Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/lgdudiRubbn4kubyyDwuIWxdQas.roa
File: lgdudiRubbn4kubyyDwuIWxdQas.roa (raw, json)
Hash identifier: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=
Subject key identifier: 96:07:6E:76:24:6E:6D:B9:F8:92:E6:F2:C8:3C:2E:21:6C:5D:41:AB
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019F1A0FFF641DE37B3B76C9CF8614E0E442
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/lgdudiRubbn4kubyyDwuIWxdQas.roa
Signing time: Tue 30 Jun 2026 19:44:43 +0000
ROA not before: Tue 30 Jun 2026 19:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35758
IP address blocks: 147.78.2.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
2a11:840:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:0f:ff:64:1d:e3:7b:3b:76:c9:cf:86:14:e0:e4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jun 30 19:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96076e76246e6db9f892e6f2c83c2e216c5d41ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b9:e6:ce:b8:3e:3b:5c:63:21:17:ac:af:33:
e1:31:20:98:4b:a5:b0:bb:52:56:a7:4b:9e:64:15:
e5:65:0b:4e:fe:29:18:e6:a7:ea:9f:62:13:39:1b:
d7:4c:77:64:94:ae:c3:9d:1a:cc:0b:d2:8b:7e:ef:
c5:7b:0f:d2:94:c4:3d:5c:f5:aa:78:b2:71:42:07:
9f:7e:20:c8:66:f5:98:23:80:b6:0c:e9:33:58:2d:
e3:d1:af:01:b1:ba:83:39:9e:d1:eb:c1:d5:9f:2b:
59:e0:02:a5:e6:95:c2:e8:da:4a:7e:e2:8e:a9:8e:
6a:11:97:21:ed:f7:10:4f:27:53:97:cc:23:2b:0c:
54:d8:e4:c1:42:6d:d5:11:15:b0:db:ea:98:53:34:
c2:12:9a:0f:8c:fc:c3:3f:84:13:a2:b6:45:53:4b:
88:d5:fb:74:88:90:6d:d7:53:f5:37:82:13:11:9d:
97:f3:0b:ce:e8:98:04:fd:dc:cf:62:49:c8:2c:b8:
82:fb:ee:a7:e5:3b:60:7b:dc:12:31:be:ea:73:b4:
a9:fc:f6:93:05:ca:17:05:4a:3c:fa:99:d5:48:42:
5b:59:7b:2e:d3:49:10:2e:11:4d:93:9a:4e:66:c2:
f9:4a:d4:79:13:8d:6c:aa:4d:39:be:55:3f:18:b8:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:6E:76:24:6E:6D:B9:F8:92:E6:F2:C8:3C:2E:21:6C:5D:41:AB
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/lgdudiRubbn4kubyyDwuIWxdQas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.2.0/24
185.126.238.0/24
IPv6:
2a11:840:30::/48
Signature Algorithm: sha256WithRSAEncryption
63:0b:10:01:95:a8:72:36:f3:de:7d:64:58:6a:3f:78:1f:2d:
be:a6:a5:da:25:df:6c:f5:a2:aa:9c:7e:28:b1:12:a6:9b:2b:
44:05:31:17:2c:38:6a:a2:0e:b8:3c:12:69:66:35:d1:1f:99:
9b:19:db:48:b3:23:fa:a2:17:77:1b:b6:50:da:70:8b:e1:30:
b7:00:b6:1a:09:3a:23:ae:5d:0f:77:a4:32:bf:dc:a3:4b:ff:
66:ef:c6:ec:e6:58:4c:5c:98:61:0f:86:03:12:74:f2:f8:9b:
bf:f0:1f:dd:98:8e:06:2a:a4:8d:62:62:f3:4b:4a:88:85:f3:
fb:c0:f8:d6:10:28:ad:30:e8:4d:25:fe:ce:8f:82:3d:cf:26:
04:62:02:d1:da:95:fb:7e:42:54:ef:d1:81:e5:d1:0f:28:ac:
8e:3d:0c:50:c2:b9:96:69:0c:f6:50:6c:8c:0b:f0:16:5e:b6:
55:54:da:44:bb:48:a6:5e:66:d3:68:b2:d6:56:56:c0:67:84:
06:54:44:da:59:74:1d:93:d9:8b:f4:13:51:1a:49:d0:f9:ee:
e3:87:bc:c5:c2:88:d9:7b:d3:19:ed:44:74:af:8c:8a:34:4b:
d0:10:00:e7:b1:5b:56:eb:61:40:2a:f9:a6:ee:20:83:77:9b:
10:5c:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client