Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa
File: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (raw, json)
Hash identifier: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=
Subject key identifier: 2C:24:70:53:BC:5F:75:4C:EF:25:BC:2C:7A:4C:A5:DE:46:7B:61:03
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F2369030075D0796100F09528E1FA2A70
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210687
IP address blocks: 5.183.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:00:75:d0:79:61:00:f0:95:28:e1:fa:2a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c247053bc5f754cef25bc2c7a4ca5de467b6103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:69:53:dc:cc:21:58:f7:53:4d:92:91:a4:
dd:58:8a:44:18:7b:93:91:ca:c2:e9:1f:87:9e:32:
d2:eb:d9:a1:24:05:28:e3:ed:f5:53:df:fb:68:a4:
fe:0a:50:91:32:bc:e2:2d:c0:ee:cd:60:80:ea:90:
e0:fa:02:cc:98:90:25:b8:01:b7:dd:88:27:ac:a8:
20:a1:f4:dc:2f:60:3d:fa:2c:5a:5a:28:e2:fb:eb:
23:85:7c:57:7e:7a:32:52:75:a7:48:17:81:be:24:
12:cc:21:25:cf:62:cc:20:92:d2:24:50:22:03:db:
95:a7:33:e6:80:be:16:2b:18:67:71:ca:b6:a8:cb:
e0:76:8c:4a:40:73:d7:d5:95:39:2e:03:93:3c:ef:
c9:43:85:22:d6:ee:57:37:cf:f0:74:2d:9d:12:42:
94:c0:9d:17:4b:66:e0:04:d5:34:17:73:f4:3f:36:
34:12:fd:b6:84:0c:57:3c:e0:9a:34:ac:eb:64:1d:
15:f7:17:64:13:76:d1:5c:a7:2d:bf:7a:1b:40:65:
57:bf:63:f9:f3:95:cb:71:df:1e:0b:ed:7d:93:08:
bc:85:36:53:9c:cf:cc:a1:5a:3a:7a:45:2c:58:f4:
dc:89:73:ed:bd:ee:e4:0f:91:a3:b0:f2:12:56:b8:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:70:53:BC:5F:75:4C:EF:25:BC:2C:7A:4C:A5:DE:46:7B:61:03
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c9:94:93:c3:c7:e0:3e:1e:bb:ae:52:e4:45:1c:b0:67:17:
9d:e9:97:21:33:11:fb:c9:b5:60:b2:93:13:23:ad:63:da:9b:
4a:c0:de:e0:e0:bb:22:51:96:69:4b:fd:31:8a:01:13:54:37:
f1:f6:63:f3:ae:a6:14:7b:e3:d5:1e:19:de:75:08:c5:0d:e7:
a7:ac:7b:8a:6c:87:b2:1d:3c:4c:f8:f0:3f:ea:b2:d7:37:79:
37:2a:30:69:d4:81:c4:47:72:6b:ff:6a:13:d6:c3:b4:60:6c:
46:63:4b:2e:25:a8:4c:b0:8f:2a:15:f8:1b:88:79:0e:8a:aa:
1f:74:14:1b:3f:76:14:02:1d:0d:c2:c4:01:8d:a9:04:af:35:
3d:c1:47:62:18:c4:bf:72:b6:3d:e0:1c:26:f0:e2:c6:39:aa:
eb:a0:b2:fd:f6:32:5e:b7:2a:98:70:a6:99:18:a0:b8:3b:5f:
23:e5:bd:ce:5e:6b:6e:dc:8b:ab:97:71:4f:07:da:02:e4:f0:
eb:aa:7e:91:76:fb:5e:9a:d5:c5:3a:9d:bc:15:a3:4c:ec:45:
53:03:d1:7e:e4:8a:56:2d:39:04:01:c7:4a:56:2a:4f:9e:eb:
41:97:64:61:6f:ed:35:da:ca:a3:57:44:f7:e0:b0:50:31:f2:
00:6c:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:42 2026 by rpki-client