Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LRzFfmySYr0GsNFVH9JBvuFncc0.roa
File: LRzFfmySYr0GsNFVH9JBvuFncc0.roa (raw, json)
Hash identifier: qautPhRpCF6YWsj0Fbt4pm4dMaKXLUnmmG+5SenQP+0=
Subject key identifier: 2D:1C:C5:7E:6C:92:62:BD:06:B0:D1:55:1F:D2:41:BE:E1:67:71:CD
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FF1B8A25CD19402FB21ABAFAE763529F4
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LRzFfmySYr0GsNFVH9JBvuFncc0.roa
Signing time: Tue 11 Aug 2026 16:47:16 +0000
ROA not before: Tue 11 Aug 2026 16:47:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219272
IP address blocks: 191.44.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:b8:a2:5c:d1:94:02:fb:21:ab:af:ae:76:35:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 11 16:47:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d1cc57e6c9262bd06b0d1551fd241bee16771cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:5c:12:0a:55:63:1d:a5:c1:e9:43:d5:e4:
8b:9a:7d:42:5d:2f:de:b4:0b:53:84:4e:0c:d3:6c:
16:af:ac:d5:82:cd:f7:6e:1b:98:8b:0f:e7:ea:c2:
5b:2f:47:2c:cd:a1:17:24:62:31:c1:6c:fb:ab:fc:
31:12:e9:cb:49:36:d4:d7:21:c9:b1:f0:c1:01:13:
d5:66:3b:0a:93:22:a5:d4:2d:b3:46:76:59:34:72:
41:8f:68:4c:2b:c4:43:12:2d:7a:a1:52:84:c0:58:
15:e2:ed:7d:d8:fb:e8:75:c8:ef:59:3b:8e:e7:3f:
65:eb:45:74:6b:d3:24:7d:69:19:90:90:24:66:0f:
7d:ad:a7:29:8c:29:a3:eb:0a:5e:80:9e:5b:06:b7:
cb:be:54:47:b5:f3:f8:fe:57:13:87:0d:ae:f7:a5:
31:fc:a9:2d:02:1f:8d:a4:64:66:1e:52:ef:9e:c6:
99:12:09:61:56:c0:73:be:12:a6:85:54:2d:99:55:
2d:6d:4a:44:4d:1f:60:e4:14:b6:86:4d:e6:8c:e4:
12:30:da:81:9d:0d:2c:06:67:63:70:ad:df:5c:fa:
21:22:06:e9:ff:7c:32:00:4d:30:8e:c2:1c:3d:68:
6f:76:74:84:41:e3:e0:32:1b:89:ac:e7:89:b3:e7:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:C5:7E:6C:92:62:BD:06:B0:D1:55:1F:D2:41:BE:E1:67:71:CD
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LRzFfmySYr0GsNFVH9JBvuFncc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.93.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9f:02:04:a9:cd:16:5f:7a:51:33:f1:d0:ea:d8:17:7f:a5:
c1:4e:48:2b:0f:6c:c4:3b:ba:63:f7:df:a2:25:d4:4f:5d:27:
d4:7c:35:c9:65:9f:51:53:d8:25:dc:9b:2e:67:79:98:40:42:
9c:e9:11:ca:3f:37:e7:6f:b1:72:f2:65:78:2c:4b:e9:7a:dd:
d9:b1:ab:53:6f:b5:f3:4e:72:84:70:de:62:35:7a:2b:37:bb:
99:e3:78:d7:d8:bc:30:56:ac:ff:df:23:eb:a8:ed:6b:35:b3:
9d:a0:5f:7b:87:a9:db:5e:76:25:ea:d8:0e:b0:de:95:4b:a4:
72:cc:cd:c6:ea:b2:fd:5a:24:95:22:9c:8a:be:07:72:be:58:
ee:01:14:43:05:dd:45:6c:af:9d:17:55:30:e6:6f:d8:2c:9d:
ec:11:97:3d:59:42:1a:70:05:3d:ac:ff:ce:b9:80:15:48:7a:
1d:e1:d6:36:9c:0c:e4:38:85:79:e6:27:10:1a:38:bc:21:d5:
6b:7d:56:ff:91:2f:be:49:eb:1c:a2:f9:06:4c:ce:89:3d:3f:
7a:8c:8a:fb:c8:14:d1:c1:56:41:00:68:55:48:40:c3:2c:b8:
f3:8a:10:d1:1a:71:34:f3:eb:21:5c:07:2b:6d:c0:51:b3:39:
85:72:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:27:29 2026 by rpki-client