Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lpDAgg4AViKjNfvqsbU5HuQK3o0.roa
File: lpDAgg4AViKjNfvqsbU5HuQK3o0.roa (raw, json)
Hash identifier: E5rS7pR3NwLaFAJ0KGY6jvLzAHj/IWUIwj1whdCbwcc=
Subject key identifier: 96:90:C0:82:0E:00:56:22:A3:35:FB:EA:B1:B5:39:1E:E4:0A:DE:8D
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694EF822C5E9EE29E2313F631017C0
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lpDAgg4AViKjNfvqsbU5HuQK3o0.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208757
IP address blocks: 91.239.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4e:f8:22:c5:e9:ee:29:e2:31:3f:63:10:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9690c0820e005622a335fbeab1b5391ee40ade8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:74:aa:47:8d:bc:a6:8e:a6:61:86:71:24:
44:b2:42:00:d1:17:df:e2:6d:bd:e1:f1:89:ef:89:
fb:4a:f7:e3:89:19:9f:28:f5:e9:ae:60:14:7b:d4:
7e:0c:fb:5c:16:1b:e9:ba:ba:b3:1f:e1:cf:63:31:
4b:a3:db:fc:a7:2a:7e:e3:c2:af:ec:94:3d:c0:0b:
01:e7:db:0d:df:67:c4:c9:42:2e:54:f5:27:86:a6:
70:90:3b:7a:02:5a:ae:7a:1b:4e:68:e2:f9:9f:93:
7b:48:76:88:64:bf:58:73:ad:ca:60:31:62:db:5d:
db:5c:31:8e:78:21:83:3e:fa:67:1c:c8:6d:69:e5:
f6:09:c3:1c:3f:79:bd:3c:54:77:af:86:b9:8d:ff:
d0:84:52:37:54:04:ed:77:34:49:3a:b3:4d:00:60:
a2:dc:d4:a1:8d:ba:c8:59:4e:ff:d6:cd:fe:38:c0:
98:48:61:2b:69:9e:74:4b:cf:3f:5b:07:0c:a7:b1:
cc:e0:af:a2:cb:d4:03:8b:d7:38:58:4a:76:22:d2:
18:fd:64:78:e8:f4:c8:8a:72:3b:d4:73:fc:ac:c6:
a3:e8:04:ac:71:42:eb:be:28:52:ec:29:62:33:14:
41:e7:7d:27:7e:c2:38:65:ce:47:78:c5:c6:70:74:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:C0:82:0E:00:56:22:A3:35:FB:EA:B1:B5:39:1E:E4:0A:DE:8D
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/lpDAgg4AViKjNfvqsbU5HuQK3o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.220.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a7:db:90:35:ac:ee:4c:ac:44:60:bc:21:d2:04:ac:e7:c4:
dc:ff:23:1c:40:f1:ae:c5:b0:b9:6b:77:72:9b:f2:da:5d:d3:
0d:60:4f:27:98:b1:47:b2:09:aa:c1:5b:a3:77:35:fb:72:5b:
87:97:21:f8:c5:30:48:d3:26:fb:be:46:ae:13:74:ee:05:7e:
7f:5d:76:21:25:1b:5c:a6:ac:7e:ff:46:3a:6f:21:8e:87:4a:
6c:36:a4:33:05:ea:01:84:f3:2a:96:c6:9d:d3:47:4a:b0:d6:
8b:8c:d1:61:e3:e0:bd:b2:f0:63:78:3b:24:f4:b6:8a:f9:4d:
26:df:5f:cc:8d:37:b3:63:5f:3e:37:ac:83:b5:7e:14:e9:3e:
7d:c3:8c:da:a0:e1:90:5f:d0:97:4c:07:be:db:0f:1a:d0:f3:
af:ac:a5:bd:1c:9e:94:57:fc:65:52:be:b1:ff:88:07:db:34:
9a:68:76:5f:94:e0:78:38:e6:88:bf:7f:8d:ff:5a:96:30:0f:
34:b0:b1:e9:17:be:ba:86:b3:f6:ec:8b:d6:23:47:35:a2:18:
f7:ec:8a:32:16:09:10:65:cf:7a:13:14:4b:ac:d8:0d:e3:a2:
08:16:1b:01:8e:6c:00:58:bc:e1:bf:ba:79:ac:0e:88:a2:21:
0d:a4:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:03 2026 by rpki-client