Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa
File: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (raw, json)
Hash identifier: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=
Subject key identifier: 2C:6C:33:53:17:23:6E:AF:7E:C1:BD:A8:72:A3:2A:BB:7B:B2:3A:33
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 019F2368C7307E46C8434140774BC7E46060
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39702
IP address blocks: 185.214.232.0/22 maxlen: 22
2a0e:a2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:30:7e:46:c8:43:41:40:77:4b:c7:e4:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c6c335317236eaf7ec1bda872a32abb7bb23a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:6b:32:1c:25:8a:6c:09:71:4e:80:ac:e0:
bc:e0:ed:e6:1d:d0:91:a2:9c:a5:29:0b:0d:94:d8:
94:8a:1c:c5:76:f7:28:77:31:21:04:3b:5c:75:88:
1b:20:3e:ab:b3:b7:91:7b:55:9e:21:57:10:2b:9a:
e7:38:b6:96:35:69:c8:be:ce:4e:10:ea:dc:de:67:
89:c1:7e:48:ae:fb:90:1d:00:5d:a0:d5:fa:88:07:
0f:e2:18:52:2a:27:86:1e:93:0d:1a:63:d1:e2:18:
18:85:36:b3:56:98:0f:9e:8c:e3:43:a4:38:ff:62:
b5:01:ee:d1:bd:29:ac:c0:18:86:cd:75:a9:17:a4:
57:2b:80:68:84:b5:25:2c:02:5a:8f:e8:90:a4:18:
27:85:33:ff:89:f4:ac:0a:18:99:aa:26:e9:cd:22:
1e:0e:f8:f5:c8:f8:5a:51:85:f8:aa:a0:55:2d:e3:
d1:82:a8:d8:83:1d:de:4d:62:64:3a:d2:a2:0f:3d:
77:22:54:bc:e5:65:9e:cf:6e:d6:ff:e5:dd:1d:d8:
f3:9c:82:54:75:75:82:0c:01:fb:4d:e2:6d:cd:61:
2c:6b:9e:5e:ce:ad:d0:1a:14:79:00:77:9a:9b:71:
0f:d4:08:cc:a0:49:0a:ba:08:3e:bd:8c:39:07:39:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:33:53:17:23:6E:AF:7E:C1:BD:A8:72:A3:2A:BB:7B:B2:3A:33
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.232.0/22
IPv6:
2a0e:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
20:e9:7e:77:53:6d:d3:de:44:7b:5b:59:b0:0a:b7:b0:db:ab:
7e:9e:5e:a0:25:f3:b0:af:33:7e:0b:c4:24:d2:98:6f:ae:ff:
2a:75:0a:7d:e2:53:aa:4f:91:cb:98:22:9f:f6:04:9a:db:e3:
8c:b2:df:2a:2c:c4:f9:84:97:88:94:2e:7d:b4:91:b7:0b:6c:
a5:15:0d:c6:ca:5f:c9:1b:d5:10:86:3f:3e:a1:3e:f9:2a:44:
d8:a6:0e:54:37:ad:31:93:28:30:c4:e1:0f:d8:ff:f4:ff:d5:
78:2c:a8:55:00:70:20:a5:1c:f1:fb:c0:57:e0:c2:65:da:89:
b5:e5:ea:9d:b0:a1:45:23:57:1d:0c:2d:8c:ff:56:55:8f:e9:
bb:10:e7:5c:f3:56:2b:2a:df:0a:81:50:4a:fd:6b:e9:3f:f7:
53:0d:75:39:45:bf:b8:aa:a9:4e:30:9f:82:ec:dc:1e:f1:be:
92:b4:fa:7f:dc:31:4e:af:5a:2d:8c:65:f1:ed:0a:25:2b:51:
32:15:34:04:7b:1c:c3:a8:b8:df:61:44:d6:7d:37:ba:4a:11:
0f:12:b2:1a:0f:7e:e4:94:d1:c4:6f:30:68:55:90:0a:21:30:
ee:eb:22:25:e4:05:9c:f0:b0:7f:85:34:09:a9:9a:71:c5:74:
f1:9f:2a:fb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaMcwfkbIQ0FAd0vH5GBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWZjNTZhN2MxNjI3ZDdkZmM0MzBmYTFkNjEyOTE5YjUw
MTQ1NWYwHhcNMjYwNzAyMTUxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzZjMzM1MzE3MjM2ZWFmN2VjMWJkYTg3MmEzMmFiYjdiYjIzYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q5rMhwlimwJcU6ArOC84O3mHdCR
opylKQsNlNiUihzFdvcodzEhBDtcdYgbID6rs7eRe1WeIVcQK5rnOLaWNWnIvs5O
EOrc3meJwX5IrvuQHQBdoNX6iAcP4hhSKieGHpMNGmPR4hgYhTazVpgPnozjQ6Q4
/2K1Ae7RvSmswBiGzXWpF6RXK4BohLUlLAJaj+iQpBgnhTP/ifSsChiZqibpzSIe
Dvj1yPhaUYX4qqBVLePRgqjYgx3eTWJkOtKiDz13IlS85WWez27W/+XdHdjznIJU
dXWCDAH7TeJtzWEsa55ezq3QGhR5AHeam3EP1AjMoEkKugg+vYw5BzkmNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCxsM1MXI26vfsG9qHKjKrt7sjozMB8GA1UdIwQY
MBaAFDIfxWp8FifX38Qw+h1hKRm1AUVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhfRmFud1dKOWZmeERENkhXRXBHYlVCUlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQt
NDk4ZGQxZDMwN2QwLzEvTEd3elV4Y2picTktd2Iyb2NxTXF1M3V5T2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQtNDk4ZGQxZDMwN2Qw
LzEvTWhfRmFud1dKOWZmeERENkhXRXBHYlVCUlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudboMA0E
AgACMAcDBQAqDqLAMA0GCSqGSIb3DQEBCwUAA4IBAQAg6X53U23T3kR7W1mwCrew
26t+nl6gJfOwrzN+C8Qk0phvrv8qdQp94lOqT5HLmCKf9gSa2+OMst8qLMT5hJeI
lC59tJG3C2ylFQ3Gyl/JG9UQhj8+oT75KkTYpg5UN60xkygwxOEP2P/0/9V4LKhV
AHAgpRzx+8BX4MJl2om15eqdsKFFI1cdDC2M/1ZVj+m7EOdc81YrKt8KgVBK/Wvp
P/dTDXU5Rb+4qqlOMJ+C7Nwe8b6StPp/3DFOr1otjGXx7QolK1EyFTQEexzDqLjf
YUTWfTe6ShEPErIaD37klNHEbzBoVZAKITDu6yIl5AWc8LB/hTQJqZpxxXTxnyr7
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:33 2026 by rpki-client