Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LGwJ-zpLpKLY4oV4l69bCZ1fauU.roa
File: LGwJ-zpLpKLY4oV4l69bCZ1fauU.roa (raw, json)
Hash identifier: 4yO8h3FU5ovTGLZQ4PWlvRWpjKxDfjoDBv6TYzszsBM=
Subject key identifier: 2C:6C:09:FB:3A:4B:A4:A2:D8:E2:85:78:97:AF:5B:09:9D:5F:6A:E5
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EF49BD2753AA956268A48FF96A7B
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LGwJ-zpLpKLY4oV4l69bCZ1fauU.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47798
IP address blocks: 89.3.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:49:bd:27:53:aa:95:62:68:a4:8f:f9:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c6c09fb3a4ba4a2d8e2857897af5b099d5f6ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:e8:57:b1:73:7b:91:d0:19:31:5c:33:09:
a1:a6:a0:49:5a:e1:66:ef:f9:79:77:a2:d7:26:89:
ee:72:cc:2d:b4:c7:80:d2:05:76:59:8e:bb:51:b2:
8e:de:14:73:62:07:a2:54:79:bc:67:90:0c:c2:d2:
ad:6f:4f:90:4d:5c:20:83:ac:1f:fc:f3:f7:ed:b9:
17:ba:7f:d7:1a:93:cd:f4:83:40:f4:9c:97:01:ca:
af:81:d0:9e:19:97:75:e0:57:8b:d1:86:d4:49:81:
e6:8f:f9:6a:b9:97:13:6f:ea:cd:55:a6:b6:9c:df:
04:da:32:48:9a:a3:d3:d2:4e:a8:4d:40:78:72:7c:
2a:ba:85:80:47:d4:0a:4d:a4:17:c5:60:49:70:b5:
88:1a:bf:73:ce:cc:43:d6:59:86:f3:b0:b1:b6:7b:
3b:b9:74:96:75:a3:e6:50:e9:db:43:a2:2b:87:63:
c5:a1:00:1a:ff:66:16:3f:43:90:60:a4:ae:aa:51:
be:2e:c8:73:3c:84:5c:60:2e:e2:9d:e6:d4:2b:ca:
40:5f:9b:7c:5c:27:e5:10:54:ea:60:9e:e5:ca:b9:
4d:cc:a7:f6:49:65:38:e0:14:f7:db:91:ed:5e:28:
a4:38:15:92:0e:6e:cd:29:d8:48:5e:7f:b9:f3:47:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:09:FB:3A:4B:A4:A2:D8:E2:85:78:97:AF:5B:09:9D:5F:6A:E5
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LGwJ-zpLpKLY4oV4l69bCZ1fauU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
Signature Algorithm: sha256WithRSAEncryption
18:d2:d2:a0:69:d6:c9:17:23:47:36:0c:9a:86:31:b2:00:c8:
2b:f8:d6:e0:a7:46:7e:0d:28:26:3b:7a:17:83:50:e6:ce:57:
bd:b7:3b:c5:40:03:af:d5:bb:66:89:61:bb:9d:8c:d4:d7:ac:
67:4d:7f:0b:ed:05:3d:8a:a1:06:07:8d:e2:7e:9d:96:7c:0e:
bf:73:af:a7:08:a8:38:c0:a4:3f:ff:8e:bf:ec:cd:36:f1:d8:
33:b0:ef:6d:a2:cc:d1:69:ab:a4:b1:27:0c:77:8c:2a:fa:d4:
bc:91:3e:45:30:b6:93:7c:33:1a:e1:64:b7:44:fc:76:5a:e7:
6a:26:b0:23:35:00:54:48:e0:a7:31:19:69:9d:27:97:d5:9e:
3b:63:56:1c:69:51:0b:f9:d8:d6:59:c3:d6:59:84:94:11:42:
99:c9:39:43:3f:64:d6:20:90:eb:ce:92:6b:75:1b:6f:d1:e5:
5f:3b:95:7c:0d:63:9f:be:ab:d7:ce:85:e5:56:2b:26:62:b8:
b3:13:0a:cf:dd:15:a3:a2:bb:03:56:94:0a:b4:f3:f3:42:04:
c3:ea:1a:05:1e:b6:b2:31:1f:31:35:88:4c:d0:68:2f:7c:dd:
88:b6:7e:ac:9f:21:3c:09:10:2b:41:d3:91:dd:d9:9b:b7:76:
7c:5a:9a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaO9JvSdTqpViaKSP+Wp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWQzOTZlNWFkNWI3MjhjZTk2Y2ZiY2VmNzVmNThmNTBl
NjEwMDcwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzZjMDlmYjNhNGJhNGEyZDhlMjg1Nzg5N2FmNWIwOTlkNWY2YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLoV7Fze5HQGTFcMwmhpqBJWuFm
7/l5d6LXJonucswttMeA0gV2WY67UbKO3hRzYgeiVHm8Z5AMwtKtb0+QTVwgg6wf
/PP37bkXun/XGpPN9INA9JyXAcqvgdCeGZd14FeL0YbUSYHmj/lquZcTb+rNVaa2
nN8E2jJImqPT0k6oTUB4cnwquoWAR9QKTaQXxWBJcLWIGr9zzsxD1lmG87Cxtns7
uXSWdaPmUOnbQ6Irh2PFoQAa/2YWP0OQYKSuqlG+LshzPIRcYC7inebUK8pAX5t8
XCflEFTqYJ7lyrlNzKf2SWU44BT325HtXiikOBWSDm7NKdhIXn+580dhLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxsCfs6S6Si2OKFeJevWwmdX2rlMB8GA1UdIwQY
MBaAFPGdOW5a1bcozpbPvO919Y9Q5hAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvTEd3Si16cExwS0xZNG9WNGw2OWJDWjFmYXVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWQPwMA0G
CSqGSIb3DQEBCwUAA4IBAQAY0tKgadbJFyNHNgyahjGyAMgr+Nbgp0Z+DSgmO3oX
g1Dmzle9tzvFQAOv1btmiWG7nYzU16xnTX8L7QU9iqEGB43ifp2WfA6/c6+nCKg4
wKQ//46/7M028dgzsO9toszRaauksScMd4wq+tS8kT5FMLaTfDMa4WS3RPx2Wudq
JrAjNQBUSOCnMRlpnSeX1Z47Y1YcaVEL+djWWcPWWYSUEUKZyTlDP2TWIJDrzpJr
dRtv0eVfO5V8DWOfvqvXzoXlVismYrizEwrP3RWjorsDVpQKtPPzQgTD6hoFHray
MR8xNYhM0GgvfN2Itn6snyE8CRArQdOR3dmbt3Z8Wpr3
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:30 2026 by rpki-client