Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LiQoIxYlHH1c8e-VpapjXGwl8Qc.roa
File: LiQoIxYlHH1c8e-VpapjXGwl8Qc.roa (raw, json)
Hash identifier: w06T7yyQ5WIID53ZBEzadv8k8ilc56smKOv/D6CkKh0=
Subject key identifier: 2E:24:28:23:16:25:1C:7D:5C:F1:EF:95:A5:AA:63:5C:6C:25:F1:07
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F18263BF79983F1FE146AB9E58B036171
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LiQoIxYlHH1c8e-VpapjXGwl8Qc.roa
Signing time: Tue 30 Jun 2026 10:49:46 +0000
ROA not before: Tue 30 Jun 2026 10:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 212.189.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:26:3b:f7:99:83:f1:fe:14:6a:b9:e5:8b:03:61:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 30 10:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e24282316251c7d5cf1ef95a5aa635c6c25f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:c8:04:45:74:66:b3:74:e1:c9:cd:70:39:
f2:36:f5:0e:70:49:e1:90:58:07:8e:12:cd:87:3e:
e4:7e:c9:24:02:1d:11:05:da:6a:84:61:b2:0b:a1:
1d:7e:69:18:45:f8:cb:66:c6:66:fd:5b:80:90:90:
60:67:43:d2:3b:49:fa:e6:3f:e9:28:dd:a0:99:eb:
1a:6e:14:87:cd:c5:9a:a1:69:82:f1:9d:ae:ce:4c:
ee:fa:cf:e0:60:9d:d4:c4:f1:33:d4:5d:39:98:8f:
b0:93:24:15:ae:cb:99:d1:ed:9f:aa:95:2f:75:12:
3c:33:33:84:77:2e:19:b5:66:fe:37:45:8b:9f:de:
1c:2a:c9:9d:0d:05:96:f4:61:a1:8d:ab:a6:29:04:
99:30:78:db:30:52:19:c5:5e:af:8b:81:79:52:5a:
06:e0:77:56:72:e1:09:e3:49:70:4e:e5:68:2a:6d:
c1:49:d8:b2:31:5d:7e:a5:bc:8c:5a:25:f4:42:9e:
b6:f1:82:e9:12:c6:4f:87:ef:3a:ea:59:c6:15:58:
cc:64:06:ec:14:34:20:3f:27:a9:2c:73:91:b2:78:
e6:f1:2c:6d:a6:2f:65:44:a2:a9:44:c8:0d:c9:56:
3a:f9:ba:ee:5a:2f:42:ba:18:21:35:04:e1:5d:3b:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:28:23:16:25:1C:7D:5C:F1:EF:95:A5:AA:63:5C:6C:25:F1:07
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LiQoIxYlHH1c8e-VpapjXGwl8Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.50.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:3d:01:69:70:15:48:29:c2:f3:b8:0d:8d:8c:06:a9:66:6f:
35:66:7c:a9:42:d6:30:c3:6e:44:23:bf:71:18:24:1b:79:9a:
b9:d1:a6:42:d9:e8:38:9c:40:d9:da:35:e6:3b:97:0f:f5:b4:
34:fb:a3:cb:d9:58:b5:50:38:62:03:a7:5e:49:ab:77:32:c4:
2d:7f:72:bf:0c:b0:e0:83:4d:09:67:0c:4b:b4:3b:fb:ea:c9:
ce:69:ae:31:8b:bc:ad:97:c6:1b:82:76:fa:32:2d:ea:af:8c:
8a:9f:d4:7e:5b:7e:02:1d:aa:d7:5f:2a:67:9e:74:fe:7d:22:
bb:bb:31:9c:d9:11:01:9f:43:39:3a:bd:48:3c:c7:1f:f3:13:
40:2d:06:b7:9b:a7:4d:4e:5d:a4:0f:dc:a0:ab:2d:e4:fa:71:
a1:00:00:a6:4d:17:50:5d:fd:86:db:7e:d2:36:7e:91:fe:61:
c9:bc:da:66:1b:48:a3:51:f3:06:06:1f:70:12:e3:9f:c9:b2:
8f:2c:e6:23:b0:1c:5e:a5:2e:24:95:48:c8:a6:63:98:c6:36:
18:15:40:7a:83:3d:83:af:79:6c:9c:6d:4f:4a:da:42:d9:df:
ae:e1:42:af:04:ca:79:3b:ac:b3:04:ee:58:de:d9:05:96:af:
17:7a:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:07 2026 by rpki-client