Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/La6QsZIkeafLMENFBqSzGD_S69w.roa
File: La6QsZIkeafLMENFBqSzGD_S69w.roa (raw, json)
Hash identifier: g+qFjsH1SQRGpklTOUV0a2PvJjqgS783EmS1uUCSURc=
Subject key identifier: 2D:AE:90:B1:92:24:79:A7:CB:30:43:45:06:A4:B3:18:3F:D2:EB:DC
Certificate issuer: /CN=92d21051ca698240a58d4480ec40ad753768dfed
Certificate serial: 01A15D3D805766D4B913A8FB23D22D94EFA6
Authority key identifier: 92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/La6QsZIkeafLMENFBqSzGD_S69w.roa
Signing time: Wed 21 Oct 2026 06:54:33 +0000
ROA not before: Wed 21 Oct 2026 06:54:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 185.225.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:3d:80:57:66:d4:b9:13:a8:fb:23:d2:2d:94:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d21051ca698240a58d4480ec40ad753768dfed
Validity
Not Before: Oct 21 06:54:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dae90b1922479a7cb30434506a4b3183fd2ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:6c:1d:df:3f:a8:2c:16:25:eb:d5:48:16:
ce:53:4d:3e:27:0f:0b:ae:38:35:4a:42:9d:ab:ae:
88:15:72:49:9f:41:ce:59:2b:68:ae:11:a2:5a:ea:
fe:96:55:1e:77:51:43:b1:a9:91:ce:70:7e:8c:1a:
f4:02:7a:cd:bc:39:5b:01:49:be:eb:65:a7:e9:bd:
a2:57:25:c0:73:b9:68:d1:e2:f2:3d:77:5c:70:d5:
3c:1d:47:c9:80:e4:4d:e8:e9:6d:1a:f8:a2:c6:8b:
77:df:96:63:4b:0b:a5:85:30:3c:21:92:ab:9d:f1:
f0:67:a0:cb:61:6b:c7:4b:78:84:5a:db:36:c2:d6:
bc:15:38:66:22:5a:fd:88:97:6c:7c:bc:5e:c1:c8:
b6:ac:6b:e4:76:56:98:f1:d6:ce:fe:70:9c:55:d5:
57:f5:fb:0c:e2:aa:28:e0:22:bd:a0:22:fc:82:95:
c1:f2:f2:2a:a6:7d:1e:4e:ac:aa:11:42:32:41:8b:
dd:6f:a1:cf:d1:bb:1b:dc:0a:d1:1e:a1:a7:ec:39:
97:09:39:fd:c1:fe:7d:fd:c6:88:df:0f:a9:f4:ce:
f2:47:ae:44:ba:ea:a1:98:c3:fe:a0:16:8d:ff:47:
07:b1:ed:27:d9:87:8f:7a:df:39:ea:03:4d:92:fd:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:90:B1:92:24:79:A7:CB:30:43:45:06:A4:B3:18:3F:D2:EB:DC
X509v3 Authority Key Identifier:
keyid:92:D2:10:51:CA:69:82:40:A5:8D:44:80:EC:40:AD:75:37:68:DF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktIQUcppgkCljUSA7ECtdTdo3-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/La6QsZIkeafLMENFBqSzGD_S69w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7f84cb-899b-4adb-acbf-7a1117dda989/1/ktIQUcppgkCljUSA7ECtdTdo3-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
43:96:29:1b:3e:4a:58:18:6b:ca:9e:3a:4c:ae:be:25:5b:fb:
56:ba:3e:16:0a:8f:e7:5a:61:2a:10:85:6c:b4:be:a2:f9:bf:
7e:0d:3d:86:7e:af:d4:6f:19:d1:e6:39:91:cf:90:37:5c:74:
5b:c1:aa:28:0e:76:74:88:c0:0c:59:9b:f9:9a:24:69:3b:43:
bf:3f:77:f7:68:2c:47:33:d1:c0:c2:66:a8:82:7d:c6:bd:78:
82:78:58:18:8c:29:15:6f:ec:3d:1a:a6:3d:4e:5d:52:f0:b8:
b3:79:9e:bd:34:96:29:2d:06:0c:79:99:a9:23:01:9d:56:f7:
d3:c5:ff:c7:92:43:10:6f:ac:8d:f0:3e:bd:c0:9e:d6:fb:f5:
d1:d6:5a:f4:f0:13:be:f7:83:57:d2:86:5f:f0:0f:13:fd:b4:
be:3d:0f:3e:a2:b4:a8:7c:c7:9d:b8:97:3d:90:45:82:2b:84:
4a:b7:13:3b:b8:ac:8d:d7:bc:4e:cd:62:9e:b6:d2:3e:56:7d:
a5:ad:3e:26:c8:7a:d3:b5:6f:73:86:c3:7f:d6:00:09:87:69:
f9:67:a8:7b:06:c2:e6:46:13:22:03:b6:f1:27:d1:bf:be:d6:
35:78:a1:50:83:33:f5:d1:24:30:95:ab:fe:8a:62:de:17:d4:
a2:55:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:29 2026 by rpki-client