Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LJ0CxN3Grkx5hBBwOYQyqPNHKwU.roa
File: LJ0CxN3Grkx5hBBwOYQyqPNHKwU.roa (raw, json)
Hash identifier: YnvMbPwbQev52CKgf9DevXvloKpCC77MGPHxVgpl9yU=
Subject key identifier: 2C:9D:02:C4:DD:C6:AE:4C:79:84:10:70:39:84:32:A8:F3:47:2B:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC73F85941DEA164AD7AF3BFDBB2CFADD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LJ0CxN3Grkx5hBBwOYQyqPNHKwU.roa
Signing time: Mon 03 Aug 2026 10:50:56 +0000
ROA not before: Mon 03 Aug 2026 10:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 37.60.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:3f:85:94:1d:ea:16:4a:d7:af:3b:fd:bb:2c:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 10:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c9d02c4ddc6ae4c79841070398432a8f3472b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:d2:28:3c:39:64:02:f0:37:43:9a:eb:66:
57:f3:48:c9:9d:4a:ff:4e:ae:9c:86:46:f3:b3:bc:
62:4c:57:8a:73:f2:2c:d3:da:1e:0d:d7:59:36:18:
94:1b:5d:94:5e:4d:2b:29:24:dd:19:a1:4c:5c:13:
04:30:ba:97:14:af:33:40:d9:cc:44:c1:53:56:04:
9c:25:de:04:a5:61:53:ff:16:cf:b3:ea:64:46:32:
e8:9f:cd:14:b7:50:e1:50:db:a5:16:24:f4:e3:f0:
bc:26:25:b2:68:33:2e:b5:b1:75:0f:58:95:d0:1f:
92:8d:04:09:fb:41:a3:f1:d3:c6:71:8f:cd:2f:3f:
f3:07:d7:3a:d3:36:3d:a7:4a:4f:4d:ba:8c:a8:10:
29:68:e4:01:1c:ad:91:e1:0b:d6:2e:11:bc:7c:9d:
58:38:df:06:93:a2:30:5a:12:d6:1a:45:12:c9:f8:
6f:d1:2d:9c:72:c9:ff:44:2e:20:8e:b1:24:10:c3:
4a:1b:1a:6a:cc:03:cf:46:a6:80:63:b3:e5:c5:0c:
ff:00:60:5b:7b:82:08:a6:62:8a:ac:00:0e:4a:ec:
fe:20:6a:7d:bb:d6:78:c0:3a:ac:14:85:dc:12:df:
5c:17:7b:73:1c:5c:af:72:10:7f:d5:68:4a:0e:f3:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:02:C4:DD:C6:AE:4C:79:84:10:70:39:84:32:A8:F3:47:2B:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LJ0CxN3Grkx5hBBwOYQyqPNHKwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
59:52:61:f6:a2:aa:46:f2:8a:34:cd:76:18:0d:88:a8:be:f2:
76:e9:7f:99:b4:4d:85:72:85:8f:98:47:f1:17:cd:69:4d:2a:
42:c7:7e:61:f0:7b:a8:f7:eb:84:fe:8d:4b:7e:6e:96:80:81:
d6:be:de:41:00:b3:36:99:5d:52:ca:af:41:b9:30:8b:d9:29:
7a:0b:10:61:51:1e:c6:e2:09:2f:08:00:0c:d9:9a:cd:9a:59:
41:a7:b6:67:4e:68:11:17:f8:b2:5b:e8:a9:44:8e:1d:c4:93:
45:c8:5b:22:44:bd:47:31:67:b9:0d:85:ae:04:ab:7d:4e:02:
62:94:fe:70:72:7b:3d:ca:11:f0:1b:50:d6:b0:0d:57:ee:e8:
9d:f5:3b:c0:af:f3:5e:10:f0:32:60:02:56:d8:73:03:9f:56:
6c:71:6a:1c:0c:c5:36:36:01:f3:7f:39:82:47:ab:95:ca:8b:
75:44:71:f5:ee:b5:6e:18:95:c9:d6:59:4c:8d:ae:fa:3c:fe:
00:f1:a8:54:44:a5:8a:d5:27:79:93:fc:af:1a:2d:3e:cd:ba:
18:f2:7e:fb:5b:48:bc:47:4a:a2:6a:14:77:3e:e6:85:be:81:
5b:e1:c5:a3:88:74:88:96:9d:73:d8:56:bd:bf:b2:30:a0:bc:
49:ed:53:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/HP4WUHeoWStevO/27LPrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODAzMTA1MDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzlkMDJjNGRkYzZhZTRjNzk4NDEwNzAzOTg0MzJhOGYzNDcyYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoofSKDw5ZALwN0Oa62ZX80jJnUr/
Tq6chkbzs7xiTFeKc/Is09oeDddZNhiUG12UXk0rKSTdGaFMXBMEMLqXFK8zQNnM
RMFTVgScJd4EpWFT/xbPs+pkRjLon80Ut1DhUNulFiT04/C8JiWyaDMutbF1D1iV
0B+SjQQJ+0Gj8dPGcY/NLz/zB9c60zY9p0pPTbqMqBApaOQBHK2R4QvWLhG8fJ1Y
ON8Gk6IwWhLWGkUSyfhv0S2ccsn/RC4gjrEkEMNKGxpqzAPPRqaAY7PlxQz/AGBb
e4IIpmKKrAAOSuz+IGp9u9Z4wDqsFIXcEt9cF3tzHFyvchB/1WhKDvM13wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCydAsTdxq5MeYQQcDmEMqjzRysFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTEowQ3hOM0dya3g1aEJCd09ZUXlxUE5IS3dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTyNMA0G
CSqGSIb3DQEBCwUAA4IBAQBZUmH2oqpG8oo0zXYYDYiovvJ26X+ZtE2FcoWPmEfx
F81pTSpCx35h8Huo9+uE/o1Lfm6WgIHWvt5BALM2mV1Syq9BuTCL2Sl6CxBhUR7G
4gkvCAAM2ZrNmllBp7ZnTmgRF/iyW+ipRI4dxJNFyFsiRL1HMWe5DYWuBKt9TgJi
lP5wcns9yhHwG1DWsA1X7uid9TvAr/NeEPAyYAJW2HMDn1ZscWocDMU2NgHzfzmC
R6uVyot1RHH17rVuGJXJ1llMja76PP4A8ahURKWK1Sd5k/yvGi0+zboY8n77W0i8
R0qiahR3PuaFvoFb4cWjiHSIlp1z2Fa9v7IwoLxJ7VPO
-----END CERTIFICATE-----
Generated at Mon Aug 3 15:50:16 2026 by rpki-client