Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/lmn4cie6ZBTXZMLboH4Ml61ODdU.roa
File: lmn4cie6ZBTXZMLboH4Ml61ODdU.roa (raw, json)
Hash identifier: vQ3uHbMYpnm1j1T8aj2JIlp841EOoxIG4q+opCYzgEM=
Subject key identifier: 96:69:F8:72:27:BA:64:14:D7:64:C2:DB:A0:7E:0C:97:AD:4E:0D:D5
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A1594370795E943151FD7FF2318A172345
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/lmn4cie6ZBTXZMLboH4Ml61ODdU.roa
Signing time: Tue 20 Oct 2026 12:22:34 +0000
ROA not before: Tue 20 Oct 2026 12:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 185.151.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:43:70:79:5e:94:31:51:fd:7f:f2:31:8a:17:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 20 12:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9669f87227ba6414d764c2dba07e0c97ad4e0dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:17:98:8f:ef:fa:6f:2d:e0:06:e8:e1:e7:
63:89:5c:91:75:7b:ff:6e:cf:07:9a:b3:d2:de:fa:
81:da:21:9f:c6:db:da:16:f5:f6:91:ba:67:5d:56:
1b:cb:50:67:b4:7c:9d:69:de:5b:03:d3:7f:14:b2:
0a:f7:08:f9:5a:6e:8a:1b:8d:5e:e9:67:47:93:ec:
bc:f5:44:64:e9:68:fa:4f:be:fc:95:a3:a5:58:54:
e1:e6:e2:8c:90:06:45:39:b7:c4:d2:53:95:5c:a3:
9a:13:92:d4:c3:45:82:13:35:36:92:04:fe:88:ff:
56:0e:8a:9d:dd:95:93:ac:11:d7:ba:c9:e4:97:b1:
c9:83:49:48:36:bd:50:91:33:33:30:5b:d8:80:42:
c5:1b:a0:2e:2d:6f:15:97:ac:10:c2:db:dc:98:ff:
a2:e9:5f:2f:62:24:22:62:ea:46:30:50:e8:4a:21:
a8:64:c2:69:b5:0a:e5:26:7f:b6:af:fe:2c:ef:47:
dd:7e:98:4e:b3:cb:cc:42:a0:b6:f1:c9:e5:7d:38:
36:06:80:68:10:7f:92:ed:c8:5a:39:07:dc:bc:98:
90:55:fa:11:82:74:bb:a3:57:c4:3a:f1:1c:85:21:
55:52:ae:c5:71:35:9b:3e:f7:36:e8:2a:5c:76:73:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:F8:72:27:BA:64:14:D7:64:C2:DB:A0:7E:0C:97:AD:4E:0D:D5
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/lmn4cie6ZBTXZMLboH4Ml61ODdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:3f:67:af:d1:18:7e:b2:3e:eb:a8:02:b8:d2:75:a0:e3:4d:
f2:ab:07:e3:f6:48:cc:13:25:72:0a:64:f8:75:80:3f:35:af:
a8:33:b3:7a:19:38:20:51:20:6c:b6:03:58:85:ab:c9:8d:01:
d9:b1:9d:10:36:f2:0a:9f:dd:0f:7e:91:48:d8:32:09:68:d7:
fc:e4:c0:f6:f5:48:cd:48:77:b8:f2:f9:a9:14:fb:44:e4:6a:
b4:41:82:cb:ef:99:73:06:92:f3:e9:42:aa:c2:35:b4:b5:2a:
73:cf:ee:32:97:eb:4a:b2:62:c6:72:c5:f7:28:da:97:39:ec:
52:74:eb:69:70:13:c8:76:9a:81:98:76:ee:3b:16:26:ae:c5:
c1:15:d3:c1:9b:1f:8e:a3:26:5d:5c:20:07:d8:b5:49:c8:41:
f1:0a:4e:df:e7:e1:74:08:30:5b:52:d0:90:a7:06:1f:8c:bf:
f7:da:57:eb:35:dc:2c:55:ff:4d:da:d8:d0:00:79:f8:7a:e7:
f4:0a:a8:fc:04:44:5f:d4:d3:38:a1:02:57:9d:6a:c8:0f:f0:
99:a4:1b:d5:f9:70:53:e6:44:bd:29:64:d5:ea:41:e2:e0:2d:
08:b7:fb:37:26:b0:5e:2f:cb:2e:66:4e:0b:17:58:a1:f3:ab:
2c:44:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:57:10 2026 by rpki-client