Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/lJQRlzBiSGl76D8ikxPAg08Ak8M.roa
File: lJQRlzBiSGl76D8ikxPAg08Ak8M.roa (raw, json)
Hash identifier: dV3fyE/KZeuQowu2MHQZCBNvC5TozfTLwnFBVZttKjs=
Subject key identifier: 94:94:11:97:30:62:48:69:7B:E8:3F:22:93:13:C0:83:4F:00:93:C3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019FCD29C8687F73EB208A7A562E470606A2
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/lJQRlzBiSGl76D8ikxPAg08Ak8M.roa
Signing time: Tue 04 Aug 2026 14:24:55 +0000
ROA not before: Tue 04 Aug 2026 14:24:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198554
IP address blocks: 91.236.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:29:c8:68:7f:73:eb:20:8a:7a:56:2e:47:06:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Aug 4 14:24:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94941197306248697be83f229313c0834f0093c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:11:40:2c:09:f0:d3:ad:bf:85:5e:36:d0:
a8:75:ae:c9:f0:12:ae:f8:c3:e3:f1:13:96:73:c7:
13:2b:0f:39:b6:e8:51:54:7f:57:0a:08:64:3b:38:
a5:85:9d:28:90:bc:43:e4:74:16:61:62:3b:1e:24:
bc:d1:4f:ea:74:0c:41:5f:39:49:f5:f5:8a:b9:63:
0b:37:5f:92:b4:5a:8c:d0:4b:38:bf:cd:bc:12:27:
3a:3b:d0:6d:2b:7c:8b:14:b9:67:ce:81:63:b6:02:
73:e7:f1:c2:f9:61:35:89:8a:ff:06:6a:05:4f:6c:
3b:b1:5d:e0:52:49:07:43:dc:b8:28:3d:6c:61:4b:
32:74:f5:19:d7:50:ce:db:ce:d5:fe:c6:c0:6e:46:
46:87:87:91:f9:83:a2:63:c8:6c:ad:91:32:e2:68:
5e:1c:aa:f3:51:11:0a:a7:43:fe:1c:b2:5e:cf:bb:
df:32:da:47:fd:35:08:25:de:f1:33:33:98:41:40:
99:9f:66:96:a8:44:db:a1:26:f0:ce:e6:a2:6c:95:
9a:ba:79:97:4c:22:27:9e:0a:d1:80:70:0f:24:75:
ce:4e:72:ca:7c:ef:2c:73:ab:97:d6:8e:e0:1a:75:
c6:73:31:3a:07:bb:68:df:f6:d0:aa:80:26:db:0f:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:11:97:30:62:48:69:7B:E8:3F:22:93:13:C0:83:4F:00:93:C3
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/lJQRlzBiSGl76D8ikxPAg08Ak8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.117.0/24
Signature Algorithm: sha256WithRSAEncryption
31:da:a6:e1:f1:cb:68:63:8f:75:df:59:88:80:f0:23:06:ea:
36:3a:cb:35:c2:fc:29:cf:c2:bc:78:8a:5b:86:95:c1:7c:11:
ca:cb:a4:dc:da:a2:ec:fa:61:2b:89:5f:fc:6b:fa:f9:c3:18:
d7:8b:b5:05:d5:3b:47:8a:a8:70:4d:bc:e2:20:86:f0:1b:10:
ee:24:b0:ac:c0:a3:01:5c:c3:d6:05:d8:17:63:bd:65:25:99:
7f:80:17:f6:04:01:e9:a0:60:a7:d8:33:2e:51:fe:3f:46:e1:
10:aa:84:c6:f3:a6:04:80:ca:30:60:51:1c:f2:db:81:57:61:
5e:17:fa:e5:5b:4d:45:9a:c1:45:90:9e:74:da:51:97:6d:2f:
e7:5b:d4:c9:c8:66:70:3f:1b:f3:83:e4:95:9a:c3:4e:b0:bb:
7e:93:93:a9:ef:47:b8:5b:3e:78:9c:d2:84:d0:41:d6:55:ae:
18:50:a4:13:95:8d:84:82:c0:29:10:56:02:25:b8:f5:a0:dd:
fa:a8:d3:02:74:5d:8c:78:b9:32:2b:0e:bc:c0:9a:2a:c6:b1:
8c:f1:4b:68:b0:14:01:68:7f:97:69:07:2b:96:01:b8:98:59:
dc:61:32:53:72:bf:dc:a3:89:61:1f:2e:0a:7f:80:a0:1c:15:
4e:a9:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:42 2026 by rpki-client