Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa
File: LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa (raw, json)
Hash identifier: gVcye9NQcI54DcMJHyKCUcGC0ONkraDbgztVtuA+gyQ=
Subject key identifier: 2D:D6:84:FC:18:B6:AB:04:AF:25:BF:22:CA:86:91:1C:4E:C2:AD:80
Certificate issuer: /CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
Certificate serial: 019F1DFFFE1F2B2E5024073A77A9F7B4BA3C
Authority key identifier: C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa
Signing time: Wed 01 Jul 2026 14:05:43 +0000
ROA not before: Wed 01 Jul 2026 14:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 149.220.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ff:fe:1f:2b:2e:50:24:07:3a:77:a9:f7:b4:ba:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
Validity
Not Before: Jul 1 14:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dd684fc18b6ab04af25bf22ca86911c4ec2ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:90:2b:f6:bc:ce:cf:e5:93:0e:e2:cf:7a:
79:ce:cc:e6:01:96:42:71:4d:f0:2e:62:58:e4:81:
d7:ce:fd:e1:75:f9:6d:d0:d8:37:9e:2e:79:c0:f2:
17:80:07:20:18:29:5a:95:c1:3c:7b:07:3a:f8:97:
72:35:ed:88:c0:f5:48:ee:35:09:a1:f7:eb:75:dc:
d6:fb:9c:65:ce:53:ca:b6:41:03:71:91:06:89:1e:
06:4d:35:f1:7c:34:02:dd:d1:51:f8:0b:82:6b:67:
1c:81:c9:51:c4:ba:7f:29:6c:71:49:bc:e3:d4:37:
7e:02:e4:6f:5b:0c:f7:df:77:e7:df:8a:d9:84:d9:
1d:9d:b0:21:1b:11:42:2b:87:a3:bd:70:c3:6b:da:
17:dc:cd:d6:ab:ce:8f:ed:fb:97:32:f2:c1:4a:00:
98:e7:68:3d:0b:9b:02:4c:f2:b4:0b:90:f3:7f:79:
68:a2:77:1c:84:ba:b3:69:b3:db:8b:36:fb:28:0a:
32:3e:e8:38:67:40:32:10:7e:7b:c1:73:4f:be:4e:
bc:b4:1a:b4:48:0e:d9:83:6a:c6:85:e6:2f:3c:43:
24:3d:eb:0c:45:34:7f:09:fd:8a:d4:d1:0e:75:fc:
1d:d9:a2:fb:d0:b8:02:24:bd:e3:96:ef:49:01:84:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D6:84:FC:18:B6:AB:04:AF:25:BF:22:CA:86:91:1C:4E:C2:AD:80
X509v3 Authority Key Identifier:
keyid:C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/LdaE_Bi2qwSvJb8iyoaRHE7CrYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:f0:2a:3a:9c:d7:b5:29:6b:ac:f0:ad:c5:3d:64:02:c5:d0:
5b:d2:c1:3e:ce:46:9e:c7:fa:a0:12:8f:39:3c:13:1e:62:80:
7a:fc:87:b3:ff:59:75:59:21:9f:b4:7b:9a:f9:8f:af:47:3e:
9b:a7:4d:7a:57:09:a3:0d:42:0d:c3:0e:8e:7f:36:0f:ba:5a:
3b:2a:a2:95:16:2c:be:bf:ae:dc:7b:dc:15:2a:bb:d5:b3:b5:
cf:a4:13:14:da:98:c0:c4:3d:8d:35:a5:12:3c:66:cf:64:16:
df:4e:bd:d2:b6:9f:91:06:eb:0d:a5:84:85:e5:ef:ee:ce:d2:
3a:20:c4:ab:2c:a8:6d:65:bb:09:77:66:20:40:83:db:e9:49:
7e:38:5e:3f:34:e4:ba:51:b1:50:48:15:e1:c1:6e:30:07:06:
10:e1:31:5e:cb:11:e0:ac:41:11:e5:f0:de:ef:33:38:8a:f7:
f3:b2:45:72:0e:a4:0f:3b:39:3b:19:bd:08:94:c7:d9:4e:47:
70:7b:5a:17:d6:51:cc:c8:22:92:38:14:74:b5:73:a8:4d:e3:
74:b3:bc:65:15:4d:5f:bf:94:ed:46:24:07:40:18:44:86:d0:
f9:35:a4:b9:b4:35:e4:8d:e4:9a:7f:1f:00:0d:5f:6f:94:31:
c5:40:4f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:55 2026 by rpki-client