Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/lmotZZaP-oLJszIL5yzQv1G62qo.roa
File: lmotZZaP-oLJszIL5yzQv1G62qo.roa (raw, json)
Hash identifier: CVe5HA8XTkB4hUBikhtIn8qce4VsU+h5vTnqP0aGAi0=
Subject key identifier: 96:6A:2D:65:96:8F:FA:82:C9:B3:32:0B:E7:2C:D0:BF:51:BA:DA:AA
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019F6074526585BE272F65798B3438273DBD
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/lmotZZaP-oLJszIL5yzQv1G62qo.roa
Signing time: Tue 14 Jul 2026 11:47:43 +0000
ROA not before: Tue 14 Jul 2026 11:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 31.14.72.0/24 maxlen: 24
31.14.73.0/24 maxlen: 24
31.14.74.0/24 maxlen: 24
31.14.75.0/24 maxlen: 24
185.51.229.0/24 maxlen: 24
185.51.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:74:52:65:85:be:27:2f:65:79:8b:34:38:27:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jul 14 11:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=966a2d65968ffa82c9b3320be72cd0bf51badaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:20:88:07:95:33:5e:d0:9c:db:97:4f:03:
33:da:59:76:6b:80:e2:cb:28:99:c4:42:38:8a:92:
51:41:12:aa:f6:01:7e:b1:26:06:f7:15:0d:71:ca:
a0:ef:80:cc:c3:d1:6d:90:b6:d3:bf:a4:da:8d:5c:
bd:34:ef:e9:4a:d7:ad:0c:f5:31:39:dc:25:c5:5f:
b6:b6:e8:58:86:71:38:ae:43:93:93:de:3d:e7:a1:
16:c1:a5:57:3d:26:ab:19:14:36:ec:37:08:40:03:
8e:cc:57:d1:06:6d:7e:35:ff:af:35:20:60:7e:cc:
b1:1b:58:12:ea:a8:48:fe:be:61:10:e7:e1:94:85:
06:4e:fc:9a:c1:93:96:e4:ca:32:b2:11:71:77:c9:
f5:2f:02:2a:3b:e4:5e:c2:70:92:98:93:6e:9c:b1:
97:f0:b2:ba:69:dd:89:fc:4a:a5:02:f0:cb:0f:17:
a8:d0:d8:ac:de:94:a5:6d:46:3d:0f:56:a3:b2:e3:
a4:c1:d1:39:27:ec:03:8a:8b:db:77:84:e8:31:1d:
34:33:99:61:87:1b:8c:b7:94:33:9a:3a:5b:32:60:
dc:8a:f6:17:7a:18:41:f1:80:f5:08:46:94:83:93:
1f:58:88:5f:a9:82:19:6e:81:4b:92:f8:03:a1:2a:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:2D:65:96:8F:FA:82:C9:B3:32:0B:E7:2C:D0:BF:51:BA:DA:AA
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/lmotZZaP-oLJszIL5yzQv1G62qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.72.0/22
185.51.229.0-185.51.230.255
Signature Algorithm: sha256WithRSAEncryption
09:7a:68:e7:5f:61:8f:98:4d:bb:a3:78:6c:75:64:4f:97:e7:
e2:02:68:49:2e:f4:7a:a5:bb:e5:b2:b4:84:dc:78:0b:e4:f0:
3a:a1:66:39:d9:aa:3f:80:e0:9d:0f:98:9f:ed:bf:29:9a:e3:
38:5d:4f:5e:04:60:3a:1e:16:0e:68:d7:40:fb:3b:db:05:d7:
5d:03:44:ad:aa:2b:03:04:a6:fb:ed:10:1d:e1:de:a4:74:4b:
71:dc:57:9a:32:ff:b6:15:11:19:9e:c1:9e:92:c7:70:43:18:
8d:ba:96:3b:f0:72:e9:5c:22:d1:0c:18:33:6b:95:d4:ea:87:
2b:97:f5:c9:ff:9e:24:c1:e6:6d:cd:2d:fd:e8:a3:85:db:fa:
32:cf:83:d6:e5:77:11:77:25:2d:4f:e1:57:1f:c0:b9:e1:e1:
3f:8e:17:e8:70:1a:76:ae:7b:84:de:53:cf:a4:39:07:39:a7:
5b:3a:e7:6c:58:07:59:34:3d:d0:fc:f0:b1:13:22:92:99:83:
20:33:22:27:95:16:ac:26:76:40:76:95:c2:a5:82:4d:4a:ca:
ac:0b:a5:bd:d8:59:81:0e:6f:f9:ac:21:d1:c8:94:48:6c:21:
d6:fe:45:e5:1d:91:b8:34:c6:54:29:8e:5a:12:aa:37:7b:20:
ab:ed:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client