Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa
File: LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa (raw, json)
Hash identifier: /6mufLc8RKFeF3dRaOjWVZlCvVQTejHdA5IcjJxuYHE=
Subject key identifier: 2C:F2:AA:4D:25:73:70:FE:F9:22:BD:35:9F:62:A0:DB:FD:CA:49:61
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019FDC52A3F046C424BE5545BE12B16FFC8D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa
Signing time: Fri 07 Aug 2026 13:03:51 +0000
ROA not before: Fri 07 Aug 2026 13:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 85.208.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:52:a3:f0:46:c4:24:be:55:45:be:12:b1:6f:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 7 13:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf2aa4d257370fef922bd359f62a0dbfdca4961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:a2:27:e5:da:73:64:4e:ef:d3:b4:3f:24:
0d:b4:27:55:36:19:e1:4a:ad:0e:4d:82:72:8a:2e:
f9:62:56:c9:37:a6:ef:d0:5a:4b:18:f6:7e:02:6b:
bd:09:23:85:f6:1f:ed:47:ff:da:53:f5:36:e6:16:
e0:26:10:87:90:1b:cc:98:bf:89:58:7b:71:18:fe:
de:5b:53:48:77:f1:df:37:70:03:e4:6c:ee:4b:90:
45:5b:55:33:9a:f5:7b:2b:c7:34:9f:23:20:c0:11:
dd:69:7d:5b:f9:72:45:42:2e:b8:98:9a:db:7f:dc:
e3:67:3b:85:e2:b2:22:6b:da:a5:25:b7:3b:67:66:
71:66:d2:ef:21:5a:1c:10:c6:20:e1:99:fc:d1:4e:
91:29:6b:48:8c:03:a0:a8:24:64:7d:8c:48:8c:0a:
e1:3a:d0:0a:63:93:95:b0:37:64:03:c2:de:5d:42:
a1:c5:fa:e1:02:98:2c:00:fe:0d:1b:46:58:90:5b:
99:17:b1:5a:1d:93:0e:cd:54:d9:e2:9a:76:07:d9:
2f:7b:dc:ac:c2:4c:02:67:90:45:f0:e4:22:f7:de:
d6:07:54:98:b0:1e:03:c7:b2:19:93:67:9a:82:81:
77:23:73:9f:14:b9:18:a5:e9:d3:41:f4:44:ed:d2:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:AA:4D:25:73:70:FE:F9:22:BD:35:9F:62:A0:DB:FD:CA:49:61
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/LPKqTSVzcP75Ir01n2Kg2_3KSWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:af:27:c2:04:12:d0:89:0a:b6:cc:70:de:ba:b5:f6:9d:bf:
0c:22:0b:45:a9:78:0a:01:16:36:6c:1a:84:41:6f:86:14:f1:
23:ff:b2:d9:60:8c:c8:7d:97:c3:56:95:0c:a1:4c:a6:25:37:
83:fb:1c:26:f0:96:77:19:00:e9:1e:1e:5c:e3:9d:7c:97:eb:
4e:1e:66:35:5f:6a:3a:5f:7f:db:8d:8b:09:03:71:17:b2:57:
73:12:aa:1a:59:6f:35:e8:90:87:45:2f:c7:46:ac:d0:b4:79:
51:2f:8d:60:e8:68:c2:76:9d:f1:97:09:58:e8:c4:18:93:73:
28:6b:23:80:57:1b:5a:46:b8:38:58:98:5e:bc:3b:c9:dc:f1:
0c:c2:f3:d4:69:88:02:46:73:63:56:c1:e7:a0:b4:ee:d2:8f:
80:32:85:76:6f:c5:47:b9:df:f3:30:4a:ba:fa:b2:53:4c:98:
e3:e7:6f:76:93:f2:d6:a4:38:18:36:ae:91:f2:3a:64:83:ee:
ab:d8:d5:f4:37:ee:dc:10:79:69:72:54:29:cb:f1:4e:3f:f3:
32:c0:71:70:39:50:ea:67:0b:40:9e:47:86:b4:b3:6e:21:3a:
aa:54:d5:71:a3:2a:7d:f5:ba:f3:d0:99:a1:8a:25:05:5d:56:
2e:33:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:28:26 2026 by rpki-client