Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa
File: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (raw, json)
Hash identifier: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=
Subject key identifier: 96:3C:3B:70:34:F9:98:BD:31:D3:8F:FC:9C:87:BE:C4:0E:94:81:64
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F236934D701132B5ACEA29E33625B88C3
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8551
IP address blocks: 128.139.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:34:d7:01:13:2b:5a:ce:a2:9e:33:62:5b:88:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963c3b7034f998bd31d38ffc9c87bec40e948164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:71:b0:c1:5f:e2:6a:69:ba:54:a7:13:9f:
bd:8f:d6:0f:03:a2:37:12:f8:bd:4f:6e:1d:dd:e7:
4b:c8:dc:c5:64:12:8c:5d:af:0f:c7:27:13:d8:bb:
c1:ed:2e:83:51:38:8b:fd:25:e0:fe:5a:03:99:26:
ff:ae:a6:64:05:a5:e0:52:9b:d0:fc:0e:57:54:bf:
85:50:ba:a0:e3:e4:9f:7d:eb:4f:93:f3:53:a6:a5:
dc:3d:f8:18:fb:e9:a9:f9:f0:9b:48:85:6d:a2:6f:
1c:99:c8:9b:21:de:05:23:0b:92:1d:08:c9:56:83:
cf:86:1c:ba:fd:cb:cb:43:04:0a:52:d6:40:73:eb:
ae:ca:fe:af:92:bd:e6:0d:63:8f:fd:43:52:7f:4d:
8b:6c:47:85:6a:e5:6b:56:a2:1d:19:4b:e8:44:a4:
5b:7d:e9:8e:70:37:e6:5b:30:95:9a:5c:ee:73:6d:
47:5c:4c:4b:d9:c8:2a:7d:b6:07:20:6b:6e:94:66:
98:eb:3f:c6:1d:d2:d8:c9:6e:14:e9:6a:eb:6c:21:
f8:58:bd:f4:a7:91:16:76:15:c4:f2:37:4e:37:a0:
b4:a7:3a:62:8e:7a:d7:a6:61:05:18:e4:ef:f3:89:
ea:75:90:7d:40:10:b7:be:d9:54:17:7c:18:e7:e1:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:3B:70:34:F9:98:BD:31:D3:8F:FC:9C:87:BE:C4:0E:94:81:64
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:88:68:98:c8:55:02:e7:a4:86:05:cf:13:ee:f8:9f:37:2f:
5a:c2:0d:1d:12:0e:40:4b:71:ea:ca:d0:19:2d:78:14:cf:85:
47:6d:c3:68:ce:ef:e9:28:d3:9f:68:3e:28:da:43:b7:3b:a0:
42:28:54:74:c7:ef:69:ac:f1:6e:22:a9:06:99:52:70:35:9d:
b0:d5:ca:38:ca:2f:c0:ec:4f:5e:db:c0:b6:8e:51:6f:55:ff:
14:20:a0:0e:42:62:8d:61:40:a8:7e:60:e5:c8:af:71:80:78:
9b:20:3f:07:1c:02:56:a4:32:86:31:9e:8b:69:90:3b:e4:08:
c0:5b:b7:b9:98:b4:53:65:5f:2b:6e:8a:e9:06:b3:48:19:13:
2b:4a:c2:f9:6f:09:a6:84:e1:d4:e0:d1:d8:18:4a:cf:ca:a4:
62:b7:5e:7f:2a:79:65:49:95:c6:a2:b8:23:36:a7:27:7a:28:
5c:49:74:11:04:f0:2d:bc:e0:34:2e:cc:3b:1b:59:f1:c8:c5:
8d:55:44:43:4f:04:f7:06:38:be:87:8d:9c:c2:64:ae:bf:eb:
2e:27:96:bd:7f:39:98:c9:a9:38:bf:5a:a4:fa:7f:fe:64:03:
80:47:3b:51:7e:59:96:fc:1d:34:5a:63:3d:28:a8:a1:ab:34:
6e:a1:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:48 2026 by rpki-client