Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/LL3At7JbewVHNRXMTWxBEzOztjg.roa
File: LL3At7JbewVHNRXMTWxBEzOztjg.roa (raw, json)
Hash identifier: +WpNgZ2w7aJQTwGBk3CQne457+iBvPsYhfCTsL1+tUY=
Subject key identifier: 2C:BD:C0:B7:B2:5B:7B:05:47:35:15:CC:4D:6C:41:13:33:B3:B6:38
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A03904610D6750BD9522D208694992436E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/LL3At7JbewVHNRXMTWxBEzOztjg.roa
Signing time: Tue 25 Aug 2026 13:03:03 +0000
ROA not before: Tue 25 Aug 2026 13:03:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202505
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:04:61:0d:67:50:bd:95:22:d2:08:69:49:92:43:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Aug 25 13:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cbdc0b7b25b7b05473515cc4d6c411333b3b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:d0:18:df:9f:e3:4c:35:93:8f:fa:ce:b1:
ec:62:24:16:79:73:a1:61:f0:de:f4:96:2f:6f:41:
ae:3d:2c:e8:03:dc:7c:01:8d:ce:5d:6d:7f:d1:89:
48:4b:01:01:6f:13:5c:fb:73:82:79:48:ab:5e:d3:
51:96:9f:85:6c:29:2e:f8:29:82:ec:d5:fe:7b:20:
5a:f7:d4:e7:f3:17:99:31:e3:a6:25:c7:9a:7f:63:
1e:7a:cf:b0:5c:e4:05:56:04:24:4b:4e:2e:be:34:
16:e1:7d:ef:bb:4a:a1:7a:b3:b4:31:b0:3c:ec:81:
d5:62:d3:c4:67:c3:a7:7d:bc:59:f8:83:7c:08:6e:
41:4d:57:17:e1:8f:da:71:73:ef:d5:29:74:b1:da:
93:4b:9f:e8:8b:8e:b5:b3:de:ba:0d:bc:da:61:45:
31:1b:35:7e:88:f8:b5:2d:88:47:a9:58:36:f0:f1:
1f:7d:d6:5b:3c:bf:77:52:b0:27:67:a6:80:ca:a2:
63:d8:15:62:d4:04:8f:e3:85:5a:00:72:a2:f0:ae:
1f:cb:e1:47:92:f6:85:9d:6f:44:27:b8:bd:b1:fa:
e7:6b:96:d3:5f:37:a0:d7:2f:68:27:6a:c1:de:83:
7e:64:b5:fd:4a:1d:96:7f:fc:b1:e4:da:27:7b:e2:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:C0:B7:B2:5B:7B:05:47:35:15:CC:4D:6C:41:13:33:B3:B6:38
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/LL3At7JbewVHNRXMTWxBEzOztjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/24
185.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:16:3a:6b:08:65:e6:93:59:db:3f:0b:a3:c1:ea:d2:f0:
ee:a4:c9:3e:8d:38:0c:91:02:d4:df:a7:d0:31:c2:31:58:ac:
90:d6:7b:2d:d4:b2:d0:36:36:fa:35:40:d2:a2:d5:60:4a:8a:
20:3c:79:31:37:a5:78:21:8e:12:6b:eb:4a:96:65:e3:14:7f:
b2:eb:77:e1:d2:6d:30:fd:2c:44:f9:b5:c9:4b:bb:9f:b1:9a:
d2:43:a3:2f:a7:bb:65:7e:c8:77:fc:78:89:03:0b:6e:57:e8:
4d:e9:cb:af:2a:ea:3a:8d:43:67:42:1c:58:f7:68:1d:67:6c:
d0:86:cb:5c:28:6d:67:80:c7:90:38:c3:ce:9d:db:d7:cf:75:
a0:ec:71:39:19:1b:2f:28:77:a5:21:fa:f1:b0:24:3d:25:fe:
17:26:c6:8e:bd:47:a8:f9:c4:c2:6b:a9:7f:35:ee:ea:f8:9a:
24:19:dc:ff:bc:4c:54:e3:ed:53:3e:9f:b6:73:8b:f1:7c:e9:
09:0d:72:c6:14:bf:f7:a4:a6:5f:e3:25:10:04:d0:08:9e:d0:
83:c6:79:e2:31:36:61:47:75:ec:26:ed:77:ff:4e:84:ed:dc:
b0:eb:ec:63:7d:6a:66:ff:99:b2:a2:1b:2d:1c:d0:02:ef:88:
d2:d1:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:24 2026 by rpki-client