Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LG5ACCxjsn9gAetcW2FEaVC1hM8.roa
File: LG5ACCxjsn9gAetcW2FEaVC1hM8.roa (raw, json)
Hash identifier: O5GeNCN69rioddVsAyHKyodh+4FAIXpSbx5Ep56Txi4=
Subject key identifier: 2C:6E:40:08:2C:63:B2:7F:60:01:EB:5C:5B:61:44:69:50:B5:84:CF
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B41CCA989D03A2EE8A8D7E7BEA9C
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LG5ACCxjsn9gAetcW2FEaVC1hM8.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:27c0:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:1c:ca:98:9d:03:a2:ee:8a:8d:7e:7b:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c6e40082c63b27f6001eb5c5b61446950b584cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:70:9a:6a:63:e3:5e:b9:4c:23:75:7c:a4:
48:02:a3:7d:7c:94:e8:bc:b6:4a:bf:51:a0:3f:86:
a4:f8:47:ef:28:eb:08:12:0a:75:b6:21:5f:13:9d:
a5:62:70:1f:80:b9:34:6c:d4:a4:35:be:78:a0:f3:
ec:c0:db:11:ac:3b:7a:a1:71:fd:9f:00:73:84:ce:
6d:f9:39:3c:3a:72:bf:f2:19:8d:26:fa:92:3c:cb:
88:86:16:01:b0:50:6f:54:58:ce:22:28:67:d6:8e:
eb:60:7d:0b:cb:90:b7:d9:25:e2:9b:b0:70:38:d7:
db:19:61:88:97:f8:c5:64:58:b1:a1:78:1d:14:c5:
f7:71:e6:68:b8:12:24:b4:54:f6:95:b5:68:e6:5a:
5e:c3:c9:54:9c:d8:e9:18:78:cf:1e:6e:b8:15:de:
b2:40:8e:f5:3a:ec:9e:0c:17:18:68:3c:94:40:d6:
30:03:87:5b:36:5e:50:6b:c4:3b:e7:12:f9:90:47:
9d:be:8f:f0:97:d5:3d:71:55:da:82:57:03:5f:53:
cd:87:de:9b:e9:4f:9f:79:ed:c3:65:39:96:8e:f2:
4f:7c:4c:05:6c:f6:e4:e3:b3:dc:2d:d0:a2:0a:7f:
7e:aa:8e:a5:8b:b7:5b:56:58:fb:1a:57:2a:22:43:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:40:08:2C:63:B2:7F:60:01:EB:5C:5B:61:44:69:50:B5:84:CF
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LG5ACCxjsn9gAetcW2FEaVC1hM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:27c0:10::/44
Signature Algorithm: sha256WithRSAEncryption
1e:b2:03:ef:b2:7f:65:e3:1c:49:44:b4:dd:cc:5e:a4:24:9b:
6c:05:bc:57:98:47:63:21:d6:85:86:cd:2f:f0:c2:17:24:06:
04:3e:4a:bb:1a:74:5b:e7:54:7a:f0:34:8f:a1:0e:54:4c:26:
bd:5a:21:fa:e7:d9:a9:4c:06:6f:c6:06:7c:3d:d4:d7:7d:ba:
7d:85:72:39:0a:a2:f4:30:84:7b:77:95:80:6a:bd:29:4f:92:
fe:f7:a0:59:34:7c:88:ff:e7:e4:25:da:4f:ab:c9:35:0b:b6:
70:e3:bb:06:31:19:ae:e0:e0:28:b8:82:e1:09:95:be:25:73:
38:62:aa:7b:79:4f:2a:20:5a:b7:af:f7:4b:cf:fb:bd:8d:c1:
9d:8c:1b:a3:bc:4c:14:4e:eb:c7:7f:17:59:d7:fe:28:70:27:
91:3d:39:1f:85:23:fe:3d:c1:b5:a7:e3:e7:f7:ba:75:c6:5a:
4e:47:6f:1e:2f:04:60:b4:4f:1d:62:d9:f9:f0:e6:6b:7a:95:
26:bc:5a:58:f5:56:b8:59:11:59:d1:0f:38:7b:fe:ec:67:52:
13:5a:9d:61:cf:9d:12:e2:99:1d:5d:3d:2d:01:e7:9b:bc:93:
89:c9:23:2b:f0:d2:c3:11:60:a6:37:e7:f8:53:2e:cf:0f:47:
48:4c:bd:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaLQcypidA6Luio1+e+qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkzYTgxMDBkNGIzN2VkM2NkOGJiYzFhNzllOWYyMGQw
NjRhOTkwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzZlNDAwODJjNjNiMjdmNjAwMWViNWM1YjYxNDQ2OTUwYjU4NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUlwmmpj4165TCN1fKRIAqN9fJTo
vLZKv1GgP4ak+EfvKOsIEgp1tiFfE52lYnAfgLk0bNSkNb54oPPswNsRrDt6oXH9
nwBzhM5t+Tk8OnK/8hmNJvqSPMuIhhYBsFBvVFjOIihn1o7rYH0Ly5C32SXim7Bw
ONfbGWGIl/jFZFixoXgdFMX3ceZouBIktFT2lbVo5lpew8lUnNjpGHjPHm64Fd6y
QI71OuyeDBcYaDyUQNYwA4dbNl5Qa8Q75xL5kEedvo/wl9U9cVXaglcDX1PNh96b
6U+fee3DZTmWjvJPfEwFbPbk47PcLdCiCn9+qo6li7dbVlj7GlcqIkNafwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCxuQAgsY7J/YAHrXFthRGlQtYTPMB8GA1UdIwQY
MBaAFCXZOoEA1LN+082LvBp56fINBkqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvTEc1QUNDeGpzbjlnQWV0Y1cyRkVhVkMxaE04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMnwAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAesgPvsn9l4xxJRLTdzF6kJJtsBbxXmEdjIdaF
hs0v8MIXJAYEPkq7GnRb51R68DSPoQ5UTCa9WiH659mpTAZvxgZ8PdTXfbp9hXI5
CqL0MIR7d5WAar0pT5L+96BZNHyI/+fkJdpPq8k1C7Zw47sGMRmu4OAouILhCZW+
JXM4Yqp7eU8qIFq3r/dLz/u9jcGdjBujvEwUTuvHfxdZ1/4ocCeRPTkfhSP+PcG1
p+Pn97p1xlpOR28eLwRgtE8dYtn58OZrepUmvFpY9Va4WRFZ0Q84e/7sZ1ITWp1h
z50S4pkdXT0tAeebvJOJySMr8NLDEWCmN+f4Uy7PD0dITL31
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:27 2026 by rpki-client