Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LHuF2RqatD4i363x6LPEhs7sVMw.roa
File: LHuF2RqatD4i363x6LPEhs7sVMw.roa (raw, json)
Hash identifier: MV81pfrWdD7iOCmlGPNYR0WOxMvV4Z33RYz5vxj8B/0=
Subject key identifier: 2C:7B:85:D9:1A:9A:B4:3E:22:DF:AD:F1:E8:B3:C4:86:CE:EC:54:CC
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF28CA607B797066608D337F53E4DE3B0
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LHuF2RqatD4i363x6LPEhs7sVMw.roa
Signing time: Tue 11 Aug 2026 20:38:51 +0000
ROA not before: Tue 11 Aug 2026 20:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 109.66.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:8c:a6:07:b7:97:06:66:08:d3:37:f5:3e:4d:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 11 20:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c7b85d91a9ab43e22dfadf1e8b3c486ceec54cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:79:f6:50:7b:da:5a:da:c5:b1:c6:0e:25:
6a:8e:3b:16:01:23:4c:d1:9f:74:0c:95:3a:b3:e8:
99:6e:40:b8:8a:72:b3:1d:69:a6:0b:cf:e0:0e:7f:
38:fe:4c:78:bf:55:3d:b1:14:7b:6b:92:9e:3f:3e:
2d:72:9f:14:f5:95:ff:6b:e6:e4:ea:d2:82:bf:4d:
18:54:0e:76:16:58:fb:98:68:dd:f9:bc:15:74:8d:
bb:0c:33:a5:21:1a:5f:ed:3e:6e:b2:00:19:a0:1c:
18:3a:37:2d:eb:71:56:c6:10:74:5d:62:ed:53:e5:
0e:54:e3:8d:90:fd:ed:f8:ea:97:40:d6:2b:c6:ab:
7a:e9:11:8c:16:60:3d:2d:a4:38:76:e0:c9:1b:ca:
77:d8:9a:24:1a:26:4d:3f:82:10:54:20:d0:62:5e:
ff:b3:2b:2b:a5:db:df:26:a7:cf:f5:86:20:8a:2d:
7c:16:61:07:30:d6:ce:b0:34:3b:10:b5:37:b4:f9:
80:9b:b1:ca:cd:1b:c7:75:bb:d4:89:b6:b3:12:d0:
23:09:ef:40:2c:cf:33:2b:2e:07:a1:45:ef:96:1d:
41:96:74:73:ca:53:1c:ca:da:11:a8:dc:69:90:92:
7c:8a:cd:2f:5e:7e:a0:26:4a:0f:19:cf:ed:ea:e4:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:85:D9:1A:9A:B4:3E:22:DF:AD:F1:E8:B3:C4:86:CE:EC:54:CC
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LHuF2RqatD4i363x6LPEhs7sVMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fe:92:ab:f7:ee:11:d6:d9:17:08:ea:eb:b0:94:0a:b7:6f:
d4:af:7c:68:d4:70:3c:f2:31:6b:02:c8:54:da:bb:f0:c3:d7:
11:d1:33:8c:a7:44:90:6e:64:1b:6d:cb:ca:6a:30:75:92:18:
f3:7e:19:d8:ae:5d:b0:86:bf:c7:f2:1e:00:0b:a8:25:fc:4b:
a9:28:84:4d:08:dc:c9:0d:b0:be:ba:ef:15:f4:18:ea:23:4f:
a0:e9:da:d7:49:c9:ae:81:eb:d0:65:04:34:7a:56:6e:7a:83:
b5:b2:f0:2f:e9:05:28:43:29:d7:78:44:a1:39:6b:fd:9a:45:
ea:eb:a3:de:65:b2:0e:ba:60:3e:ab:e4:b4:80:c2:f5:48:c0:
49:ac:0c:61:e7:ab:f9:db:d0:23:5b:5c:5b:6f:d4:0d:be:17:
8b:60:3e:93:99:2e:96:b7:b6:6b:9a:2d:9d:6d:5f:70:60:5a:
10:60:76:8c:ef:e0:69:ed:c1:e2:a6:a6:71:b7:97:71:ad:00:
04:40:0e:d8:f8:43:7f:c7:dc:a9:0e:53:6d:27:ed:5e:35:60:
cf:6c:71:2e:2d:35:26:cf:6e:5d:d7:75:53:14:65:f2:a8:87:
fc:54:29:84:52:54:62:5d:14:61:61:73:a9:04:d2:55:21:64:
74:74:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:49 2026 by rpki-client