Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lxGKBplW9SuSqFvIEhxNoGfdgTU.roa
File: lxGKBplW9SuSqFvIEhxNoGfdgTU.roa (raw, json)
Hash identifier: yent14qViydW6H7TljqvIvQP0hoivyv/E1q9A1VTw4s=
Subject key identifier: 97:11:8A:06:99:56:F5:2B:92:A8:5B:C8:12:1C:4D:A0:67:DD:81:35
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EF8B514F05BA0F46503EA67C9941220BE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lxGKBplW9SuSqFvIEhxNoGfdgTU.roa
Signing time: Wed 24 Jun 2026 08:17:57 +0000
ROA not before: Wed 24 Jun 2026 08:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 46.8.120.0/23 maxlen: 24
46.8.126.0/23 maxlen: 24
46.8.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:b5:14:f0:5b:a0:f4:65:03:ea:67:c9:94:12:20:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 24 08:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97118a069956f52b92a85bc8121c4da067dd8135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:f9:9c:dd:34:26:b7:29:d4:e9:93:a7:82:
f5:ae:2e:0e:3f:7c:f7:1c:e5:d3:3e:19:f2:3d:41:
0d:01:e2:eb:27:b1:cb:4c:86:4d:b8:fb:71:e5:ad:
69:1b:60:57:7f:58:00:c0:3a:3c:19:2d:b8:37:0f:
57:bc:8d:1a:85:75:f5:51:df:b9:8c:1f:43:a4:0f:
2a:1e:ad:a8:f0:c7:38:7c:42:7f:24:ab:9f:23:c3:
39:ed:b8:57:d4:62:0f:51:8a:d9:9d:ee:0c:d3:b5:
d8:53:cc:c6:e2:aa:41:0f:1f:0e:7c:e6:88:d6:27:
d0:0c:f7:be:36:cc:24:bb:74:80:6f:ff:83:53:8d:
b4:fc:68:a7:7a:55:ac:ed:f1:e1:21:1a:84:b0:33:
e5:21:a8:21:f9:92:9c:ca:4a:11:50:c0:08:77:00:
7d:c7:31:d1:75:48:cd:67:62:b9:5b:97:45:a9:14:
ae:49:8f:18:6b:42:6d:45:82:37:9e:97:fd:41:aa:
88:e8:09:d1:d7:39:38:e5:8e:50:87:33:e9:36:95:
e4:5e:b1:2d:fc:46:7e:1f:9f:ff:c2:62:48:90:39:
d5:35:d6:3b:63:51:52:ba:25:35:06:43:25:b8:09:
35:ea:c7:8f:72:69:94:ba:6b:cd:3e:57:ca:db:0a:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:8A:06:99:56:F5:2B:92:A8:5B:C8:12:1C:4D:A0:67:DD:81:35
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lxGKBplW9SuSqFvIEhxNoGfdgTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.120.0/23
46.8.126.0/23
46.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ad:e1:5e:bd:81:73:74:c7:f7:a6:1f:04:ad:69:3d:3f:fd:
17:6f:d7:c3:07:f0:32:9e:be:b3:33:e6:f8:16:e3:63:1a:57:
ea:7d:d9:a7:9b:cd:e5:9e:cd:8c:51:9f:93:d0:3b:1b:8f:36:
b2:99:e1:88:21:1d:7a:b9:4c:81:c2:fb:f3:a2:ee:1f:31:9e:
6b:63:51:4c:ce:5c:ab:e4:27:c5:c1:f9:76:ff:20:d5:5c:4a:
d5:03:e1:78:4b:f8:45:45:65:e4:b1:78:ee:66:1c:1c:5e:24:
01:48:b0:d5:45:50:3d:4f:de:2d:c9:1c:f4:4b:a0:44:fb:12:
2a:09:1c:f3:6f:00:95:a5:64:ef:4d:b1:22:df:64:69:de:22:
83:09:a8:b6:e2:38:07:9c:9b:b3:67:30:fc:1a:72:b5:10:eb:
d1:fb:a7:f3:1a:69:0e:4d:e4:51:3f:14:38:19:52:2d:f9:71:
ea:3a:68:2d:4e:68:47:ea:73:94:b2:61:26:e9:6f:1e:d6:ba:
62:ad:a1:73:e4:47:ca:96:fb:7b:75:df:54:5e:60:55:29:a6:
e6:5c:c9:34:99:f3:4d:45:92:c2:36:c3:fa:f8:6c:e4:9e:f2:
78:56:84:04:8e:c1:b3:60:93:94:2d:66:56:bf:eb:ee:c2:2c:
48:11:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:09 2026 by rpki-client