Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LzB-XyhknLOqhyP8NRt5EI3rawo.roa
File: LzB-XyhknLOqhyP8NRt5EI3rawo.roa (raw, json)
Hash identifier: HBkIb3BTytwqLLmYY613rP4Ot+KoJRvinsb75XoQThM=
Subject key identifier: 2F:30:7E:5F:28:64:9C:B3:AA:87:23:FC:35:1B:79:10:8D:EB:6B:0A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0D74714D176B24D5A41D21B46E8B69DDE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LzB-XyhknLOqhyP8NRt5EI3rawo.roa
Signing time: Fri 25 Sep 2026 06:35:54 +0000
ROA not before: Fri 25 Sep 2026 06:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:47:14:d1:76:b2:4d:5a:41:d2:1b:46:e8:b6:9d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 25 06:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f307e5f28649cb3aa8723fc351b79108deb6b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:a7:06:79:18:d7:a4:5d:ec:e2:c4:36:0f:
4f:84:27:e5:26:dc:94:5a:9e:02:51:9c:bc:76:68:
7a:c9:82:2e:33:4c:1f:db:48:56:0b:39:d6:cd:98:
26:54:9e:6f:70:dd:eb:31:56:b6:72:1a:11:cf:65:
a9:b4:40:15:39:aa:f9:d8:4e:62:28:4c:31:69:49:
0b:a5:fb:13:66:e6:7a:79:33:96:d2:f7:39:5a:55:
88:f4:df:54:99:25:ca:1c:aa:72:94:c6:f6:2e:45:
36:5f:f5:9d:1f:16:16:77:6f:0d:c5:ef:16:39:d1:
87:ce:e3:87:c8:54:d3:ae:8d:de:45:b6:f8:0f:dc:
0b:03:55:bf:59:80:41:6c:5b:a0:d9:75:b9:e8:28:
e9:68:66:11:92:01:13:0c:78:62:e6:01:06:56:b7:
8e:ca:a6:74:7e:e0:97:35:25:f6:6a:0b:03:55:39:
15:6c:c5:f0:fd:37:b8:f3:33:31:00:5a:6a:ae:a1:
bd:67:20:e5:c7:1a:da:3e:52:55:22:ff:1a:0d:f2:
b9:b5:12:a4:69:5b:f4:30:1b:a1:5b:c9:9f:e3:2a:
53:90:99:f3:77:9d:05:09:b3:c3:f0:d5:22:50:dd:
21:89:6b:1d:04:af:07:0b:da:1b:5c:e3:f3:e1:b2:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:7E:5F:28:64:9C:B3:AA:87:23:FC:35:1B:79:10:8D:EB:6B:0A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LzB-XyhknLOqhyP8NRt5EI3rawo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d6:05:c9:be:49:f4:33:5b:c6:51:10:11:2f:b4:7d:7d:a6:
d6:9c:d4:4d:de:e7:99:6b:2e:4a:86:78:5f:ec:42:c8:b1:e1:
1a:f5:64:01:28:85:7e:a6:fc:12:51:57:5a:bb:58:3f:79:24:
76:1a:28:e3:a7:0f:0a:c0:51:1f:26:35:8a:77:33:69:e6:9e:
83:2f:54:94:2d:9b:09:54:24:db:69:e4:18:5b:be:15:63:c4:
18:9f:d5:35:8a:f4:5f:27:7b:43:6c:c8:4d:76:e9:f1:be:12:
ba:01:36:75:36:c3:90:9e:27:ce:a8:e0:a0:64:4a:c9:48:0d:
3d:3f:eb:a3:9b:a8:99:61:69:ac:ac:ab:f8:8e:73:2c:36:98:
00:17:90:91:cd:79:db:5f:7c:e4:a9:f6:22:d2:af:92:c2:4a:
b3:f0:bd:4f:e0:50:78:43:51:9d:d9:1d:09:b3:bf:fa:23:8b:
65:32:87:64:a2:7d:40:52:51:57:d1:40:64:a2:1f:68:72:14:
38:af:36:ef:c5:24:c4:53:e4:49:cf:f7:cd:4c:7f:47:ab:a2:
cb:e9:b1:72:04:f6:c8:9e:c2:b6:9f:1a:c4:d8:0b:de:9f:02:
7e:4b:d9:77:d1:ea:61:f2:3b:c3:fe:b6:d9:f4:fe:02:19:3f:
e3:86:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:36 2026 by rpki-client