Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/lZWH-2ISRkDqDMQnCqDWW-98xnk.roa
File: lZWH-2ISRkDqDMQnCqDWW-98xnk.roa (raw, json)
Hash identifier: JDtc5t6fobEneseGSEO/aqOB7d3WkNL4mqQCpDAemQg=
Subject key identifier: 95:95:87:FB:62:12:46:40:EA:0C:C4:27:0A:A0:D6:5B:EF:7C:C6:79
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019B7A59D94C060814EBDF6D15FD9DE1B066
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/lZWH-2ISRkDqDMQnCqDWW-98xnk.roa
Signing time: Thu 01 Jan 2026 16:17:47 +0000
ROA not before: Thu 01 Jan 2026 16:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60550
IP address blocks: 185.37.238.0/24 maxlen: 24
194.124.204.0/22 maxlen: 24
194.124.204.0/24 maxlen: 24
194.124.205.0/24 maxlen: 24
195.180.152.0/22 maxlen: 24
2a13:b240::/29 maxlen: 36
2a13:b240::/48 maxlen: 48
2a13:b240:1000::/36 maxlen: 36
2a13:b240:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:59:d9:4c:06:08:14:eb:df:6d:15:fd:9d:e1:b0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Jan 1 16:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=959587fb62124640ea0cc4270aa0d65bef7cc679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:8f:0e:c1:0e:9b:09:93:2b:03:a8:f0:9c:
9d:e9:7e:9d:29:86:88:ec:61:51:aa:e7:81:96:5e:
16:23:49:66:25:d3:4f:94:b1:98:75:d0:ce:70:44:
35:d2:5d:ca:fe:5a:44:fe:13:eb:8f:7b:e2:21:e5:
ed:7e:a0:8e:17:9a:81:d8:7b:c5:ac:64:a0:7e:7d:
c8:f0:77:52:04:54:93:73:0d:d4:f7:eb:a7:73:9c:
04:2e:58:24:27:c5:b6:03:3d:69:de:32:a8:da:e0:
af:08:32:85:84:1c:36:f3:a0:55:6e:33:a4:62:f4:
ce:58:b9:2a:67:ed:5a:d0:00:64:f3:f2:86:09:cf:
0a:c7:f9:75:ed:b8:e9:2f:c0:97:9b:3b:f0:45:ff:
41:0e:ee:9a:fe:7f:f3:fa:6c:a7:b4:55:48:0f:20:
31:02:28:37:1d:4d:09:8d:fd:93:23:81:0f:0c:fd:
0a:11:f4:a9:cb:08:b7:3f:b0:c3:b6:80:5e:0e:23:
7f:25:43:42:cf:b2:37:5d:44:1e:94:f5:e5:2a:a6:
36:8b:5e:c4:31:d9:48:a3:84:40:cb:00:c7:42:35:
55:b7:60:7f:13:be:5a:cb:2d:0d:cd:9d:a8:35:b1:
3c:27:e1:21:0a:11:4a:ba:ba:c6:9a:d0:c7:a3:03:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:87:FB:62:12:46:40:EA:0C:C4:27:0A:A0:D6:5B:EF:7C:C6:79
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/lZWH-2ISRkDqDMQnCqDWW-98xnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.238.0/24
194.124.204.0/22
195.180.152.0/22
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
7e:9b:d9:10:cc:81:e8:c5:f1:a7:f0:6f:20:54:14:20:2c:59:
ba:a2:66:47:e2:ef:55:d0:38:4a:1f:87:2e:1f:49:ff:c7:f8:
cf:b8:ed:b3:37:5d:04:a6:5b:51:81:33:bb:20:79:1c:0e:d9:
97:60:37:80:e2:e0:a2:13:e8:e5:c6:b5:4b:f4:86:3e:c2:c3:
83:67:f9:c0:d3:8b:d2:13:e0:f8:65:a9:f7:71:4c:48:1a:6c:
9a:69:10:7b:35:97:39:b4:a3:28:3e:f8:70:40:32:1f:0e:b4:
ff:de:b6:93:65:01:2e:22:00:ea:8e:3e:98:d6:ba:22:03:5c:
c7:60:6c:3f:af:e3:4f:2c:19:e8:a0:3d:57:71:49:b3:87:c1:
87:3d:3e:3b:89:52:d2:14:96:91:ee:b5:49:a1:99:da:a9:ba:
73:95:bd:de:3b:e2:fa:0c:7d:6c:74:93:b9:cf:6f:05:a6:8c:
af:59:21:f4:27:d8:00:69:33:c3:54:c0:e8:15:96:e9:76:e6:
ce:d5:17:50:5d:ca:62:bd:3a:4d:9d:a9:c0:03:cf:ee:4e:98:
c0:c7:d0:22:a9:eb:71:8e:54:4f:0a:2c:d0:c8:5b:5a:1d:95:
47:74:6f:db:c0:69:92:4e:0a:fc:62:a1:63:93:27:4e:8b:7a:
cb:52:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:31 2026 by rpki-client