Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lBbAUO33rM2eoYBTy2J3DAZV-Zg.roa
File: lBbAUO33rM2eoYBTy2J3DAZV-Zg.roa (raw, json)
Hash identifier: RPcXXTINUQZfzArL5JFbL+gZ2q6XSIe7UudAFkwx0o4=
Subject key identifier: 94:16:C0:50:ED:F7:AC:CD:9E:A1:80:53:CB:62:77:0C:06:55:F9:98
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F11492F99FD2E8575E9D54CD960797CF4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lBbAUO33rM2eoYBTy2J3DAZV-Zg.roa
Signing time: Mon 29 Jun 2026 02:50:36 +0000
ROA not before: Mon 29 Jun 2026 02:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 212.212.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:49:2f:99:fd:2e:85:75:e9:d5:4c:d9:60:79:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 29 02:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9416c050edf7accd9ea18053cb62770c0655f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:f9:5e:ae:a5:e1:ee:b3:36:97:eb:ef:62:
e4:94:98:31:0d:dd:0d:b2:8a:ed:1f:d6:af:db:9c:
24:a6:29:5a:b4:4c:10:dd:26:52:b4:07:f3:a5:31:
d8:ce:ec:53:16:cf:39:11:ea:16:88:36:90:09:9e:
40:ab:16:18:0d:79:47:21:73:ca:f0:72:c3:60:9b:
04:95:22:99:02:7d:10:d0:30:e8:2c:a0:e7:3e:ee:
b7:e2:e8:f4:d4:56:4a:e0:01:31:84:ef:5c:fe:d3:
62:f4:f5:e3:b1:2a:5d:c2:00:59:d0:a1:7a:47:fb:
12:83:21:b7:d1:4e:20:a1:dc:75:47:29:40:02:a7:
74:3b:2e:17:45:de:61:df:b9:2f:e7:aa:51:a6:08:
92:7c:b1:0b:2a:18:00:85:32:92:be:b9:57:32:2d:
98:dd:4b:76:86:15:5b:50:12:c0:2b:ba:f2:b0:72:
ca:79:f0:f6:cc:9b:92:99:db:cc:d5:bf:2d:4c:77:
bb:f7:f9:b5:27:d3:4e:fb:0d:8c:99:9d:cd:c5:e7:
40:73:c1:aa:de:5f:72:59:01:14:9c:c4:c8:07:20:
99:62:8c:33:02:3b:cf:55:6b:45:9e:43:2d:83:12:
4f:36:6d:99:ed:17:30:b6:5e:41:59:ad:fd:7d:50:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:16:C0:50:ED:F7:AC:CD:9E:A1:80:53:CB:62:77:0C:06:55:F9:98
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lBbAUO33rM2eoYBTy2J3DAZV-Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c0:90:57:2a:7b:f4:87:c1:c3:f2:d4:ee:87:67:a8:81:39:
cb:16:93:80:41:3b:05:6c:69:ed:b0:02:30:de:e5:a0:46:78:
a9:b6:7d:34:7b:51:c8:78:a6:db:11:77:e6:c5:50:0e:89:e2:
ac:6d:52:c0:fa:b7:19:b9:68:f0:55:b3:46:39:51:a1:17:2a:
96:50:ba:e0:b6:34:12:41:22:44:d5:4c:e0:e8:a4:85:54:9d:
7e:74:e1:fe:fa:d4:a1:55:48:e2:d6:63:15:9c:7c:c8:f7:06:
9a:c5:06:0a:93:27:5e:5b:a7:54:95:27:5a:90:f5:9a:c3:1d:
c6:be:29:71:a2:71:42:ae:a7:d7:40:92:b2:af:09:5f:69:25:
b4:0e:84:74:75:9d:fa:2a:47:39:a6:fc:93:4e:66:e7:35:6c:
3f:cd:67:bc:a7:f3:64:99:09:f9:38:7e:4a:7b:60:86:32:44:
50:e3:d0:19:9d:db:22:93:ae:8e:28:65:a4:27:00:56:b2:dd:
48:39:c2:dc:c9:b7:be:f4:bb:73:22:7c:9c:4e:0c:60:08:8a:
2f:9d:b6:f1:f9:38:0c:f7:ec:ed:15:10:bc:be:b9:ba:26:3e:
e4:39:bc:bc:68:af:68:30:10:6f:30:6a:a1:49:a4:7a:7a:a4:
d2:9e:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:22 2026 by rpki-client