Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_LKs4DOySWv1z14Y1ZYT-bLL0VI.roa
File: _LKs4DOySWv1z14Y1ZYT-bLL0VI.roa (raw, json)
Hash identifier: pLam89N4ZFHQ5gHY1TNoOT4rZ5LlwBf5Kvu3TpHLqsc=
Subject key identifier: FC:B2:AC:E0:33:B2:49:6B:F5:CF:5E:18:D5:96:13:F9:B2:CB:D1:52
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019E84EB998C1272D63D270128AEF7679181
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_LKs4DOySWv1z14Y1ZYT-bLL0VI.roa
Signing time: Mon 01 Jun 2026 20:41:33 +0000
ROA not before: Mon 01 Jun 2026 20:41:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 194.39.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:eb:99:8c:12:72:d6:3d:27:01:28:ae:f7:67:91:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 1 20:41:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb2ace033b2496bf5cf5e18d59613f9b2cbd152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:35:c4:01:c9:ef:15:a6:d1:23:98:d3:45:
18:2b:20:bf:77:df:d8:ab:6f:0a:0e:ba:6f:9d:d3:
29:88:3d:79:12:0f:c3:06:e4:8b:da:66:0c:cb:fc:
1a:54:c8:3f:cc:09:27:90:f6:7f:8f:c2:cc:3a:bd:
20:0b:ef:78:6f:1f:3f:c8:8d:8f:81:f3:52:8d:6f:
db:58:d8:df:97:8f:50:47:f3:d3:6e:2c:ca:18:19:
70:fe:e6:57:dd:91:a4:b3:d3:73:0e:2b:39:b6:fa:
32:7c:9e:36:04:75:68:6a:0c:7e:34:14:db:b0:b8:
5b:d3:cd:33:3b:bd:8f:cc:66:93:b7:74:82:02:dc:
96:fa:4c:4c:91:3b:11:ee:ff:06:da:09:96:5b:ee:
0a:ce:f6:8d:de:be:0a:34:9f:8f:01:65:ff:9a:e4:
cf:5a:75:a5:50:89:ae:1b:f1:42:19:87:1b:1f:d2:
6a:7a:3c:54:b0:89:cd:ac:28:4d:f1:e2:1d:48:18:
15:2c:12:23:f6:19:05:7f:62:5b:4d:25:28:f8:60:
51:5e:61:b5:d0:09:71:d0:96:3a:fc:dc:42:75:35:
1f:10:42:4e:b4:99:d2:a3:b5:fb:9b:63:47:cf:62:
b8:00:83:85:3b:b0:96:0a:08:a2:e2:4c:38:43:e7:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:AC:E0:33:B2:49:6B:F5:CF:5E:18:D5:96:13:F9:B2:CB:D1:52
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_LKs4DOySWv1z14Y1ZYT-bLL0VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.216.0/24
Signature Algorithm: sha256WithRSAEncryption
91:64:b0:f8:78:4d:76:b8:e7:4f:e4:70:d6:9f:bd:ef:05:a4:
b4:35:e2:d2:67:12:10:36:3b:98:2b:2b:a2:f1:af:56:b1:cf:
7e:1b:1d:dd:37:2f:b2:67:5e:50:c1:18:15:0b:73:0d:d8:f6:
f7:09:4f:64:d5:b7:29:8e:6f:cc:3b:72:9e:ed:16:e1:fe:10:
30:8c:1b:87:2d:cc:19:9e:bd:f5:a6:b4:ad:62:3e:18:4e:64:
1a:17:b4:43:04:2e:74:3a:14:c7:fb:10:f2:7d:d0:66:71:40:
9c:f6:15:8f:15:0c:22:3d:7e:97:83:30:98:88:68:d8:cc:70:
3d:0c:af:4d:20:61:c6:a9:b3:48:5d:66:8e:d6:0f:c8:1d:d1:
7f:4c:5a:db:68:2e:75:9e:2a:e3:fa:2f:50:8b:1b:7b:da:c6:
34:88:d4:6b:27:7b:08:c5:be:0e:b2:0b:01:1b:a4:4f:de:d9:
c9:01:4e:7d:64:c5:76:18:80:e0:84:e6:76:0d:58:99:23:11:
97:bc:7b:5c:51:81:71:4c:96:c4:eb:6c:06:c5:6f:82:18:6e:
9c:f8:bc:fa:e4:90:47:bf:c6:6d:be:28:07:f9:1a:66:16:47:
65:c4:bb:44:fe:14:1d:3f:6c:66:f0:da:ca:c0:2c:4d:a3:86:
33:46:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:49 2026 by rpki-client