Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/L3EC22kCSbgO1zCyaBa1frjR2pE.roa
File: L3EC22kCSbgO1zCyaBa1frjR2pE.roa (raw, json)
Hash identifier: w8QsFoIi60jEHJ7Xofqwu1zr9PxRQqzEho5zefrGjYg=
Subject key identifier: 2F:71:02:DB:69:02:49:B8:0E:D7:30:B2:68:16:B5:7E:B8:D1:DA:91
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019F2368F5A96EFB01D99A774D90C46E497D
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/L3EC22kCSbgO1zCyaBa1frjR2pE.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:a9:6e:fb:01:d9:9a:77:4d:90:c4:6e:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f7102db690249b80ed730b26816b57eb8d1da91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:00:73:d5:37:00:34:a8:14:4b:a2:4a:76:
ef:e3:41:85:86:84:e9:4c:b1:ce:b1:5e:fe:57:54:
50:83:d4:78:e9:ac:d3:e8:9d:fc:4d:97:b3:68:ba:
93:b5:9e:7d:94:e2:6a:4b:6e:0d:f1:7b:c7:a7:16:
dc:b8:2e:d9:ea:e3:d3:f7:f4:a5:d3:ac:ab:61:4b:
38:29:ac:c9:3a:7d:a7:4c:7a:15:21:75:4d:77:3f:
81:64:ac:e9:71:3d:47:86:cc:a6:0b:67:f6:5c:0c:
ea:78:8a:95:cb:09:7b:87:41:2a:e6:bd:ae:b6:08:
40:be:45:74:c3:ac:74:68:60:c2:61:d9:9e:1b:ec:
59:ce:3a:48:6a:43:a3:cd:8a:c4:ea:8a:0b:43:df:
c2:49:2e:00:20:dd:cf:c9:a5:97:75:24:ae:da:4d:
0a:7d:2a:d4:4a:c4:ae:07:1d:d7:c8:ff:bb:7e:44:
85:23:b4:f9:bf:08:da:4f:fd:a7:c8:7e:54:8c:8d:
6a:f6:63:13:d5:8c:fc:e4:10:0d:82:ba:c7:2f:8b:
ba:31:71:ca:2d:4a:f8:55:30:df:f8:cc:d4:68:3b:
20:41:ea:ee:04:ff:27:01:94:e3:61:04:e9:8d:b6:
26:8f:55:03:9c:30:ac:53:37:b3:42:f4:6c:a1:90:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:02:DB:69:02:49:B8:0E:D7:30:B2:68:16:B5:7E:B8:D1:DA:91
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/L3EC22kCSbgO1zCyaBa1frjR2pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
33:45:8c:21:d6:58:f4:86:d5:d2:92:b8:23:45:27:0b:a7:aa:
9c:a3:4a:95:f2:eb:ff:62:e1:3e:4e:75:14:ab:5b:3e:f6:20:
44:a9:a5:a3:45:e4:29:a5:72:58:04:80:82:bb:f3:bb:50:e1:
d1:09:32:11:bf:a9:1a:29:18:1b:fe:7b:9b:d1:5a:ba:f6:fd:
e8:29:92:04:a6:6e:1f:76:2b:fe:69:ce:b2:a6:e9:a1:86:0f:
c7:7d:94:89:fe:b3:8d:e4:3f:1c:65:16:4a:43:de:e6:49:4f:
ba:14:29:91:34:23:11:50:41:92:b5:d1:3d:5d:3c:f8:81:3c:
53:fc:6f:74:e1:81:57:f9:ec:24:d4:a9:92:d5:f2:39:43:d0:
0e:90:86:f1:ff:c4:2e:0a:85:7f:f1:26:5f:3c:8e:8c:90:d9:
a7:e3:95:cc:73:02:56:5c:91:db:b0:55:2a:85:1f:4f:e0:d2:
32:6e:b2:09:53:f1:b7:25:b2:91:80:5a:99:65:dc:eb:41:83:
13:3c:74:ee:06:61:35:10:33:d0:82:ce:33:64:df:69:a6:41:
35:a1:e1:69:cb:b8:16:ad:3e:c0:ee:00:31:6b:d1:91:a2:8a:
6e:cd:c2:a5:63:fc:d5:79:db:aa:f1:1f:0d:55:d9:ab:4f:c7:
12:fe:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client