Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/lCay49jNA6hN-ql5UdLPpmY0qyA.roa
File: lCay49jNA6hN-ql5UdLPpmY0qyA.roa (raw, json)
Hash identifier: wJB8n42rVcnEySyiUs5rmdGl27xFBWQxOkbBGoicUQM=
Subject key identifier: 94:26:B2:E3:D8:CD:03:A8:4D:FA:A9:79:51:D2:CF:A6:66:34:AB:20
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 01A080C659E8F3E97FA7B7F921F66CAC28C1
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/lCay49jNA6hN-ql5UdLPpmY0qyA.roa
Signing time: Tue 08 Sep 2026 11:27:57 +0000
ROA not before: Tue 08 Sep 2026 11:27:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15743
IP address blocks: 37.131.240.0/21 maxlen: 21
62.48.64.0/19 maxlen: 19
62.48.88.15/32 maxlen: 32
193.35.198.0/23 maxlen: 23
193.35.218.0/23 maxlen: 23
193.35.218.0/24 maxlen: 24
193.35.219.0/24 maxlen: 24
193.98.1.0/24 maxlen: 24
217.26.224.0/21 maxlen: 21
2a00:e68::/29 maxlen: 29
2a0b:2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:c6:59:e8:f3:e9:7f:a7:b7:f9:21:f6:6c:ac:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Sep 8 11:27:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9426b2e3d8cd03a84dfaa97951d2cfa66634ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:c0:aa:c7:92:e9:1a:29:a7:36:94:3f:f7:
a9:9d:9f:1c:32:ff:a3:72:9c:fe:7e:6c:c1:84:b1:
b1:12:6e:84:16:dd:82:04:95:c4:bd:53:0f:43:17:
32:72:8c:c5:52:64:63:8a:64:68:26:46:1b:be:5d:
3f:54:4b:72:64:54:54:f8:bc:02:96:08:5e:47:e4:
13:d1:ee:14:26:ce:92:e8:18:b1:ed:41:18:f2:7d:
41:15:aa:45:fd:81:76:cf:2a:6e:2d:36:28:cb:2e:
a1:4f:2b:34:03:d7:23:e4:f6:5e:13:6e:bf:40:ac:
a4:a7:ed:87:fd:7d:9a:28:56:ac:f0:ac:61:52:4e:
96:02:9b:30:5c:71:75:84:2a:a2:9f:e1:0f:d5:29:
0a:78:ff:7b:85:f9:ee:b2:a4:85:da:a7:c1:97:bb:
6f:59:e1:b1:f0:84:1e:9c:ec:a8:99:10:28:0c:96:
72:f1:80:68:24:4a:f6:a8:31:29:0a:99:6a:a9:e3:
df:76:10:5c:3a:61:bf:b7:0b:60:44:0e:52:0b:26:
8f:93:09:b5:1c:79:b2:ad:ac:ed:50:cc:6e:1d:76:
b6:96:45:67:76:78:86:39:79:fc:a0:61:08:96:20:
f1:cf:c2:a1:79:a2:ee:53:d5:66:53:7d:a6:b8:7f:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:B2:E3:D8:CD:03:A8:4D:FA:A9:79:51:D2:CF:A6:66:34:AB:20
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/lCay49jNA6hN-ql5UdLPpmY0qyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.240.0/21
62.48.64.0/19
193.35.198.0/23
193.35.218.0/23
193.98.1.0/24
217.26.224.0/21
IPv6:
2a00:e68::/29
2a0b:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:26:ec:2f:41:2f:9b:38:ca:d2:c9:dd:5f:3e:60:50:5c:f6:
35:1e:87:15:2a:36:fa:03:a6:6d:ce:f7:e0:f1:ac:cf:8a:47:
f5:d1:89:c0:50:c7:5d:60:0e:56:de:45:da:95:9d:a4:1f:2e:
9e:3f:66:2a:84:61:9d:d6:a1:e6:40:64:73:07:55:85:40:2e:
ed:7c:aa:82:a3:da:6a:c2:d4:07:f9:32:16:66:b2:37:22:a5:
fc:04:f0:4f:0b:ca:62:2b:93:4e:1b:c8:c6:91:72:02:23:6c:
de:1a:97:93:79:e3:fe:f6:47:a6:40:75:24:ac:7f:f9:72:1f:
86:e6:ae:3a:b5:fd:2d:51:85:f0:da:c1:bb:fe:72:6b:d8:37:
e8:97:98:22:1c:52:7c:69:49:73:18:2f:33:a2:2d:b5:35:e7:
b6:f5:ee:c0:23:6f:86:e4:98:bf:b0:f3:aa:1b:57:e5:f6:d8:
b0:46:50:c0:f8:99:d6:09:df:0a:14:97:85:8c:6e:bd:eb:e7:
63:2b:19:f9:f9:c3:46:52:02:67:cf:09:e5:ce:b3:4e:c6:5b:
c0:30:0a:1e:0a:40:33:5c:47:19:3b:13:8f:a0:2a:f8:3c:99:
c2:66:8a:30:8a:83:57:7e:2c:eb:99:03:68:c6:08:55:4f:94:
9e:1e:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:52 2026 by rpki-client