Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/Ls9dkhxKZKZbqNMb6NwBB1QxV6Q.roa
File: Ls9dkhxKZKZbqNMb6NwBB1QxV6Q.roa (raw, json)
Hash identifier: 5fQoz0kcnz6D8oNLQ3Oczd/jkOG9uDcL5uCwP3zxEMU=
Subject key identifier: 2E:CF:5D:92:1C:4A:64:A6:5B:A8:D3:1B:E8:DC:01:07:54:31:57:A4
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 019FB0A693BD7F08DC5C13E4A4C533D0FA2C
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/Ls9dkhxKZKZbqNMb6NwBB1QxV6Q.roa
Signing time: Thu 30 Jul 2026 01:32:14 +0000
ROA not before: Thu 30 Jul 2026 01:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49588
IP address blocks: 176.101.192.0/19 maxlen: 19
193.169.134.0/24 maxlen: 24
2001:67c:2c44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:a6:93:bd:7f:08:dc:5c:13:e4:a4:c5:33:d0:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jul 30 01:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ecf5d921c4a64a65ba8d31be8dc0107543157a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:5e:64:ac:a1:15:71:89:82:96:b1:4a:64:
2b:b3:26:91:ac:30:ba:a2:fd:75:bd:61:45:58:76:
b3:97:84:c1:69:1d:98:d5:79:7a:f2:53:1d:ed:b2:
6f:77:eb:74:1a:c2:3c:7b:85:28:5a:2f:56:cb:a0:
6b:03:09:93:40:29:5f:93:64:2f:d3:a1:ef:50:6d:
17:dc:21:ca:bc:88:c3:ce:e1:1c:dc:be:2c:bf:60:
d2:24:8d:f4:59:e2:ce:65:5e:00:40:e1:56:6d:fc:
3d:17:9e:1d:39:ad:0d:6b:de:d4:1a:ab:ff:f2:6c:
58:f6:4b:d3:e4:d8:ae:04:98:2d:df:2f:04:dd:6c:
87:c1:65:24:92:40:ea:dc:16:cd:75:ba:c1:93:7b:
06:05:2b:76:9c:11:0c:f4:ac:66:21:08:97:d8:5d:
6c:e2:4c:ca:cc:8d:b4:ae:7c:98:50:a4:43:57:23:
02:6b:c3:ca:9f:0e:62:bc:f3:6d:91:67:f5:49:81:
e2:c9:a9:b0:78:67:28:f4:33:dc:69:b6:54:47:2b:
2d:78:94:bd:70:0a:40:06:b2:47:d0:8d:45:00:34:
5a:26:0b:89:e5:fd:24:3f:3a:26:94:b4:42:b1:60:
23:71:62:ac:7d:b5:9c:06:57:b0:0f:c9:d4:c7:c4:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CF:5D:92:1C:4A:64:A6:5B:A8:D3:1B:E8:DC:01:07:54:31:57:A4
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/Ls9dkhxKZKZbqNMb6NwBB1QxV6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.192.0/19
193.169.134.0/24
IPv6:
2001:67c:2c44::/48
Signature Algorithm: sha256WithRSAEncryption
a5:5b:97:c7:0c:3b:91:6e:0e:0c:c9:4c:a8:fe:a9:8a:b7:2f:
fc:76:03:92:f4:84:c8:dc:b0:fd:b9:b7:61:85:90:fd:54:05:
83:41:89:fd:d9:b2:9c:ac:11:26:16:e3:61:e5:72:f1:d6:1c:
08:34:49:1c:91:75:42:96:68:36:eb:82:35:61:2c:39:66:22:
a6:75:96:fe:ca:5d:4c:e9:68:62:2b:94:cd:6b:ac:f4:6d:08:
ea:3f:ad:02:48:c4:a0:83:04:41:f7:17:4c:6b:85:54:2c:fb:
24:9d:96:f4:f4:a1:a0:f3:78:2e:f4:34:c3:64:3e:d3:b5:40:
d8:7e:44:6b:3b:5c:8b:09:2a:f6:07:b4:9a:f1:95:6c:a6:85:
38:69:82:92:aa:8f:8a:91:1a:52:e2:e7:0d:2f:74:7e:ab:c0:
60:8f:ba:16:5d:10:53:90:d2:df:d0:69:b1:6b:82:1a:62:93:
cc:01:3e:24:df:78:60:9c:f1:a8:13:97:a9:93:c4:35:26:ff:
99:cd:45:19:4a:9f:ba:30:eb:2a:e9:6d:d9:72:d2:7f:0a:10:
cc:f3:22:de:96:29:4c:70:0f:a1:ec:58:8b:12:b4:5d:1c:c3:
15:3e:44:7e:a5:b7:e2:34:53:5b:2d:bf:9f:b6:30:b2:46:74:
4b:bf:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:11 2026 by rpki-client