Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa
File: ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa (raw, json)
Hash identifier: W6KBFBMwK4dF1iS16jkumTqc3IoGarCUKwy5au1tbKc=
Subject key identifier: 96:33:88:53:B7:8C:A1:A8:87:67:2B:BF:03:E8:4E:01:B3:BB:87:FD
Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial: 019DBB140D8BA53A46B0BA516D8579DF8AFD
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa
Signing time: Thu 23 Apr 2026 16:02:26 +0000
ROA not before: Thu 23 Apr 2026 16:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209605
IP address blocks: 185.166.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:14:0d:8b:a5:3a:46:b0:ba:51:6d:85:79:df:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Validity
Not Before: Apr 23 16:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96338853b78ca1a887672bbf03e84e01b3bb87fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:89:55:22:68:f5:7c:e7:4c:e7:08:0d:0f:
f6:8f:f6:79:85:c5:1a:ab:a9:66:95:06:9f:2d:8f:
3e:94:c7:a5:2d:47:59:9b:1b:05:e5:d5:7b:90:45:
cb:9f:f1:5d:89:f2:21:46:82:7b:f3:d9:1a:fd:80:
21:c7:d8:e2:9c:47:ad:07:e4:cf:51:6b:ae:f3:15:
a9:8d:fc:8e:0d:46:a9:7b:50:27:0f:d1:8a:2f:0f:
73:30:81:0c:a4:f6:c1:1d:cc:77:a8:1d:fb:5d:10:
07:fe:49:70:06:3a:85:54:a3:dc:63:dc:2a:4a:85:
b2:7f:0c:17:81:91:fb:f0:29:89:50:d9:5e:a4:db:
0e:fa:dc:49:6a:ac:02:64:1b:c5:75:76:81:16:25:
7c:3a:5c:49:1d:8d:0a:ec:5f:b0:ac:ed:44:d4:f1:
fb:b8:19:70:a0:cf:dd:b9:a4:04:cc:5f:1f:d1:2d:
58:13:a6:53:d4:56:82:8f:db:c1:2f:45:7e:9c:e8:
c5:f0:a2:2e:72:a1:d7:60:f4:89:0a:fa:da:71:49:
c9:f6:c5:3f:d0:4b:7f:c6:12:9b:39:02:04:6a:09:
b2:77:7d:5a:fd:a6:57:9d:77:77:2d:9d:17:9f:8d:
3f:7f:d5:bc:af:d7:a1:45:41:32:4a:04:54:ad:ea:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:88:53:B7:8C:A1:A8:87:67:2B:BF:03:E8:4E:01:B3:BB:87:FD
X509v3 Authority Key Identifier:
keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/ljOIU7eMoaiHZyu_A-hOAbO7h_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.92.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5c:8e:96:ac:53:56:ec:5f:48:3d:45:a4:30:8b:6b:b5:05:
3a:48:d2:45:5c:3e:25:99:fa:a0:9e:26:42:7f:77:cd:c6:d2:
34:8a:62:b8:ea:a3:3b:ad:02:40:d1:fd:79:14:f3:d6:1a:8e:
28:b7:64:71:55:59:a0:b8:41:90:cf:e9:13:77:4d:01:dd:41:
a4:e5:23:af:82:d2:8c:22:ad:dc:ca:25:8c:51:1a:fa:cd:90:
f5:d4:ee:75:5e:43:8c:99:fe:86:8a:e5:02:04:45:60:a2:b4:
e3:ba:9d:08:8e:d2:71:30:7c:58:b2:35:75:9d:87:38:a6:fe:
fc:bd:47:23:9b:2f:4f:98:91:40:9a:97:e2:37:f4:2e:6d:bc:
aa:13:44:3f:eb:e2:8e:0b:30:3b:42:5f:31:e1:63:f8:7b:35:
9e:9a:cb:82:c2:ef:a5:ba:7e:8a:a2:e1:58:8d:35:64:b4:bb:
8b:3e:96:fd:64:2f:4b:33:35:a2:97:b9:2e:12:8d:21:62:44:
69:ba:e7:52:8a:73:c8:c6:6f:f0:79:9a:8f:e0:7a:e8:6d:d8:
3f:34:ab:37:a7:e9:f4:82:02:37:76:7e:84:de:5d:58:b5:91:
6f:4e:e7:86:11:ac:01:c1:0b:83:ea:b8:fb:93:c2:94:1e:95:
f6:e1:bc:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ27FA2LpTpGsLpRbYV534r9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx
ZjVmNmUwHhcNMjYwNDIzMTYwMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjMzODg1M2I3OGNhMWE4ODc2NzJiYmYwM2U4NGUwMWIzYmI4N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8OJVSJo9XznTOcIDQ/2j/Z5hcUa
q6lmlQafLY8+lMelLUdZmxsF5dV7kEXLn/FdifIhRoJ789ka/YAhx9jinEetB+TP
UWuu8xWpjfyODUape1AnD9GKLw9zMIEMpPbBHcx3qB37XRAH/klwBjqFVKPcY9wq
SoWyfwwXgZH78CmJUNlepNsO+txJaqwCZBvFdXaBFiV8OlxJHY0K7F+wrO1E1PH7
uBlwoM/duaQEzF8f0S1YE6ZT1FaCj9vBL0V+nOjF8KIucqHXYPSJCvracUnJ9sU/
0Et/xhKbOQIEagmyd31a/aZXnXd3LZ0Xn40/f9W8r9ehRUEySgRUreoduQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYziFO3jKGoh2crvwPoTgGzu4f9MB8GA1UdIwQY
MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt
MGY3OTY0MzIxY2UxLzEvbGpPSVU3ZU1vYWlIWnl1X0EtaE9BYk83aF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux
LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaZcMA0G
CSqGSIb3DQEBCwUAA4IBAQBBXI6WrFNW7F9IPUWkMItrtQU6SNJFXD4lmfqgniZC
f3fNxtI0imK46qM7rQJA0f15FPPWGo4ot2RxVVmguEGQz+kTd00B3UGk5SOvgtKM
Iq3cyiWMURr6zZD11O51XkOMmf6GiuUCBEVgorTjup0IjtJxMHxYsjV1nYc4pv78
vUcjmy9PmJFAmpfiN/QubbyqE0Q/6+KOCzA7Ql8x4WP4ezWemsuCwu+lun6KouFY
jTVktLuLPpb9ZC9LMzWil7kuEo0hYkRpuudSinPIxm/weZqP4Hrobdg/NKs3p+n0
ggI3dn6E3l1YtZFvTueGEawBwQuD6rj7k8KUHpX24bwa
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:43:50 2026 by rpki-client