Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_LICBjJZdcnVtv4XOgCo4SqTpuE.roa
File: _LICBjJZdcnVtv4XOgCo4SqTpuE.roa (raw, json)
Hash identifier: MGwX7NVampx3U/zgpZqPkbMuAGSccNzFT7L47j8N1WU=
Subject key identifier: FC:B2:02:06:32:59:75:C9:D5:B6:FE:17:3A:00:A8:E1:2A:93:A6:E1
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01A15D67746313B22B25AD829D824B35D8AC
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_LICBjJZdcnVtv4XOgCo4SqTpuE.roa
Signing time: Wed 21 Oct 2026 07:40:23 +0000
ROA not before: Wed 21 Oct 2026 07:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218341
IP address blocks: 168.113.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:67:74:63:13:b2:2b:25:ad:82:9d:82:4b:35:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Oct 21 07:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb20206325975c9d5b6fe173a00a8e12a93a6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:52:b4:9f:cd:87:d3:97:54:93:8e:a7:b3:
ed:1c:c3:89:f8:3c:37:f3:a5:52:33:4f:75:d0:84:
75:eb:8d:69:3f:12:4b:cb:c4:93:0a:60:60:ed:a2:
39:3e:f5:51:be:73:63:a6:fb:4e:2b:04:63:53:99:
77:13:70:09:9a:0a:2d:8a:2e:fc:77:83:b0:ca:73:
2a:b6:c1:d6:95:13:fe:c6:82:36:cb:34:e0:ad:15:
27:f0:96:aa:98:d0:6f:3c:ec:96:17:e6:36:ca:30:
95:ce:9b:a2:1f:41:74:d7:ff:0b:84:68:5f:be:5e:
6b:91:f2:58:d6:11:82:d2:20:9d:18:70:48:8f:d0:
fc:a6:e3:e8:a7:d4:8d:2a:9c:14:40:e3:fb:0f:6c:
1f:1d:88:f7:f3:d1:fc:2b:a4:b5:fa:70:ac:28:2b:
d7:be:b0:b2:eb:d0:60:2e:de:eb:28:83:0e:8c:e9:
a3:10:aa:90:8c:e2:3b:ae:58:7a:92:d8:c5:d9:a9:
cf:e8:9b:fd:8b:96:af:ea:23:82:20:5d:6b:9a:33:
2b:43:5f:1b:d9:c4:5e:b1:d3:71:9f:1e:d0:46:3c:
f5:71:e3:c9:be:a7:ea:48:e4:19:54:01:4e:1b:49:
ab:ba:d0:af:b0:6b:4c:12:6e:7f:c9:8b:8b:69:14:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:02:06:32:59:75:C9:D5:B6:FE:17:3A:00:A8:E1:2A:93:A6:E1
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/_LICBjJZdcnVtv4XOgCo4SqTpuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:60:8a:22:b0:3b:f9:70:24:32:39:d3:ec:fb:2d:50:ce:14:
7d:d9:44:4f:5f:c9:41:3d:d5:71:24:32:07:b8:95:75:5f:63:
a6:05:15:93:ec:e0:22:6f:00:ae:30:fa:81:c7:2e:85:5f:60:
8f:6b:4f:ee:86:49:30:e9:27:57:80:46:9e:ce:85:c2:ff:a5:
54:38:de:a2:75:bd:6b:fd:c1:da:40:46:61:b3:b2:74:f5:7d:
c1:83:98:2f:bc:1a:00:02:3c:33:c9:c2:87:c5:54:25:f4:fe:
5e:ae:71:63:50:4b:74:ef:bb:b0:bd:90:5e:59:c6:5c:1f:93:
21:f7:27:61:98:51:81:18:45:1b:32:1f:33:92:77:64:4e:d3:
2c:67:e9:dc:70:35:79:e0:d5:23:7a:af:fe:87:df:ed:0f:70:
d5:8d:0b:78:c3:bb:93:a6:e7:f3:f4:35:02:4e:b9:aa:87:ef:
db:d4:77:74:18:bb:7a:23:78:fb:ac:1f:9e:51:9c:24:86:b4:
0d:9d:7e:c0:1e:ea:86:d0:cb:a6:74:95:2e:87:a0:bb:5e:4f:
c1:c0:a7:52:03:d4:f0:70:85:c1:78:72:c1:23:39:c2:45:15:
3f:fd:79:24:db:f6:e9:55:62:bd:2b:16:5c:a3:48:10:69:1c:
3a:eb:f2:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFdZ3RjE7IrJa2CnYJLNdisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjYxMDIxMDc0MDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2IyMDIwNjMyNTk3NWM5ZDViNmZlMTczYTAwYThlMTJhOTNhNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfVStJ/Nh9OXVJOOp7PtHMOJ+Dw3
86VSM0910IR1641pPxJLy8STCmBg7aI5PvVRvnNjpvtOKwRjU5l3E3AJmgotii78
d4OwynMqtsHWlRP+xoI2yzTgrRUn8JaqmNBvPOyWF+Y2yjCVzpuiH0F01/8LhGhf
vl5rkfJY1hGC0iCdGHBIj9D8puPop9SNKpwUQOP7D2wfHYj389H8K6S1+nCsKCvX
vrCy69BgLt7rKIMOjOmjEKqQjOI7rlh6ktjF2anP6Jv9i5av6iOCIF1rmjMrQ18b
2cResdNxnx7QRjz1cePJvqfqSOQZVAFOG0mrutCvsGtMEm5/yYuLaRReBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPyyAgYyWXXJ1bb+FzoAqOEqk6bhMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvX0xJQ0JqSlpkY25WdHY0WE9nQ280U3FUcHVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqHGaMA0G
CSqGSIb3DQEBCwUAA4IBAQBbYIoisDv5cCQyOdPs+y1QzhR92URPX8lBPdVxJDIH
uJV1X2OmBRWT7OAibwCuMPqBxy6FX2CPa0/uhkkw6SdXgEaezoXC/6VUON6idb1r
/cHaQEZhs7J09X3Bg5gvvBoAAjwzycKHxVQl9P5ernFjUEt077uwvZBeWcZcH5Mh
9ydhmFGBGEUbMh8zkndkTtMsZ+nccDV54NUjeq/+h9/tD3DVjQt4w7uTpufz9DUC
Trmqh+/b1Hd0GLt6I3j7rB+eUZwkhrQNnX7AHuqG0MumdJUuh6C7Xk/BwKdSA9Tw
cIXBeHLBIznCRRU//Xkk2/bpVWK9KxZco0gQaRw66/Kc
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:33 2026 by rpki-client