Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRgXlo4dpUJt5efdVxCmN0o44XI.roa
File: lRgXlo4dpUJt5efdVxCmN0o44XI.roa (raw, json)
Hash identifier: cI8VlmOEnWZ4whZMoR7yrmDqjuM4hjr8fe67bNRdMnQ=
Subject key identifier: 95:18:17:96:8E:1D:A5:42:6D:E5:E7:DD:57:10:A6:37:4A:38:E1:72
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 019F2E7BA87F925D0A0FD6727298430E319E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRgXlo4dpUJt5efdVxCmN0o44XI.roa
Signing time: Sat 04 Jul 2026 18:54:43 +0000
ROA not before: Sat 04 Jul 2026 18:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43322
IP address blocks: 213.14.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:7b:a8:7f:92:5d:0a:0f:d6:72:72:98:43:0e:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jul 4 18:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=951817968e1da5426de5e7dd5710a6374a38e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:71:c1:40:66:ac:1d:57:0a:ab:75:d6:56:
f7:ea:d2:2a:4b:6d:d1:e9:33:0e:9b:4d:5f:d7:a0:
0c:9c:73:0c:bd:69:43:90:a5:b2:8f:be:c4:e9:04:
69:9e:98:5a:4b:91:49:8a:ce:38:66:89:8f:86:b6:
b2:a0:f1:d1:4e:47:94:b4:97:f8:b6:1e:59:3b:e8:
4e:1d:6f:eb:e2:47:a4:78:db:33:22:00:64:1a:96:
ca:82:64:db:8d:fc:51:f0:64:bc:b3:14:c8:a5:36:
d7:1d:44:73:60:2d:a1:af:22:0f:e1:09:75:9b:3f:
33:e0:81:24:c6:e1:fc:67:01:75:81:d0:14:58:b3:
df:25:a5:01:ed:d6:8f:0d:0a:97:8d:1d:14:41:2e:
42:42:51:55:86:82:c5:42:28:ad:82:dd:98:51:32:
83:f9:b2:35:21:8c:f7:d3:fa:2d:77:e1:32:29:23:
4b:29:b1:14:12:5d:a4:6b:18:d1:7f:e6:8b:9b:6f:
1e:14:92:d2:88:45:1c:80:b3:31:5b:b9:f8:32:5f:
d2:84:ad:d8:b2:a9:0d:43:22:1d:88:34:68:03:3d:
14:2d:02:d9:18:1e:7d:d6:11:0f:bf:ed:e7:bf:8a:
5d:dc:19:cb:40:9e:58:86:4e:0f:80:ab:48:b4:9d:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:17:96:8E:1D:A5:42:6D:E5:E7:DD:57:10:A6:37:4A:38:E1:72
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRgXlo4dpUJt5efdVxCmN0o44XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.252.0/24
Signature Algorithm: sha256WithRSAEncryption
54:76:91:ab:fa:73:41:65:cc:0b:f0:54:ac:de:70:7d:02:10:
68:ed:df:e7:0a:2c:8b:ee:43:35:f6:48:e9:d4:a0:7e:a0:2c:
77:03:92:4d:d3:02:3f:52:f3:51:ae:6e:d4:b1:9a:25:95:a8:
0e:0b:0b:cf:ef:ba:4c:af:a4:de:fc:43:64:66:f9:b2:69:29:
5c:07:6f:75:56:81:38:b7:ef:91:a0:e8:07:ca:b4:9e:fe:c8:
ee:aa:ea:ba:0b:c4:3d:3f:52:5e:8e:b6:ff:83:b0:51:1d:b5:
ff:9b:33:14:3a:57:74:5b:fc:31:25:6d:a7:ec:99:c5:ba:78:
51:25:4c:52:84:01:62:9a:1e:4d:47:4c:96:fe:2c:11:3f:1c:
23:61:9e:09:9f:ec:1f:a1:5d:e1:f0:b8:59:01:dc:e3:4a:e4:
8e:f1:05:fc:9d:bf:05:5c:d8:24:2b:77:00:49:77:c7:86:3c:
20:2a:e3:c9:b6:d3:88:b2:8d:0f:e4:ff:e9:cc:fd:6c:77:a5:
92:66:45:6e:c4:3a:6a:1d:37:00:9e:3e:86:67:d0:ce:d3:3c:
70:d4:fc:54:87:5f:91:db:3f:ba:64:b2:97:bf:4c:f2:81:93:
ed:d3:98:d9:75:c3:fc:0a:d8:26:54:af:b1:13:26:2d:38:62:
b3:9b:c1:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ue6h/kl0KD9ZycphDDjGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjYwNzA0MTg1NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTE4MTc5NjhlMWRhNTQyNmRlNWU3ZGQ1NzEwYTYzNzRhMzhlMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLlxwUBmrB1XCqt11lb36tIqS23R
6TMOm01f16AMnHMMvWlDkKWyj77E6QRpnphaS5FJis44ZomPhrayoPHRTkeUtJf4
th5ZO+hOHW/r4kekeNszIgBkGpbKgmTbjfxR8GS8sxTIpTbXHURzYC2hryIP4Ql1
mz8z4IEkxuH8ZwF1gdAUWLPfJaUB7daPDQqXjR0UQS5CQlFVhoLFQiitgt2YUTKD
+bI1IYz30/otd+EyKSNLKbEUEl2kaxjRf+aLm28eFJLSiEUcgLMxW7n4Ml/ShK3Y
sqkNQyIdiDRoAz0ULQLZGB591hEPv+3nv4pd3BnLQJ5Yhk4PgKtItJ2imwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUYF5aOHaVCbeXn3VcQpjdKOOFyMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvbFJnWGxvNGRwVUp0NWVmZFZ4Q21OMG80NFhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q78MA0G
CSqGSIb3DQEBCwUAA4IBAQBUdpGr+nNBZcwL8FSs3nB9AhBo7d/nCiyL7kM19kjp
1KB+oCx3A5JN0wI/UvNRrm7UsZollagOCwvP77pMr6Te/ENkZvmyaSlcB291VoE4
t++RoOgHyrSe/sjuquq6C8Q9P1Jejrb/g7BRHbX/mzMUOld0W/wxJW2n7JnFunhR
JUxShAFimh5NR0yW/iwRPxwjYZ4Jn+wfoV3h8LhZAdzjSuSO8QX8nb8FXNgkK3cA
SXfHhjwgKuPJttOIso0P5P/pzP1sd6WSZkVuxDpqHTcAnj6GZ9DO0zxw1PxUh1+R
2z+6ZLKXv0zygZPt05jZdcP8CtgmVK+xEyYtOGKzm8GB
-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:12 2026 by rpki-client