Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/LuIPpCoB4V31cK2p5DsLz4qIQtI.roa
File: LuIPpCoB4V31cK2p5DsLz4qIQtI.roa (raw, json)
Hash identifier: HA29gUkPA7e326XQjVW4UCnX3LAB35fhH3vTvc7GqnM=
Subject key identifier: 2E:E2:0F:A4:2A:01:E1:5D:F5:70:AD:A9:E4:3B:0B:CF:8A:88:42:D2
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 01A05764171C22BE504FFF9F9DCCE18EBBD6
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/LuIPpCoB4V31cK2p5DsLz4qIQtI.roa
Signing time: Mon 31 Aug 2026 10:36:12 +0000
ROA not before: Mon 31 Aug 2026 10:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216295
IP address blocks: 185.193.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:64:17:1c:22:be:50:4f:ff:9f:9d:cc:e1:8e:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Aug 31 10:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee20fa42a01e15df570ada9e43b0bcf8a8842d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:d3:b0:40:1a:2d:fd:2a:02:af:36:2d:12:
63:19:44:a9:97:d3:ee:77:46:82:1c:c6:36:e1:f0:
05:cc:07:09:97:bf:e8:c1:67:30:d2:0b:4f:cc:f1:
2a:fd:cc:91:34:84:4b:3d:19:49:b5:29:88:70:be:
d2:e5:4d:1a:76:ef:77:38:37:f4:a6:2e:16:9c:37:
42:f5:3a:fd:06:ef:e1:33:e9:1c:07:cc:70:04:f7:
8d:54:b5:b4:9e:d4:eb:b4:8a:90:52:29:9d:78:ac:
92:c5:9e:ea:15:79:e1:da:a0:90:a1:f7:5d:9f:02:
b4:1e:1c:57:26:9f:6f:92:5d:57:8a:2d:99:7b:79:
6e:27:5d:79:a9:cd:99:97:24:a6:14:75:5b:d0:8b:
fa:4a:f7:1a:4c:b1:62:2a:f2:b2:7b:a4:7d:87:81:
40:31:b2:81:81:1a:05:c6:b7:f3:87:b7:06:5b:9a:
19:88:b7:61:f5:93:c6:f6:4b:07:b5:a6:74:c0:31:
73:8b:ec:55:96:4b:b6:6b:4b:bd:5c:d3:9a:1f:a3:
f9:5a:e4:09:d6:e2:1f:fd:e0:a6:5e:c3:d8:16:cf:
4e:e1:a9:e5:73:96:b2:b0:69:38:0e:70:23:94:30:
00:d3:0c:2f:62:7b:d7:74:0a:9c:53:1b:b7:a3:52:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:0F:A4:2A:01:E1:5D:F5:70:AD:A9:E4:3B:0B:CF:8A:88:42:D2
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/LuIPpCoB4V31cK2p5DsLz4qIQtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.59.0/24
Signature Algorithm: sha256WithRSAEncryption
47:eb:c5:8f:0e:e3:30:70:d8:2c:17:78:db:f5:92:d5:f8:49:
88:37:7b:b2:25:c1:67:54:6e:46:56:a8:c7:4a:09:06:05:ef:
3e:2b:74:75:3c:60:34:27:61:80:d3:5b:fc:87:2b:ba:b9:95:
92:ed:72:d2:bb:88:a2:76:9e:f3:e4:10:d4:bb:a7:7d:a0:5b:
11:9a:2e:83:03:99:fe:95:79:f8:46:24:cf:c2:8e:be:0a:92:
79:97:c3:4d:22:e6:f0:c9:89:dd:0e:75:f1:16:c4:cf:2d:f2:
c3:a0:67:4e:c6:d6:e9:26:92:8d:5b:cf:83:d1:2b:89:45:8d:
f3:a1:d1:fd:f3:4f:4e:e1:55:cf:33:17:a0:c7:0b:f8:80:9f:
42:68:e9:59:6d:97:ac:eb:c3:88:6b:04:18:74:6b:e1:81:13:
1f:9f:54:b4:7f:65:5c:4f:12:2a:87:c4:45:82:83:b3:a5:fa:
42:5e:c0:ab:70:7f:b7:24:ef:4a:64:da:2f:ba:0e:0d:c0:ea:
7b:20:7e:aa:56:05:ca:93:c4:91:d1:f2:b6:f9:65:46:4f:06:
ae:c9:e3:9b:24:79:70:23:dd:b2:32:31:eb:b4:43:79:d8:5e:
f3:61:46:df:d8:66:d5:61:ba:1f:4c:40:7e:d8:c0:27:e9:41:
7a:a0:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:22 2026 by rpki-client