Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/LICSZW6buSJYk1oARnAFrdmWuFU.roa
File: LICSZW6buSJYk1oARnAFrdmWuFU.roa (raw, json)
Hash identifier: TwqDawyRXh5YGrolYDCvMO93/W3FlxRPud+jOp0w8eM=
Subject key identifier: 2C:80:92:65:6E:9B:B9:22:58:93:5A:00:46:70:05:AD:D9:96:B8:55
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 019F236847CDA615299D17F8DDF002D1127D
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/LICSZW6buSJYk1oARnAFrdmWuFU.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8528
IP address blocks: 138.21.0.0/16 maxlen: 24
138.21.3.0/24 maxlen: 24
138.21.4.0/24 maxlen: 24
138.21.12.0/24 maxlen: 24
138.21.23.0/24 maxlen: 24
138.21.47.0/24 maxlen: 24
138.21.50.0/24 maxlen: 24
138.21.55.0/24 maxlen: 24
138.21.56.0/24 maxlen: 24
138.21.113.0/24 maxlen: 24
138.21.117.0/24 maxlen: 24
138.21.119.0/24 maxlen: 24
138.21.148.0/24 maxlen: 24
193.8.143.0/24 maxlen: 24
193.194.132.0/22 maxlen: 22
193.194.134.0/24 maxlen: 24
193.194.135.0/24 maxlen: 24
194.41.4.0/22 maxlen: 22
194.146.54.0/24 maxlen: 24
2a00:7ec0::/32 maxlen: 32
2a00:7ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:47:cd:a6:15:29:9d:17:f8:dd:f0:02:d1:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c8092656e9bb92258935a00467005add996b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:f4:ed:82:3e:2b:f6:c2:cd:3e:1a:ef:c2:
13:68:c9:e8:19:32:cc:31:37:1b:4c:f0:e7:62:d9:
5f:b9:e8:b0:cd:b3:52:78:4d:20:eb:95:8f:29:bd:
fd:9e:80:6d:77:4b:c0:e1:d2:8d:e8:75:0e:22:5e:
c4:af:12:74:e9:fd:51:cf:c9:0a:60:42:07:c2:18:
dc:6f:0d:29:cf:d7:9b:32:50:be:50:32:b1:07:91:
bb:bd:94:b3:8a:ff:4d:1b:ef:22:a4:7b:39:0e:c5:
00:24:43:a2:ef:b5:f1:6b:76:af:9a:24:50:a4:d1:
29:a0:ab:4e:d3:f4:16:3a:a0:eb:a3:e0:05:87:24:
8c:12:23:1c:3f:29:78:41:df:b5:e2:d5:7e:c5:60:
fe:33:ad:9b:e7:54:e2:b2:0b:92:01:51:d7:34:67:
47:e3:a3:fb:00:aa:df:d4:b1:dc:80:74:c4:84:50:
84:16:f7:5a:78:4e:9a:e5:55:7b:4b:fb:c3:89:c9:
ae:09:b8:cc:4d:72:bc:18:26:79:b1:bd:0b:c0:1b:
14:cd:23:6d:a2:00:e1:5f:b2:78:ca:a5:49:17:64:
bb:8f:09:9c:ac:64:06:ae:c2:a3:11:67:c2:d0:ba:
46:ed:fc:7d:a5:bc:69:61:30:be:30:b2:e3:80:c3:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:92:65:6E:9B:B9:22:58:93:5A:00:46:70:05:AD:D9:96:B8:55
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/LICSZW6buSJYk1oARnAFrdmWuFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.0.0/16
193.8.143.0/24
193.194.132.0/22
194.41.4.0/22
194.146.54.0/24
IPv6:
2a00:7ec0::/32
Signature Algorithm: sha256WithRSAEncryption
31:92:d9:6c:8a:63:e2:59:ff:81:79:ab:90:3c:18:2b:6d:03:
14:9f:13:60:c0:15:ad:79:00:d6:a5:2f:61:d4:9b:8b:53:d2:
b1:a7:63:2d:71:f4:b4:45:65:ec:0f:90:1a:99:de:8a:3d:ed:
b4:93:88:85:a4:da:f5:e0:77:89:94:d6:8c:e2:06:07:43:3a:
29:a2:b7:2a:cc:ba:a2:c3:f2:cb:c1:49:4a:e1:52:94:54:fe:
08:5f:8e:10:4b:8a:6c:92:f4:b8:a5:04:03:8f:b6:34:0c:f0:
a0:90:00:d3:02:d9:79:c4:a0:2f:0e:ea:6b:a4:89:82:68:2c:
39:90:a9:08:1f:e6:7b:c5:e1:35:f2:3f:63:7f:2f:c2:a1:e9:
85:9a:08:52:42:dd:e9:5c:75:84:e9:a2:26:a5:f3:77:2d:e8:
4b:c3:6c:4e:b2:dd:4d:55:63:6c:c3:9d:2d:ef:ee:ad:c5:f7:
dd:e8:e1:1c:11:e2:03:7d:f2:60:47:de:14:06:ec:a3:3c:d5:
bf:dd:0e:15:63:75:16:3b:10:89:f5:43:da:da:8f:ed:31:bc:
be:60:73:5e:07:26:c6:ad:66:03:bc:ac:19:f9:30:27:e1:04:
b9:5f:d3:a7:82:3c:41:e0:5d:0a:aa:30:96:3c:a4:e7:0e:00:
e6:ad:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:35:54 2026 by rpki-client