Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LJ4iDcRl7E-gdEb-9gtcvGqTGJw.roa
File: LJ4iDcRl7E-gdEb-9gtcvGqTGJw.roa (raw, json)
Hash identifier: OC3AbI1Yu5s1CkdaqL/nWsIUoKb4V/o/i1I9B4PRUfs=
Subject key identifier: 2C:9E:22:0D:C4:65:EC:4F:A0:74:46:FE:F6:0B:5C:BC:6A:93:18:9C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A0CD77FA07E7ACE38021AADD000304EB55
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LJ4iDcRl7E-gdEb-9gtcvGqTGJw.roa
Signing time: Wed 23 Sep 2026 08:53:07 +0000
ROA not before: Wed 23 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 77.47.142.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:77:fa:07:e7:ac:e3:80:21:aa:dd:00:03:04:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 23 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c9e220dc465ec4fa07446fef60b5cbc6a93189c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:e1:28:0e:a2:5a:36:e4:9c:14:99:10:d0:
29:b9:94:f2:0d:a2:35:b7:f2:6c:dd:f0:6f:2c:95:
b7:95:dd:3a:88:27:ba:fd:2c:82:f9:14:da:ca:2d:
f9:c6:96:93:b3:c0:03:ac:02:28:1e:a8:06:05:e2:
43:ba:b5:0b:8a:5e:6d:b5:18:f5:5f:91:3a:7a:26:
6b:ae:e8:43:b8:70:4a:b9:85:8a:92:e7:98:cf:7b:
ee:23:1f:69:9b:a9:89:15:6d:cd:f8:ec:e4:30:34:
cf:89:6b:ec:5a:e0:c6:cd:da:e0:60:4f:4a:5c:9d:
57:cf:ab:19:f6:01:4c:9f:f8:dc:b8:84:76:9d:ef:
a5:b3:4d:9b:2f:e3:77:b0:f2:92:65:2c:6c:1a:18:
ae:4f:f8:36:91:95:99:03:07:12:70:a3:f8:db:f8:
fe:dd:5b:9d:18:01:1a:f0:2b:a2:5c:90:05:2b:db:
4b:de:12:79:9b:c7:1e:3c:51:33:90:72:06:38:09:
0d:db:f8:0d:10:ca:c5:a6:b9:fc:8d:dc:9d:3b:e3:
5e:9c:16:b9:ab:0a:6f:45:99:7f:db:82:8b:cf:3d:
c8:45:a3:b8:7e:d4:6c:bf:14:a3:e6:d9:d7:2c:f4:
29:85:5e:9a:f8:dd:6f:43:6b:8a:1e:6d:cd:c6:0c:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:22:0D:C4:65:EC:4F:A0:74:46:FE:F6:0B:5C:BC:6A:93:18:9C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LJ4iDcRl7E-gdEb-9gtcvGqTGJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
195.178.130.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d3:8c:0f:40:75:46:86:e0:af:23:91:3e:29:ae:f1:d0:2c:
50:44:3b:56:7c:2d:19:28:52:bb:c7:d3:ff:7f:18:1d:97:e6:
6a:cf:d5:6f:4f:7e:7e:65:97:83:f9:45:0e:41:e0:18:46:e7:
56:bd:74:a4:5b:cd:25:d9:6e:84:6c:59:1c:52:bb:b9:d8:b6:
0a:73:91:b0:26:5b:4a:30:77:5e:8b:a0:33:e7:d8:4e:35:d0:
9b:19:72:b0:89:aa:3b:e6:32:ba:ba:62:29:cd:f7:4f:e6:8b:
58:f4:3b:03:40:ad:8b:e8:04:52:2a:ab:e5:88:e0:a5:f9:b6:
d2:b5:66:92:19:3e:b5:77:7d:79:35:f2:71:98:62:c5:52:b8:
c7:44:dc:b3:2b:09:36:d0:77:05:fe:28:ae:07:35:e2:46:48:
d2:e8:b8:97:7f:4a:c7:47:bb:33:d9:a3:c4:d0:35:82:fd:80:
57:b8:de:0e:05:54:94:48:85:0a:2c:da:1e:26:ea:bb:b9:77:
33:20:4f:24:fc:b7:ef:5b:2c:33:c4:cd:af:e0:33:5d:a5:5e:
e2:a0:87:88:6c:03:4d:40:4e:09:0f:b6:b0:a0:43:cd:78:f3:
d1:fa:9f:20:27:4a:9b:50:48:84:6a:2b:2e:c7:c3:c5:04:5c:
c7:6d:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:55:39 2026 by rpki-client