Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/L3SCpmXJBeENQlngFVsPO7y4j9I.roa
File: L3SCpmXJBeENQlngFVsPO7y4j9I.roa (raw, json)
Hash identifier: TNxBSmMFYjhX4xx6VIgUZfTdujBVV7wlaoUOw5FQgSs=
Subject key identifier: 2F:74:82:A6:65:C9:05:E1:0D:42:59:E0:15:5B:0F:3B:BC:B8:8F:D2
Certificate issuer: /CN=99c1664db8f7db92e7d446507627395bc107dd5d
Certificate serial: 019FF519A39C4C6273839C90B1B950638E7F
Authority key identifier: 99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/L3SCpmXJBeENQlngFVsPO7y4j9I.roa
Signing time: Wed 12 Aug 2026 08:32:05 +0000
ROA not before: Wed 12 Aug 2026 08:32:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8319
IP address blocks: 193.28.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:19:a3:9c:4c:62:73:83:9c:90:b1:b9:50:63:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99c1664db8f7db92e7d446507627395bc107dd5d
Validity
Not Before: Aug 12 08:32:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f7482a665c905e10d4259e0155b0f3bbcb88fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:6e:41:ae:07:c0:4c:b6:1d:d4:9e:90:5c:
98:3e:ab:4f:10:ed:c4:48:2d:c4:f0:75:c2:2c:9b:
f1:42:42:99:f4:22:60:ac:cc:96:5b:25:52:94:b8:
e5:b9:bf:14:ed:a7:65:96:83:e6:3c:9b:0a:ab:00:
c2:38:76:9e:53:2a:76:48:1a:7d:5c:d0:7c:96:2f:
c8:b0:65:31:45:b9:93:c4:0c:01:7d:07:b7:1b:59:
8f:dc:0d:99:e5:73:7e:38:26:92:b7:b9:d8:a3:2b:
e6:9b:d8:a7:df:c7:43:f3:48:8d:84:4a:bd:94:e0:
f5:91:65:3b:b6:4e:53:cd:b4:92:5d:d1:a9:d9:90:
3e:4b:e6:39:78:fe:10:8b:0c:16:b8:4f:85:3e:f6:
d3:11:d9:ff:47:b2:5f:7d:3f:7d:c0:28:fe:db:63:
54:42:da:4d:9d:21:15:98:1d:ae:a7:dc:bc:21:ea:
e3:3a:c4:6b:17:b0:89:85:a2:dc:7f:7e:28:d1:b4:
20:13:2b:28:bb:55:e6:06:86:81:a1:b5:d2:95:a4:
4f:ed:84:b0:44:e8:eb:a2:fa:41:66:9b:88:c0:3b:
55:21:04:e2:37:64:fa:65:e3:37:e9:23:da:66:94:
44:7c:b0:b6:7b:53:74:31:58:89:bb:e2:59:57:a9:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:74:82:A6:65:C9:05:E1:0D:42:59:E0:15:5B:0F:3B:BC:B8:8F:D2
X509v3 Authority Key Identifier:
keyid:99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/L3SCpmXJBeENQlngFVsPO7y4j9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:15:08:51:eb:ee:42:a9:75:7c:86:7f:77:6b:ca:84:02:a4:
4d:63:65:8a:70:69:0b:5e:1b:4d:ff:1a:fd:0d:2e:d9:bc:fc:
73:2d:4f:e6:3e:32:1c:ac:20:a2:d0:b9:1f:3a:d7:6e:30:7c:
d7:d1:14:b4:a1:1b:f0:7a:4b:9b:ff:93:02:d7:d0:6c:98:67:
7c:ad:e5:b9:98:ac:32:fa:cf:d4:1f:00:c1:44:a0:09:79:33:
85:a3:11:29:f9:b8:2e:bc:62:81:fc:1b:f0:dc:26:5e:94:29:
e2:85:07:58:41:82:e7:c8:c2:aa:63:b8:63:36:41:9d:82:80:
ff:3b:ca:5f:8d:3f:5b:d3:65:fa:de:20:a8:21:ce:6b:00:dc:
2d:5c:e7:bb:39:83:6e:ff:bc:8b:4e:f3:14:ba:23:9b:14:bd:
68:3e:7e:10:72:58:c3:a2:65:a9:0e:82:63:86:c6:03:7f:1f:
3f:95:1f:51:1c:88:b4:4c:2c:c3:5f:dd:48:70:8a:1b:61:e2:
ad:c0:9f:3c:87:29:16:d1:0c:40:1c:6d:5c:86:35:32:3d:65:
a0:20:6c:40:49:ae:a3:db:3f:75:ac:d6:80:64:f9:69:52:2d:
70:bb:00:4d:e6:44:9a:23:d0:ed:6d:fe:a6:4d:84:c5:a9:cb:
7c:69:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:15 2026 by rpki-client