Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LLLp9jysnz9v7G-TD-f-YdcQqGU.roa
File: LLLp9jysnz9v7G-TD-f-YdcQqGU.roa (raw, json)
Hash identifier: A1YxSHmEz8ti+4lkAgl8H0mclmQwFTODBhITaDtGpd4=
Subject key identifier: 2C:B2:E9:F6:3C:AC:9F:3F:6F:EC:6F:93:0F:E7:FE:61:D7:10:A8:65
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A01E43B34F0667673F6543DAF9AEAB524B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LLLp9jysnz9v7G-TD-f-YdcQqGU.roa
Signing time: Thu 20 Aug 2026 08:22:28 +0000
ROA not before: Thu 20 Aug 2026 08:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 77.67.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:43:b3:4f:06:67:67:3f:65:43:da:f9:ae:ab:52:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 20 08:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb2e9f63cac9f3f6fec6f930fe7fe61d710a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:bc:2d:3c:f9:25:e7:dd:c7:7d:ea:3e:f5:
92:f9:b4:a1:ce:42:60:b6:37:53:9c:fe:30:77:21:
4d:c6:2d:7f:39:1d:e4:f4:4e:a5:80:25:91:37:7e:
b2:e4:fc:ec:b3:cd:6c:69:a1:78:02:83:70:bc:68:
3b:3f:ce:44:a2:5c:9e:ff:38:7c:8f:6c:b0:14:17:
f2:04:2f:65:30:bd:75:33:2b:0c:1d:5a:ee:83:83:
ca:f3:3c:a1:f9:b6:de:76:61:91:48:6d:35:c4:ee:
e3:07:55:39:12:e4:88:25:5b:36:15:6b:9f:11:d1:
fb:c6:99:99:ef:e5:2c:e0:85:2f:cc:39:20:dd:e5:
c0:36:ac:8d:17:6e:e6:d9:ef:a7:4f:aa:d8:46:5d:
31:12:a0:cb:b9:2e:18:e5:5d:ce:df:48:65:60:41:
9e:5f:d9:a2:bd:26:38:a2:d6:01:ef:0b:64:7d:37:
37:e1:05:f5:57:4e:75:d9:9e:39:c6:47:c5:a5:4b:
1e:37:1c:35:69:dc:27:c4:b5:ab:71:17:a8:c1:e1:
83:10:16:0c:25:4c:15:7a:f7:8a:09:54:d3:2d:b6:
67:cb:7b:8a:5d:ef:b6:cb:73:c2:09:8d:a3:12:b2:
41:4c:9b:3c:6f:03:9e:5e:c8:ef:b0:33:6a:cc:7e:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:E9:F6:3C:AC:9F:3F:6F:EC:6F:93:0F:E7:FE:61:D7:10:A8:65
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LLLp9jysnz9v7G-TD-f-YdcQqGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:78:7f:0d:8f:d4:9c:96:a5:50:54:32:1e:ef:4d:45:2a:91:
13:92:ee:9c:46:cf:fb:31:ef:ab:43:30:8c:c5:b1:2b:1e:a1:
c1:2f:42:0a:1b:5d:b2:ef:5e:79:ff:dd:8d:06:f3:47:35:59:
b1:eb:33:df:a5:fd:81:37:f3:b2:4f:1b:f2:55:ed:b5:dd:02:
ff:83:39:a1:a0:5e:0a:d2:70:0d:b3:be:15:a1:0a:20:e5:7f:
eb:23:6b:8b:a0:c0:1c:4d:50:6d:e9:98:20:78:c0:e8:72:88:
7c:b9:87:94:b9:70:19:b8:8d:b9:e5:fc:ba:8f:cf:c6:1a:92:
12:91:9f:db:a2:55:aa:ea:b2:71:46:d6:cb:4e:47:ad:cb:0e:
31:35:0e:31:22:a1:9c:d9:2f:bc:14:2d:97:06:e3:c7:12:5b:
21:ad:ad:8f:20:13:02:e6:09:4a:71:59:6b:7d:ba:a8:32:76:
67:ee:a2:0f:ca:9d:d2:fa:c8:fc:c8:52:cb:17:a7:74:83:c0:
5c:d5:d9:b4:59:64:df:fe:da:1c:48:90:bc:ea:e7:68:a6:98:
b6:3d:8f:b0:cc:80:37:65:a2:a1:ac:f5:5e:fe:5d:14:5a:36:
ca:8c:27:4f:0c:dd:45:27:76:4c:ce:19:55:1a:f7:b6:5b:45:
fe:28:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:21:27 2026 by rpki-client