Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/LlG8oa0OcM6D5__vgtmHgcfqaK4.roa
File: LlG8oa0OcM6D5__vgtmHgcfqaK4.roa (raw, json)
Hash identifier: lJ+TEaX4SXPiPfb3rAwLTY40jdx2wogsDRxF7aOmvGk=
Subject key identifier: 2E:51:BC:A1:AD:0E:70:CE:83:E7:FF:EF:82:D9:87:81:C7:EA:68:AE
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019CCD033BE875A721E9648EDF8C4A49BEA5
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/LlG8oa0OcM6D5__vgtmHgcfqaK4.roa
Signing time: Sun 08 Mar 2026 10:34:27 +0000
ROA not before: Sun 08 Mar 2026 10:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.229.0/24 maxlen: 24
2a09:2880::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2883::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:03:3b:e8:75:a7:21:e9:64:8e:df:8c:4a:49:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Mar 8 10:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e51bca1ad0e70ce83e7ffef82d98781c7ea68ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:56:10:9f:19:43:6a:75:1a:d1:4c:8e:20:
b0:92:79:d5:9e:4c:1d:23:38:1f:2a:83:80:b9:0c:
62:3b:32:03:28:e2:63:e5:22:80:2c:cc:8d:9c:bd:
61:00:f7:2c:0a:95:12:fb:22:12:79:12:5f:a4:37:
47:89:6e:e4:1e:5e:16:20:c7:37:a1:ac:5d:ec:c6:
d2:6e:18:bc:80:72:ce:96:72:a6:25:3d:04:80:02:
7f:d8:00:bb:b1:2d:87:de:c1:37:20:c7:fb:5d:87:
7e:5e:1a:29:86:bc:9d:a0:52:f1:8e:7b:40:5e:e5:
f2:73:4f:4f:1a:a1:98:f2:3b:99:d5:a5:b4:88:c2:
25:f6:6b:e1:b5:4d:69:b1:fa:5b:57:f1:9d:7e:78:
51:60:77:4b:1f:73:d1:76:8e:48:9f:52:25:c2:b5:
48:5a:38:a9:c0:bf:07:40:eb:1f:dd:d7:70:24:65:
4c:da:5e:91:e2:51:ea:3b:1d:bf:b4:ea:a5:47:94:
f8:dc:72:34:3a:76:0b:10:03:67:4b:17:9a:60:3e:
dd:e2:24:18:ec:14:12:99:92:bb:a4:a9:62:2c:fb:
6c:3d:8c:81:2a:93:f3:d5:eb:b9:d2:c5:e6:79:da:
0f:9f:7a:5f:5d:dd:fe:7c:d4:17:61:5e:44:ff:a5:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:BC:A1:AD:0E:70:CE:83:E7:FF:EF:82:D9:87:81:C7:EA:68:AE
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/LlG8oa0OcM6D5__vgtmHgcfqaK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.229.0/24
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
56:75:20:29:1c:22:9f:00:c7:0e:3d:9a:55:9d:c6:f8:57:0a:
5d:4d:7d:ef:f8:f7:8b:1f:88:f7:47:1c:8d:90:f6:2f:16:6a:
3d:a4:48:f5:f5:8d:c8:a5:af:ba:14:e4:2b:f3:b5:49:92:12:
08:86:12:5e:60:2e:50:b3:a9:ed:4f:31:ef:ed:11:fa:18:5b:
11:dd:6a:47:9e:bb:0b:53:51:55:73:47:a7:86:86:0a:79:18:
f1:a1:ea:88:81:01:2f:21:17:40:84:01:c0:27:bb:c2:2c:d3:
41:82:25:8a:d1:ab:e1:ec:85:7a:72:66:1b:00:52:ae:fe:d9:
6d:7e:b6:61:3d:fe:72:fb:a8:e8:c4:da:50:6e:0f:f9:63:eb:
50:b0:c8:6e:c0:e8:1a:1d:10:9d:e6:77:c6:86:39:59:4c:c8:
e5:4c:ea:3e:05:29:39:65:5b:15:5c:91:a6:38:4b:af:1e:3a:
2b:82:d0:1f:fd:f5:c3:cf:39:fe:b8:24:f7:3e:ac:55:65:b9:
bc:06:7c:79:fd:14:c8:86:32:80:f1:9b:e2:a6:ad:95:38:e0:
db:e8:72:d8:94:a9:85:1b:5b:46:93:13:a3:5b:6c:88:d3:7a:
fe:fe:cf:60:5c:fc:6a:8a:d2:5e:7e:4b:9f:1f:90:30:d6:bd:
59:92:9f:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 15 03:53:40 2026 by rpki-client