Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LLGFGY47G6GkZ7kvezgJKdEHTmM.roa
File: LLGFGY47G6GkZ7kvezgJKdEHTmM.roa (raw, json)
Hash identifier: 3YynRsS/tI+maGaPDE6n9+ZXyEgKP5YXcqKGqda/14U=
Subject key identifier: 2C:B1:85:19:8E:3B:1B:A1:A4:67:B9:2F:7B:38:09:29:D1:07:4E:63
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A03C93B59F5D289580745291E69352CF97
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LLGFGY47G6GkZ7kvezgJKdEHTmM.roa
Signing time: Wed 26 Aug 2026 05:38:28 +0000
ROA not before: Wed 26 Aug 2026 05:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a14:1100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:93:b5:9f:5d:28:95:80:74:52:91:e6:93:52:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 26 05:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb185198e3b1ba1a467b92f7b380929d1074e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:c4:4a:e5:cb:18:1d:96:64:0e:f0:0a:4c:
9f:ac:3a:a1:d4:80:68:5f:ee:0c:df:b3:1a:f4:3d:
18:fd:7f:6b:cd:16:c4:3f:8f:d8:bd:9d:c9:94:05:
6b:60:c6:9e:86:d5:51:41:46:3b:95:9c:ec:76:e2:
88:fc:ca:bf:b9:97:14:64:8f:3f:f2:2b:85:e6:72:
9e:7b:de:13:6a:1e:1d:0a:42:91:e4:62:64:48:3e:
66:ac:25:74:85:a8:98:3e:15:f4:73:a0:26:49:6e:
ea:1a:ff:97:a3:74:61:d5:01:91:5a:66:c0:a9:44:
7e:df:f3:b1:e6:69:c0:59:22:d2:b1:b3:9b:9f:39:
92:06:41:78:9d:52:c3:a1:33:8c:ab:51:a0:79:cb:
d8:21:47:48:d1:34:3a:81:44:60:69:0c:24:2a:a6:
fc:95:5d:fd:2a:b1:36:0a:37:67:86:9f:93:f0:60:
11:21:b9:3c:61:bb:9e:d3:82:fa:71:55:29:90:e5:
38:a2:21:4f:f8:5c:7f:09:8d:38:fa:93:f8:1c:10:
25:93:72:57:a1:ad:b5:bb:ff:4a:df:1a:03:ce:d0:
27:b0:e7:8b:e9:7c:bf:4f:68:be:3b:60:c1:8e:04:
fd:1d:b5:c9:91:2e:4d:e7:fe:7e:a0:c3:c3:67:9d:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:85:19:8E:3B:1B:A1:A4:67:B9:2F:7B:38:09:29:D1:07:4E:63
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LLGFGY47G6GkZ7kvezgJKdEHTmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a14:1100::/29
Signature Algorithm: sha256WithRSAEncryption
6a:c5:b0:fa:99:b7:d4:2c:55:36:2f:c2:c8:cd:d5:f6:02:d7:
e3:53:31:2d:cd:f7:cb:44:64:2b:0e:e3:6e:e0:1d:d5:38:92:
7e:94:61:60:4c:d6:08:e5:4b:ad:da:93:fd:69:aa:c5:14:7a:
ea:57:6a:22:24:65:61:c6:49:ae:b1:a3:2b:e7:6c:e4:bf:6c:
c7:49:2f:d4:48:54:25:55:15:dd:fa:db:43:83:91:f4:c1:02:
d7:0c:bf:f8:e9:25:f8:02:91:59:fe:7a:5f:b2:2c:ca:a6:01:
7d:57:52:3e:89:46:0c:7f:27:63:2a:ad:e9:5a:8e:53:91:b8:
3e:5f:7c:64:13:39:72:3d:69:2f:37:6c:18:75:a8:90:c2:ac:
8b:87:40:0c:44:c8:b7:1b:81:e0:8c:76:10:19:45:a3:fb:b6:
5e:7a:6a:9d:b8:5c:ca:af:de:c7:b4:b7:5a:2a:f3:fe:b3:b2:
4e:67:c5:a8:28:b0:2b:ac:31:31:1f:ad:cd:f2:62:ee:20:99:
63:31:23:04:49:4d:2e:b8:8a:ac:75:9c:6f:e6:cd:18:bf:fb:
2a:1d:12:8d:00:09:20:9d:87:18:e8:8f:b9:52:2d:48:f8:06:
fd:7d:e6:9d:7d:68:25:af:24:ff:ec:41:eb:4f:9f:5f:d7:09:
e8:06:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:51:42 2026 by rpki-client