6:d4:b1:94:5c:57:e2:8c:f0:6b:27:51:6d:
34:15:d5:e3:12:47:ea:6d:23:4f:9e:66:4d:0b:db:da:db:40:
ac:01:4f:e7:98:03:53:39:67:7a:0f:f1:5e:6a:b9:2b:71:26:
ac:f5:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:01 2026 by rpki-client