Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LiF98IG4wplGSYK_CSO3yyFuN2k.roa
File: LiF98IG4wplGSYK_CSO3yyFuN2k.roa (raw, json)
Hash identifier: Iq/Yg7zlKb5xYCI7ZU69XbosXlqncP4wVbXVeUyU9XA=
Subject key identifier: 2E:21:7D:F0:81:B8:C2:99:46:49:82:BF:09:23:B7:CB:21:6E:37:69
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FEDF40A9D95C8B7665CDD0DE5E0C
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LiF98IG4wplGSYK_CSO3yyFuN2k.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41503
IP address blocks: 194.209.23.0/24 maxlen: 24
212.243.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:df:40:a9:d9:5c:8b:76:65:cd:d0:de:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e217df081b8c299464982bf0923b7cb216e3769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:67:af:65:05:e8:dd:b0:bd:76:5c:b7:51:13:
a1:65:8e:a4:16:0c:d8:3f:08:d1:e7:59:49:3a:33:
61:8d:43:ba:09:9d:91:b7:19:c3:1b:b4:92:09:7e:
ca:9d:55:4e:1a:1b:f6:bd:ae:aa:3d:a8:98:05:51:
f9:be:f8:f0:2d:b2:10:ac:d8:29:f5:5f:8b:44:28:
0e:03:58:ad:85:65:04:64:47:ad:dc:fe:92:c7:47:
6a:cd:17:dd:62:18:83:3f:52:68:71:c4:11:5e:ba:
03:fe:66:c0:00:15:61:19:6f:d2:e5:38:15:74:f6:
ee:56:af:50:12:82:b5:62:a5:e0:01:9d:b9:9e:9d:
99:52:b6:5b:03:9d:68:e7:ce:a8:8f:61:ee:3e:39:
bc:16:01:3a:c8:e0:4f:7b:0b:a5:01:1a:4f:c7:a8:
94:d0:2c:a8:09:86:31:67:c5:0f:02:79:37:ac:e2:
a7:1a:f0:a7:6b:24:b7:d9:b8:8d:67:c6:d9:fc:81:
5f:e0:d1:cf:fb:77:81:8e:b8:db:32:50:20:43:52:
21:7c:d3:f8:b6:75:48:ab:f6:3e:f9:f4:a1:c0:5d:
2b:2c:9e:90:4b:81:54:9f:f1:2e:11:71:59:7f:83:
61:4c:34:69:cf:52:96:f0:d4:09:b9:37:02:d8:8f:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:7D:F0:81:B8:C2:99:46:49:82:BF:09:23:B7:CB:21:6E:37:69
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LiF98IG4wplGSYK_CSO3yyFuN2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.23.0/24
212.243.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:15:6c:9f:19:f0:8e:e9:93:d8:66:ff:ce:40:0d:55:db:b1:
bb:07:07:91:72:f2:9c:ec:24:16:1a:18:33:02:67:7a:9c:11:
9b:2d:f3:78:3a:7a:f3:0e:3e:a9:97:e8:73:49:1c:93:73:10:
8f:2a:ca:a6:7c:a2:61:d4:b8:e5:c8:97:89:9c:ba:c1:d9:55:
47:fd:f1:a3:05:7f:e4:57:a0:f7:5c:bd:d3:0f:55:cb:41:5b:
39:35:f8:8c:28:87:14:0b:0f:20:35:52:6d:2e:ad:25:30:fc:
98:1c:4a:bc:09:59:ea:b0:06:2d:fa:85:ca:6e:38:af:8b:e1:
22:f0:f9:eb:30:51:f4:b5:4e:f6:a0:92:ac:a6:e2:42:6e:79:
fb:4f:33:12:9c:3e:e0:2f:85:87:cb:11:90:f9:bd:8d:99:75:
7c:bd:c5:1f:24:10:f8:a5:7a:b1:fc:6b:79:b1:d4:5f:cc:d3:
8e:08:59:90:dd:fd:b4:fe:35:30:b1:ad:0c:e5:9f:89:ba:2a:
57:e5:6a:94:77:92:15:61:8a:90:df:24:5b:3e:65:77:8a:bd:
51:27:cd:5a:2b:da:d4:34:bb:75:b6:95:96:4c:1e:dc:f6:3d:
c7:c2:c0:95:5a:d1:11:ca:81:e5:cc:2b:10:91:9d:76:5b:6c:
3c:88:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:30 2026 by rpki-client