Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa
File: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (raw, json)
Hash identifier: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=
Subject key identifier: 2C:DC:BC:90:6E:CA:54:5D:E6:92:65:C9:1E:80:71:4C:20:5A:A3:3F
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693E49997404C06571322EF027D950
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 212.30.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3e:49:99:74:04:c0:65:71:32:2e:f0:27:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cdcbc906eca545de69265c91e80714c205aa33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:4b:39:29:3c:52:52:9f:df:20:6f:44:8c:
8c:09:9f:14:a6:14:42:24:28:c8:a4:64:98:88:a3:
d2:5c:ad:e7:87:b6:f0:84:f0:68:18:fa:8e:f5:3a:
5a:44:8e:43:b4:0d:36:95:30:be:8b:61:d5:69:f3:
c5:a2:fa:08:9d:94:c5:89:f2:c6:56:f1:77:08:c9:
f1:b3:1c:24:58:69:6b:fe:29:f0:83:dd:33:4e:b5:
48:ed:87:87:a1:64:40:85:81:34:c2:17:4c:82:78:
fd:92:bc:28:fa:75:39:ec:a3:55:81:0b:f9:5b:69:
17:97:ca:73:da:f2:66:bf:7e:18:96:6d:be:84:67:
56:c8:1c:27:d0:e4:63:55:3a:49:47:c4:dd:46:3c:
51:9a:ad:3a:29:4c:89:44:5b:e4:27:cd:c7:e6:fe:
01:2a:da:67:d6:28:55:82:6d:38:be:26:68:82:f2:
43:35:40:be:46:a2:ad:0c:d3:ce:15:f2:cf:6b:5d:
7e:66:ce:14:29:65:ba:15:f8:45:6b:e1:46:f1:f6:
d6:9c:d5:d2:7d:2b:2c:16:5c:6a:7f:f0:36:9d:28:
c5:de:e5:06:04:98:36:14:d9:33:6d:19:85:d0:e6:
4b:3c:58:34:c9:90:2b:60:b4:9e:17:d3:4a:e0:77:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:BC:90:6E:CA:54:5D:E6:92:65:C9:1E:80:71:4C:20:5A:A3:3F
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0/22
Signature Algorithm: sha256WithRSAEncryption
47:59:5e:7e:f9:df:48:5e:bb:8f:8a:31:4e:82:6a:f3:4d:63:
19:0b:cf:ba:31:07:05:61:15:a5:3e:b6:d3:e1:e7:7b:24:ce:
64:4b:6b:2c:f6:7f:f8:8f:c7:29:dd:20:fd:ed:6f:bc:06:52:
41:9a:de:ef:6a:02:eb:21:3d:73:57:1b:f9:6c:8a:1b:8f:7c:
9c:dc:40:60:c8:ea:07:15:d9:24:fd:8f:47:b5:19:d9:ff:fb:
c5:b1:32:7d:e6:bd:3d:53:98:a7:10:79:4b:4e:f2:ba:2c:af:
cb:fa:d4:3e:ee:f3:28:05:2c:a5:bd:e0:ca:33:63:61:19:50:
2f:44:df:82:10:fb:ae:3a:54:c8:81:15:bc:3c:0b:f7:5c:3e:
5f:f1:df:8d:30:87:fd:ea:91:b6:f4:38:ca:88:6d:05:aa:7b:
ba:d1:41:5e:d6:65:a1:c1:4d:7c:42:29:cc:09:fb:3e:7b:e4:
13:c3:64:89:c4:e9:5c:d5:7f:da:81:71:ff:21:08:fe:de:8d:
14:40:ea:4b:60:9e:41:1f:cf:66:4e:58:b9:b9:cf:62:a8:77:
5e:19:c4:f3:a1:fc:fc:a0:77:1b:45:b5:31:82:ca:ed:8e:be:
f3:c2:11:d5:35:12:90:2c:bc:fe:14:1e:28:f6:3a:ce:f2:50:
2f:47:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:49:42 2026 by rpki-client