Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LS3arXhhwuQP3sxvclwuq7CeRTk.roa
File: LS3arXhhwuQP3sxvclwuq7CeRTk.roa (raw, json)
Hash identifier: ON5c+vVZ5zuiRpNP7M1QyzGEQJsY9RC2cKCUlfJj5X0=
Subject key identifier: 2D:2D:DA:AD:78:61:C2:E4:0F:DE:CC:6F:72:5C:2E:AB:B0:9E:45:39
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019FD1A149107EFA3AF1176B3D783605FCBF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LS3arXhhwuQP3sxvclwuq7CeRTk.roa
Signing time: Wed 05 Aug 2026 11:13:55 +0000
ROA not before: Wed 05 Aug 2026 11:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 94.184.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:a1:49:10:7e:fa:3a:f1:17:6b:3d:78:36:05:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 5 11:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d2ddaad7861c2e40fdecc6f725c2eabb09e4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:ed:29:47:f1:d0:f2:32:61:1b:54:3c:74:
2a:4a:b1:e9:ef:61:f1:23:53:3b:b5:19:52:26:23:
0f:27:81:2d:fa:b4:09:8d:73:25:72:6e:71:f1:39:
96:57:82:f5:f4:47:21:74:e4:ca:30:57:81:8e:8e:
cf:ca:01:1d:6d:65:88:e0:b0:4d:eb:91:f3:ee:19:
4a:8a:05:0c:06:2f:b9:da:9d:2e:78:ca:59:c2:7e:
ee:e0:8c:4f:4b:34:02:3c:fb:92:75:b1:b6:6f:62:
74:bb:c2:d2:08:a4:32:5e:09:c3:f1:98:10:de:64:
47:93:b6:a3:9b:92:d9:d0:52:f5:f2:f5:ba:35:4c:
95:d1:8f:d3:e0:01:3b:c4:3b:2d:44:e7:a0:80:6f:
88:d4:86:a3:70:ca:58:d2:41:e0:a7:99:60:40:42:
05:b3:00:86:66:00:af:0a:e9:ac:c8:ae:f9:28:52:
70:fc:10:4f:c1:22:a2:dd:c9:a1:1a:fd:72:51:9a:
3b:63:81:ed:3b:28:bb:e0:e6:93:70:47:93:2c:96:
5f:db:e5:ed:e2:20:8e:b5:23:b0:3c:47:28:b2:c7:
44:5f:9b:00:ed:0a:3e:8d:62:91:e1:f9:b8:bc:d1:
7e:6a:be:b6:65:b0:18:a1:ee:57:b4:f5:65:b3:32:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:DA:AD:78:61:C2:E4:0F:DE:CC:6F:72:5C:2E:AB:B0:9E:45:39
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LS3arXhhwuQP3sxvclwuq7CeRTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.37.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7e:34:87:d1:07:8e:c8:89:53:c0:fb:71:f3:df:62:e9:8b:
36:c6:82:9c:99:05:dd:d2:14:02:d1:f3:3d:e1:b5:38:39:4c:
d7:b8:c1:cc:0a:f6:af:c7:2e:10:8d:6f:ba:43:2c:d3:9b:bd:
75:65:4b:9c:a3:31:9c:03:5f:d0:08:b9:fa:af:4b:12:b7:9f:
88:73:f9:45:66:97:e5:cd:cd:40:ee:a5:29:4c:05:77:2f:45:
25:e8:a7:2c:de:f3:67:0b:e3:10:2b:bb:6f:18:86:14:a2:82:
96:a3:59:25:b2:48:a8:f2:d4:2e:cc:77:21:52:c8:c3:f3:be:
48:b8:fd:0e:58:99:b2:b0:4d:28:c1:ba:a2:45:a7:db:48:73:
76:ea:c8:0d:92:cb:8c:6e:bd:02:b1:9a:b3:3e:a7:cd:d2:83:
18:a0:14:d5:5c:e1:a2:9f:53:e4:03:71:2d:34:24:d5:8e:c6:
96:ba:a9:4a:c6:80:e9:c5:6c:86:c6:74:2b:29:c8:89:3c:3e:
49:cd:a8:42:f6:1c:ab:ca:13:ce:20:a1:52:90:03:26:40:6a:
e7:8c:49:df:f2:d7:f2:2e:d4:81:9b:58:31:05:0f:87:a2:af:
72:da:e4:ab:ef:66:9b:39:31:51:4c:8c:b4:14:60:72:26:8c:
af:e0:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:12:03 2026 by rpki-client