Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LNAtBr9AkT_CV7EJIVZ05HcUIhA.roa
File: LNAtBr9AkT_CV7EJIVZ05HcUIhA.roa (raw, json)
Hash identifier: fd64pfsA/hJS3hXB/OgbzSpLy9ievn8PuH28osSXc4A=
Subject key identifier: 2C:D0:2D:06:BF:40:91:3F:C2:57:B1:09:21:56:74:E4:77:14:22:10
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047CC668F0C33F97E19F1D3AF1B69150A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LNAtBr9AkT_CV7EJIVZ05HcUIhA.roa
Signing time: Fri 28 Aug 2026 09:56:12 +0000
ROA not before: Fri 28 Aug 2026 09:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62403
IP address blocks: 212.189.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:cc:66:8f:0c:33:f9:7e:19:f1:d3:af:1b:69:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cd02d06bf40913fc257b109215674e477142210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:33:7a:ae:ea:e6:f6:87:ce:b6:2e:67:ec:
4a:f1:29:8f:c3:78:2b:27:84:55:ac:10:47:36:a7:
8b:d6:d0:b5:51:c3:97:bd:fb:33:54:e6:f8:f9:9e:
bd:1e:00:8b:5f:ba:16:80:6e:ce:59:f6:1d:e3:c4:
6a:54:cc:a0:09:ef:89:e5:6d:0f:b0:52:0e:4d:18:
0a:a6:2f:19:3f:12:de:e7:07:0b:ab:9f:7e:8e:9d:
0f:b9:3b:75:14:88:4e:b1:18:8b:54:2f:62:38:47:
c5:ea:72:bf:ec:10:93:74:b1:cd:96:18:a2:0a:91:
27:4f:74:ed:12:9c:22:da:de:58:1b:e3:95:57:7b:
e9:b7:b2:e0:7d:3e:47:82:84:e9:df:af:21:d7:23:
9c:81:63:13:ec:55:5e:51:3f:e3:06:11:eb:f6:ed:
65:38:60:5a:d1:b1:10:f3:bc:a0:a0:f2:ac:a0:de:
8f:29:df:ba:ae:73:46:c6:e4:a5:e8:fd:28:56:fa:
61:ee:0e:81:6c:5d:a1:9a:1e:58:e8:eb:59:5a:4a:
db:b4:28:02:60:9a:9d:fd:5c:bb:86:45:22:6b:d8:
cd:c9:66:69:25:81:1d:59:83:eb:f0:6d:ef:d7:34:
11:e4:14:78:f2:69:26:23:5e:d8:7f:00:50:65:55:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:2D:06:BF:40:91:3F:C2:57:B1:09:21:56:74:E4:77:14:22:10
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LNAtBr9AkT_CV7EJIVZ05HcUIhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.18.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0f:55:c0:7b:cf:79:79:95:10:83:d5:5e:f2:db:de:4a:9d:
33:a5:48:d0:5e:f3:ed:c9:16:67:7d:dc:9b:e7:81:bd:03:1c:
27:cb:b7:dc:ac:5e:3b:96:b1:cb:38:2b:08:7f:5b:83:5a:b5:
43:db:0a:77:da:2b:90:c2:53:5d:13:25:22:da:e8:ae:0f:65:
07:40:e5:9b:61:40:44:26:54:59:d7:1a:7e:f0:0d:4f:7e:02:
d6:31:88:9b:a4:4c:0b:21:d9:a1:83:20:86:16:b3:d9:6a:16:
d2:d4:07:d2:09:30:be:50:8a:29:e9:52:70:64:c4:81:90:3c:
22:b2:08:27:52:6f:4d:d6:1c:11:fe:53:38:c5:32:15:18:0f:
c6:82:85:49:b6:00:64:a8:8f:60:f3:2d:d2:b0:9f:44:71:0a:
e0:9d:7c:4a:26:0a:d7:bc:11:a8:a0:0d:72:78:49:bc:70:77:
b8:d2:ca:74:43:6b:30:08:1d:bc:6b:b2:3b:22:58:e2:f6:3e:
0b:96:7f:f1:ee:e1:6a:6d:ad:c1:43:19:02:ad:59:ba:3d:45:
f5:f8:71:a1:f6:d5:41:89:e3:cf:c9:d3:d6:35:4d:a8:5e:c6:
d0:67:b7:83:60:75:99:d0:60:33:54:72:51:e5:44:a5:1d:12:
f0:31:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:25 2026 by rpki-client