Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lUR7o5GUm7RiMp7iWT-CTYwRezk.roa
File: lUR7o5GUm7RiMp7iWT-CTYwRezk.roa (raw, json)
Hash identifier: XKrZXfDTdL8H0drUZffePprENYLOTz19nrnm1xeuZVE=
Subject key identifier: 95:44:7B:A3:91:94:9B:B4:62:32:9E:E2:59:3F:82:4D:8C:11:7B:39
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FF9CF2CA9935993DD1A37B13EA5DFF471
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lUR7o5GUm7RiMp7iWT-CTYwRezk.roa
Signing time: Thu 13 Aug 2026 06:28:51 +0000
ROA not before: Thu 13 Aug 2026 06:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 932
IP address blocks: 212.189.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:cf:2c:a9:93:59:93:dd:1a:37:b1:3e:a5:df:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 13 06:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95447ba391949bb462329ee2593f824d8c117b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:8d:9c:ee:12:1d:87:16:e7:f0:f8:fa:2d:
67:90:d5:9e:1b:5f:be:1a:0f:fe:25:99:65:60:42:
59:20:52:4d:57:f3:4b:9c:0e:81:62:ed:e8:f6:50:
91:41:5e:9d:d9:74:b3:73:19:2e:ed:70:11:4d:c2:
4e:76:f6:53:a0:4e:0a:8d:f0:cd:d8:00:83:70:c2:
24:1c:b7:ed:3b:e5:3e:45:94:d0:03:1f:24:56:e1:
4f:6f:3f:96:9b:bc:7a:9e:23:70:51:ab:96:c0:84:
72:8a:7f:db:e8:26:bd:cc:08:12:47:cd:2a:8a:e5:
eb:7e:ed:0c:f3:f4:91:09:b4:78:a9:21:81:cc:93:
8a:ec:ee:8f:ad:b4:dd:c3:6a:04:e0:7b:65:38:ae:
da:44:1d:0e:e1:90:49:1e:de:54:ac:99:06:5f:cf:
fd:93:c9:c8:c1:38:12:98:9c:db:f9:e5:d6:5d:aa:
04:47:d7:87:30:a7:e4:69:b6:82:cd:04:c5:57:7c:
3b:92:15:fa:90:51:6e:4c:fa:64:30:fe:64:91:1a:
af:aa:39:1d:2a:05:0d:4d:16:60:d1:fd:96:23:45:
7f:60:7f:1b:13:4a:77:3c:46:35:bd:2a:dc:40:b0:
ee:83:bd:f5:28:32:aa:ce:c1:75:fc:77:39:7f:50:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:7B:A3:91:94:9B:B4:62:32:9E:E2:59:3F:82:4D:8C:11:7B:39
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lUR7o5GUm7RiMp7iWT-CTYwRezk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.106.0/23
Signature Algorithm: sha256WithRSAEncryption
14:08:24:dc:ea:95:10:09:da:b2:5c:cf:5d:0c:c8:6c:b8:4e:
13:90:04:4f:c5:67:f2:d4:14:6e:06:c7:c7:ef:3e:e5:1a:e6:
c6:26:0a:4f:cb:7f:ce:a4:b3:c2:01:1f:66:38:71:6e:e9:f2:
a8:af:a3:2b:a7:c0:40:5e:42:2f:d2:01:46:9e:be:2e:4d:00:
d6:48:74:fe:bb:cc:03:fb:71:1d:25:68:36:ce:e1:52:37:9d:
aa:eb:af:1a:ed:b0:0d:58:c6:bb:ce:a3:e2:fe:1f:40:cc:0d:
7f:39:aa:06:9f:c0:7f:e4:0d:5a:47:cb:ca:3e:91:6f:e5:ad:
9e:15:f8:b8:e4:71:2d:d0:39:a9:f5:fd:b4:36:5f:84:cd:ee:
94:62:be:11:9b:8d:92:03:74:43:f1:5a:13:c2:e6:c6:6b:24:
c5:e0:0a:6e:49:c4:2b:e0:62:8f:57:c0:c4:0f:54:76:aa:cc:
5b:ee:5c:94:d0:df:79:a9:ef:8d:7e:87:f1:f5:92:6a:79:6b:
73:b7:ee:76:f5:64:bc:e9:de:c6:10:d1:e9:4f:36:70:50:0f:
a0:f6:6e:1c:75:ae:9c:ae:9e:0b:34:f2:34:54:83:87:f8:a4:
ee:75:48:6a:b8:52:65:e5:6f:43:89:a0:7f:11:ca:80:b1:2e:
2f:91:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:03 2026 by rpki-client