Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/lct4bB1H-wCOOaAsA4i7d3IC4GE.roa
File: lct4bB1H-wCOOaAsA4i7d3IC4GE.roa (raw, json)
Hash identifier: GAqlifvXAPErdeOQZzzsHa26HVEfsU1pkeyvC7RPuPo=
Subject key identifier: 95:CB:78:6C:1D:47:FB:00:8E:39:A0:2C:03:88:BB:77:72:02:E0:61
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019DF7468E4AB04F7DE112E70C30AD063D6F
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/lct4bB1H-wCOOaAsA4i7d3IC4GE.roa
Signing time: Tue 05 May 2026 08:34:49 +0000
ROA not before: Tue 05 May 2026 08:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199746
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:46:8e:4a:b0:4f:7d:e1:12:e7:0c:30:ad:06:3d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 5 08:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95cb786c1d47fb008e39a02c0388bb777202e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:0a:bc:2a:6d:1c:0b:a3:01:dd:17:68:a6:
3d:94:6d:27:e6:d1:54:8c:60:23:ce:f7:c7:22:74:
84:9d:9a:1e:03:20:1e:09:c8:a3:6b:c8:4c:dd:95:
a3:78:b7:ca:e8:6f:be:a3:ec:70:55:94:39:1f:1d:
ca:57:1b:8e:62:63:17:23:97:e8:8c:bd:a7:f0:e3:
b9:71:8f:c5:8d:4b:d2:31:84:52:7f:d5:3b:a9:bb:
28:b4:1e:1a:12:e8:fc:46:13:f6:75:f9:11:4d:37:
f6:ab:e5:96:6d:12:39:2e:92:b4:13:f7:86:87:19:
3f:b7:c6:72:dc:24:90:7a:8b:6b:00:27:fb:11:fe:
72:10:49:fd:9f:56:fd:c0:ce:44:f0:5d:77:ab:43:
b8:c7:3e:7a:c9:ba:bd:26:dc:fb:34:0f:24:7f:78:
77:b9:d1:bc:b6:a3:7b:d8:12:38:7d:e7:36:81:df:
b5:3b:fb:09:8c:29:64:eb:dc:c3:99:52:ce:30:7f:
7a:a0:5a:7d:58:f2:bd:39:6e:b0:2f:fe:f2:eb:cb:
d3:ba:ed:b0:54:19:ca:a2:df:68:2d:ad:bc:41:44:
a8:5c:3f:7f:ca:2a:e2:8d:df:22:c9:b0:3a:36:a9:
f5:2b:82:22:fb:b6:44:c5:67:2e:4d:28:4d:cf:03:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:78:6C:1D:47:FB:00:8E:39:A0:2C:03:88:BB:77:72:02:E0:61
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/lct4bB1H-wCOOaAsA4i7d3IC4GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ec:80:3d:15:f9:35:8a:1b:2f:d3:50:df:17:54:c1:af:b6:
cd:7f:1a:97:2d:7c:d9:cb:66:60:d8:08:a3:98:07:e2:93:90:
2c:50:26:78:68:09:9c:01:9b:64:6a:bd:be:cd:0e:4f:8b:ec:
d8:3b:69:3d:b4:c8:e4:74:f8:db:28:62:83:7f:3d:e1:02:5e:
9f:be:f4:42:1b:0c:d5:a1:38:78:eb:c5:83:58:ef:40:57:ec:
99:54:68:3f:4d:70:99:28:06:c6:63:73:5f:2e:d2:60:ec:90:
6c:4e:c6:88:61:c6:79:20:11:d1:c7:0e:f4:83:4b:62:65:39:
39:90:bb:ba:b8:05:f4:e4:4b:7b:7f:69:17:f5:9c:a4:bf:15:
5f:68:38:3e:95:94:63:df:8c:49:a6:04:dd:23:e4:81:fe:7c:
b6:7a:11:26:c9:0f:87:7f:93:47:38:04:f7:9a:53:78:2a:39:
d4:cf:e3:3a:f2:47:9a:2a:d1:4d:3a:b3:85:8f:6b:1e:c5:70:
09:5a:24:0a:28:05:d7:ee:4f:08:80:df:a7:ba:84:8b:18:b7:
6f:ed:51:75:0b:1e:4d:17:6c:f7:3f:58:bb:0d:5d:b8:ed:d8:
07:6d:a6:ae:9e:f4:bf:05:e9:fb:2a:9a:4b:58:f3:af:a7:a6:
8d:9a:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:09 2026 by rpki-client