Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LsIt7Six2lTRr-WQyxVcF5XnOoI.roa
File: LsIt7Six2lTRr-WQyxVcF5XnOoI.roa (raw, json)
Hash identifier: lThjW3KDFC1w98MnpyfqylDy1T2DaRUk6WP7S61nXI8=
Subject key identifier: 2E:C2:2D:ED:28:B1:DA:54:D1:AF:E5:90:CB:15:5C:17:95:E7:3A:82
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A14A08A97018645928366A4FD229D1117C
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LsIt7Six2lTRr-WQyxVcF5XnOoI.roa
Signing time: Sat 17 Oct 2026 13:24:03 +0000
ROA not before: Sat 17 Oct 2026 13:24:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.7.241.0/24 maxlen: 24
185.7.242.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:08:a9:70:18:64:59:28:36:6a:4f:d2:29:d1:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 17 13:24:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec22ded28b1da54d1afe590cb155c1795e73a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:2c:a9:e3:36:da:99:b4:71:b3:2b:57:b1:
0b:56:79:e1:59:5e:5f:20:15:55:53:82:f5:ef:98:
12:50:7f:25:ce:f8:4f:89:4a:39:cc:11:0b:72:6c:
3f:80:9d:2d:cc:3c:91:11:4e:6b:c0:94:b8:d6:7e:
1e:1d:25:a9:d3:36:b0:65:09:7a:58:bd:f4:de:0d:
01:c1:7b:f5:ea:2f:f3:3e:6c:e8:81:02:8e:aa:7c:
8c:55:29:d5:87:6e:85:84:8c:05:8a:b3:50:bf:2d:
f3:66:4c:53:26:08:2c:80:ed:9f:09:00:cf:f4:1f:
74:51:e0:04:be:09:7f:35:25:28:6f:58:45:ad:58:
ae:43:89:be:df:28:a1:87:43:86:30:6c:b3:87:32:
30:d4:aa:e9:45:f3:d9:94:66:76:87:46:0a:83:29:
c1:a3:a1:f3:8c:2b:4d:af:ad:99:d8:cc:b5:f3:4f:
7d:41:1f:37:d6:77:b0:28:ae:7b:3d:47:56:5e:45:
3b:07:ec:07:15:a4:b5:4d:0c:0f:2e:cb:ed:d3:59:
dc:12:85:db:28:b3:16:f7:bc:89:1e:59:90:f3:0b:
8e:ca:72:1e:ea:7f:95:77:f1:d9:0d:48:c2:11:92:
98:8b:14:8b:7d:f6:0a:b1:3c:57:98:ee:4e:d2:9c:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:2D:ED:28:B1:DA:54:D1:AF:E5:90:CB:15:5C:17:95:E7:3A:82
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LsIt7Six2lTRr-WQyxVcF5XnOoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0-185.7.242.255
185.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b7:70:9f:b6:2e:db:63:3f:5a:a7:65:fa:ec:d1:fd:ea:81:
23:8d:16:6e:61:bd:75:fb:5a:4b:0d:f5:6f:9c:6a:6c:c3:7f:
0c:e9:86:c6:6c:cb:c1:bc:0e:0a:d2:a6:bf:27:e8:b4:0e:d3:
f5:ae:76:cd:d0:68:ba:2a:f7:f7:b9:cd:88:77:72:ef:a3:25:
4a:bf:a7:c1:6e:52:fe:8e:68:57:a0:a0:04:5c:76:8d:c4:e4:
7b:01:f1:f7:6e:c0:a2:bb:3b:32:1f:44:83:12:90:97:65:33:
26:e0:cd:99:23:c1:79:6a:9c:45:58:70:1f:f8:cb:56:9d:b9:
1f:57:be:04:9d:19:9a:72:be:36:2d:7f:44:81:87:6f:9a:6c:
73:83:72:c9:6c:61:c9:a8:8f:eb:d7:eb:fd:b1:31:2d:cb:e7:
d4:5f:a4:25:20:75:4f:19:46:b5:98:c5:aa:bb:16:54:92:ac:
8e:45:14:a6:db:a7:92:64:19:5b:97:53:28:2f:fa:4d:50:32:
f3:e7:90:2f:17:4f:60:35:5e:c4:19:e2:18:99:2b:b2:e1:d4:
c7:6a:74:e8:b6:f2:89:00:7e:1e:76:ca:21:c6:fb:82:11:3b:
5e:07:73:52:5d:a2:06:49:31:c4:cb:b4:84:d2:77:ed:1c:7d:
85:a5:12:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:06 2026 by rpki-client