Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lakZTlHlef4ahy1QkuLluXAniGU.roa
File: lakZTlHlef4ahy1QkuLluXAniGU.roa (raw, json)
Hash identifier: UmkeThGihGm0QDSjkaY2uV8rXNRfz2AB7rrYZbO/0W8=
Subject key identifier: 95:A9:19:4E:51:E5:79:FE:1A:87:2D:50:92:E2:E5:B9:70:27:88:65
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019EE70B28B2EAA2930B5E110B9AF9D4ABDA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lakZTlHlef4ahy1QkuLluXAniGU.roa
Signing time: Sat 20 Jun 2026 21:58:48 +0000
ROA not before: Sat 20 Jun 2026 21:58:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.77.0/24 maxlen: 24
2a0c:2507::/32 maxlen: 48
2a14:6785:cccc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:0b:28:b2:ea:a2:93:0b:5e:11:0b:9a:f9:d4:ab:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 20 21:58:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a9194e51e579fe1a872d5092e2e5b970278865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:e1:86:fd:fd:ff:85:92:96:b9:c1:54:26:
ba:d3:ce:4c:a2:dc:b4:a1:a6:b2:aa:8c:05:a5:5d:
60:84:44:23:ec:91:04:60:ce:47:12:01:10:47:cb:
eb:bb:cd:e5:08:fe:7a:36:87:94:9c:66:d2:95:51:
03:15:a1:fd:e7:c2:bc:55:e5:dd:ba:60:e3:66:fb:
d8:48:6a:15:ab:7b:12:c4:83:d1:17:6f:be:6b:eb:
3b:9a:b6:ac:9a:ce:bc:13:15:5b:55:1d:10:a1:0c:
7c:57:01:ae:5c:33:58:12:ec:b0:cf:c2:20:f8:86:
5d:10:2f:ec:0a:1a:42:19:b8:66:53:8a:6d:da:6a:
96:a5:21:52:79:4a:ce:69:ac:53:05:47:4c:17:7b:
48:13:ea:16:3a:bd:dd:2f:54:2b:8d:49:7a:e8:3b:
14:d4:48:6c:f0:7c:18:10:e9:c8:92:8d:b0:39:59:
3c:20:11:2c:f2:d7:2d:13:96:95:89:a8:eb:e3:c8:
94:87:3d:2b:20:c6:cd:d8:e6:42:f9:40:6e:69:89:
ee:9d:2a:26:ba:98:9d:74:75:6b:52:ab:36:e0:58:
f8:68:9d:cb:9d:0e:73:11:17:d2:17:94:0d:8b:98:
d0:3c:60:94:82:69:fe:cc:42:27:f8:03:09:4b:f4:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:19:4E:51:E5:79:FE:1A:87:2D:50:92:E2:E5:B9:70:27:88:65
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lakZTlHlef4ahy1QkuLluXAniGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.77.0/24
IPv6:
2a0c:2507::/32
2a14:6785:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
72:62:66:b1:2d:3b:4b:63:65:40:f5:24:01:bd:bb:bf:bc:b5:
61:5b:b5:5c:67:29:a1:69:8c:47:91:1d:77:58:e3:73:a0:b5:
04:2c:0e:f7:45:95:d1:e6:be:eb:f3:38:5f:dd:85:bb:9f:8d:
3e:61:1b:06:0f:fc:e3:fc:b2:30:c0:31:bf:4a:c8:7f:8d:89:
22:71:2d:4e:0a:ed:1c:be:a4:62:5c:ae:f3:51:3b:3e:c3:df:
8d:ee:7a:96:60:0c:b3:77:e8:b7:5b:0a:8d:23:28:06:e9:eb:
6b:46:42:61:1f:99:f7:cd:46:7a:75:42:3d:73:a5:c7:13:45:
32:d6:e4:56:60:88:9e:60:bf:64:a3:0e:4d:ec:2d:54:df:30:
1e:be:bb:69:ad:63:47:0c:72:ff:d0:ce:25:6f:25:bd:3c:19:
c4:3d:63:a8:f1:09:f6:cf:47:60:20:d5:37:5c:52:8f:58:45:
ed:8e:f3:57:b7:f9:36:7d:e3:46:60:f0:51:d9:72:fc:d5:dd:
15:4b:69:a0:d4:61:6e:ca:b5:8a:a8:b5:32:16:2f:19:15:83:
d0:ac:82:f7:8c:91:9a:b7:65:8e:57:ad:e3:db:19:8e:3c:7f:
fe:16:c5:e2:75:be:c2:58:36:33:13:e9:a4:d1:30:06:bb:cc:
b8:98:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:14:53 2026 by rpki-client