Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa
File: lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa (raw, json)
Hash identifier: v/eVSdswkj07gsnQAoZ8DkBTrsjZAtAanAE3ZZjEf8U=
Subject key identifier: 96:B1:41:10:A2:19:6C:15:C8:73:DF:C8:E3:36:D2:CF:84:63:0E:61
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 01A05D16879498D2174065C1227FA52F2EB3
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa
Signing time: Tue 01 Sep 2026 13:09:12 +0000
ROA not before: Tue 01 Sep 2026 13:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219160
IP address blocks: 104.160.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:16:87:94:98:d2:17:40:65:c1:22:7f:a5:2f:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Sep 1 13:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96b14110a2196c15c873dfc8e336d2cf84630e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:a3:55:5d:83:bf:6a:cd:00:1c:75:32:86:
b6:71:e8:fe:ae:e1:44:a3:d0:63:e9:7d:7e:1f:86:
f5:d2:62:80:8f:ee:88:fa:a2:29:04:f0:b9:62:3c:
f7:4c:c0:b7:6a:c7:5d:42:d5:76:0f:f9:88:17:df:
49:60:f3:34:ab:01:b6:ba:65:40:05:56:ab:39:46:
40:6a:cf:9f:ea:b5:50:4b:12:b5:7b:66:dd:f6:80:
95:f1:37:98:9a:28:aa:dd:af:0d:48:13:6b:93:54:
1b:53:9b:d1:33:64:3d:91:d2:9d:af:7c:0d:7b:4c:
1a:78:f7:3a:9f:72:fd:fc:67:be:10:61:76:5a:13:
33:24:5f:c7:99:c3:28:48:8a:c2:08:9b:6d:93:ae:
ed:0a:31:c4:85:9b:da:ed:83:a5:1b:ff:1c:56:06:
85:72:9e:2d:b5:62:4d:d9:25:ab:74:13:bb:3c:34:
08:af:46:23:9a:6b:cc:69:d5:a9:10:58:f7:a5:6f:
72:14:25:e4:9d:c9:9a:14:35:b1:e0:69:89:6d:d4:
93:56:fb:99:4d:6e:29:7e:33:1b:23:e0:1c:4b:7e:
13:94:ca:a8:44:cb:d5:8f:de:9c:b6:8b:2c:0e:0b:
b0:b0:2a:df:eb:d5:3b:0f:1c:34:13:85:4e:3d:e6:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:41:10:A2:19:6C:15:C8:73:DF:C8:E3:36:D2:CF:84:63:0E:61
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.29.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e5:a7:89:d7:0d:41:2f:5a:c1:8d:cf:61:ef:aa:7c:33:dd:
5e:67:1a:e3:7e:28:c3:a5:25:66:1c:00:96:9f:c0:b7:e9:7a:
a3:ca:8e:50:cc:16:34:76:82:8a:ff:e0:ad:48:f2:87:d1:2c:
6f:1a:e7:bb:cf:a5:cb:27:23:57:dd:00:0f:9a:5b:5b:08:8b:
d9:e0:42:1c:0f:cc:28:51:50:86:59:47:5b:82:e7:03:84:92:
49:25:24:64:98:10:37:ff:14:75:6c:80:27:6a:59:dd:1a:7c:
23:7f:4d:bd:21:67:ca:b3:4d:7f:0a:ce:1d:b4:04:c2:b0:d5:
d4:eb:3b:33:18:b1:a2:65:58:4a:5b:1c:f5:cc:ae:df:53:bd:
42:78:cb:7e:ca:72:b9:79:eb:64:67:34:56:7a:8e:64:7f:94:
d8:3a:b1:ab:a7:85:0e:01:6d:6f:0a:4e:af:cf:86:79:31:cc:
76:e0:0b:78:d9:61:09:95:ba:c2:08:5c:d5:cf:b6:14:be:fb:
00:8e:a6:6a:0b:76:1f:b2:bc:35:57:ca:4f:33:47:a9:f1:c9:
da:bc:76:d8:e6:97:7a:09:ad:3b:e3:c7:29:45:79:7f:04:3f:
40:61:d2:47:a0:e0:16:43:3e:e1:e7:f3:88:71:2d:fc:f7:a8:
b8:c6:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:04:04 2026 by rpki-client