Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/LsSYewZqoEloekxN9olY0ZWErpE.roa
File: LsSYewZqoEloekxN9olY0ZWErpE.roa (raw, json)
Hash identifier: yniEZZxbWYUya3z1wPxXhEtgwAHbS0sqm3BUjgu913A=
Subject key identifier: 2E:C4:98:7B:06:6A:A0:49:68:7A:4C:4D:F6:89:58:D1:95:84:AE:91
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 01A0594C11098AF7465EAEDEFF8964C37EF6
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/LsSYewZqoEloekxN9olY0ZWErpE.roa
Signing time: Mon 31 Aug 2026 19:29:12 +0000
ROA not before: Mon 31 Aug 2026 19:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:4c:11:09:8a:f7:46:5e:ae:de:ff:89:64:c3:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Aug 31 19:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec4987b066aa049687a4c4df68958d19584ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:13:2d:8c:5f:64:e2:0c:5a:73:13:7d:cc:
19:8d:49:c9:09:c2:d2:a2:4e:82:fb:3b:32:a0:e5:
f3:8c:79:98:15:89:57:d1:53:00:af:67:65:4d:42:
18:52:55:d0:69:67:04:63:0b:43:79:72:7e:7b:f4:
31:d0:14:ff:6e:66:c8:b0:01:fe:74:1c:46:7a:19:
e6:39:9a:b9:ea:21:49:59:c0:3a:21:b7:a4:4c:9d:
33:cb:53:aa:2a:05:c4:9b:a5:12:ca:ea:5b:b0:67:
84:11:36:74:ee:99:94:5a:86:14:09:79:84:ce:de:
04:68:90:a9:c7:7a:67:1e:d2:79:e4:47:b9:be:49:
41:9f:1e:e2:ff:f7:7c:09:7c:f7:15:cc:b6:a5:ba:
ea:a8:cd:1b:9b:2c:c9:6f:14:98:5e:5a:8f:98:51:
b2:b8:a9:5a:70:5d:93:f0:3c:dc:3d:1f:e0:bb:d0:
b3:4e:7f:05:72:ed:ad:5e:8a:f8:f9:a7:a1:bc:52:
43:30:38:90:9b:b7:3b:96:74:2b:63:af:e3:d1:fa:
c0:c2:b4:77:7c:1d:01:a5:bf:fd:cd:7e:ec:1b:d2:
47:2d:97:c0:56:fe:16:db:2f:13:72:5c:53:3b:1f:
9e:50:fe:d6:30:e2:aa:46:5c:af:57:f9:9c:f2:76:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:98:7B:06:6A:A0:49:68:7A:4C:4D:F6:89:58:D1:95:84:AE:91
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/LsSYewZqoEloekxN9olY0ZWErpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.203.0/24
Signature Algorithm: sha256WithRSAEncryption
27:dc:64:6e:3a:73:82:05:58:5b:66:cb:55:f0:a0:f0:a1:d6:
13:a4:d4:72:97:72:e9:f4:90:15:93:1d:ce:da:4a:79:cd:fb:
42:45:a4:10:ca:98:b6:b2:41:2b:77:b6:60:be:5e:dd:31:35:
de:80:27:25:44:a1:fe:cb:f5:28:20:5d:da:f8:41:00:af:b9:
52:fe:eb:56:58:a9:f8:a2:d6:dd:09:3f:72:0e:10:b5:f1:12:
3d:5e:a7:07:44:5f:96:1b:16:34:57:d4:dc:9a:4c:fe:41:ce:
d5:36:41:0c:16:15:3f:a2:27:47:05:f3:12:ed:3d:95:2c:96:
18:c8:c6:52:e3:d7:19:17:76:5f:52:43:c9:a8:53:cb:4e:12:
16:3e:6d:5f:61:dd:b3:10:2f:7a:d9:3f:24:fb:37:e1:65:44:
26:f1:08:c0:06:7a:86:6a:df:24:29:40:99:80:8b:86:41:1e:
c5:1f:04:fe:c9:cf:3d:a6:33:0e:ea:d0:fa:6b:79:d1:88:0e:
8a:71:fb:5b:e6:8b:ff:5b:ae:1e:db:42:06:5f:b4:42:23:96:
45:3b:44:bf:27:a8:ae:5b:90:17:18:2b:18:a4:ba:83:12:0d:
aa:6f:0d:73:00:06:6a:fe:59:78:e4:7a:dc:8c:83:2b:7b:7a:
80:65:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:42 2026 by rpki-client