Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LC8JdHb7mQK2U35xl1WDG4Ecgco.roa
File: LC8JdHb7mQK2U35xl1WDG4Ecgco.roa (raw, json)
Hash identifier: ZOsWFR7wNV8Rqt3zChMJWe1z+CmXOSdrTussL35X9v4=
Subject key identifier: 2C:2F:09:74:76:FB:99:02:B6:53:7E:71:97:55:83:1B:81:1C:81:CA
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019FDD51287ADE62E9B1F22A7F16ECC54DBD
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LC8JdHb7mQK2U35xl1WDG4Ecgco.roa
Signing time: Fri 07 Aug 2026 17:41:51 +0000
ROA not before: Fri 07 Aug 2026 17:41:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 5.178.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:51:28:7a:de:62:e9:b1:f2:2a:7f:16:ec:c5:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 7 17:41:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c2f097476fb9902b6537e719755831b811c81ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:71:70:90:46:05:b7:37:c8:b8:b9:46:f4:
18:ed:49:2a:5e:ef:82:67:c8:db:b5:ca:6c:2f:5f:
75:e7:8c:44:48:cf:5e:d2:b2:f6:46:89:ef:0c:64:
8d:57:d7:ad:4b:33:24:48:74:17:cf:84:e7:9d:83:
02:fb:f5:8b:50:d8:17:77:2e:ee:e7:1c:7a:78:82:
bd:b0:cb:1f:5a:43:74:ec:9d:f3:20:e4:fa:39:1a:
ce:0b:63:bd:f7:05:bd:27:4d:1e:c4:4a:07:d5:00:
86:43:48:7e:94:ea:64:2c:99:8e:4e:df:e4:be:27:
69:fe:2d:6b:f7:94:9b:6e:27:71:63:4a:b9:1d:9c:
f2:0e:e8:6f:51:6d:ac:31:4f:18:3e:3a:1b:06:51:
9a:60:85:c8:bf:48:d3:7c:b8:d2:dd:8b:09:33:27:
95:6f:7a:88:80:2a:07:b7:0c:50:0c:a7:5f:3a:40:
29:7a:29:5d:73:a8:f7:89:59:ee:3e:f1:a9:42:4c:
d1:f3:78:fd:6d:56:b7:bd:2c:a0:b5:df:56:cd:fd:
c4:9d:31:39:cb:5b:2f:3e:e1:2a:e7:89:cb:19:5a:
53:e7:72:80:6d:90:5a:47:49:80:eb:20:0f:94:37:
d0:dd:0d:b9:0d:91:d3:d9:08:e7:c3:dd:79:d6:cf:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:09:74:76:FB:99:02:B6:53:7E:71:97:55:83:1B:81:1C:81:CA
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LC8JdHb7mQK2U35xl1WDG4Ecgco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:09:49:d8:d1:43:80:81:b1:83:ad:33:28:1c:d7:f8:11:aa:
2b:f0:a6:57:be:36:c5:9f:be:57:30:00:95:87:1f:d4:4b:e0:
56:d8:f5:cf:f4:2f:43:eb:ae:67:22:d1:4a:dc:12:e7:d2:d9:
12:59:c0:12:2e:45:4f:ae:b4:cf:3a:42:34:64:bd:48:57:15:
bb:d1:8b:54:55:c3:d1:e3:46:b9:f8:54:b1:8d:1d:2e:9e:31:
d2:a6:2f:53:78:f1:6b:af:09:5f:4a:d5:5a:bf:5b:b3:68:70:
33:68:b3:81:21:97:90:86:24:4c:fa:6c:6e:f5:59:52:d4:f3:
27:02:0d:2b:cb:b8:46:7d:d2:29:64:76:5d:0c:ba:07:df:2c:
43:14:f5:f0:a3:ad:ba:21:85:e5:60:a2:e2:6c:40:fa:75:d2:
b1:c2:7b:6d:9d:f8:c3:05:6e:e0:63:e7:27:f4:d5:11:41:ac:
10:92:c6:a9:d4:4b:4f:aa:3d:c2:b5:98:f3:44:99:32:49:dd:
a5:2c:0f:6f:e6:70:d4:32:44:2d:6a:9e:49:77:22:ec:80:35:
7d:b5:49:bc:f6:21:45:15:6f:fe:3f:c7:1d:f8:10:67:fc:7a:
f7:f1:2d:ab:76:69:5f:4e:d5:05:8d:66:c0:1e:8f:37:9e:0d:
bc:7e:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:09 2026 by rpki-client