Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LWaGgM69eSrTnaSmuO4J22c-2Qc.roa
File: LWaGgM69eSrTnaSmuO4J22c-2Qc.roa (raw, json)
Hash identifier: dt0cxXAWaldjGsphKA2Wb1zesoHAXVP0jWuhTZTapks=
Subject key identifier: 2D:66:86:80:CE:BD:79:2A:D3:9D:A4:A6:B8:EE:09:DB:67:3E:D9:07
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690198592E6E0F350DEB653DB5EC43
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LWaGgM69eSrTnaSmuO4J22c-2Qc.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213633
IP address blocks: 213.152.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:98:59:2e:6e:0f:35:0d:eb:65:3d:b5:ec:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d668680cebd792ad39da4a6b8ee09db673ed907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:a6:35:67:4c:8c:e0:b4:66:47:f9:b7:9f:
a8:03:2b:9d:57:f2:2a:a6:fa:34:90:94:5d:0f:45:
6e:ee:e6:ce:ee:0b:1f:ae:c2:a1:0a:7b:7d:ae:be:
e2:3a:f7:9f:51:72:14:81:6f:b2:b2:92:63:c8:9a:
09:71:09:b9:a6:db:fe:3c:58:77:59:11:1a:0d:aa:
32:a6:9e:ba:85:73:4f:8d:92:a3:c0:ac:67:c4:7a:
6e:8d:17:01:92:db:4c:06:68:1c:24:9c:19:47:e6:
cc:c2:24:6c:64:e2:d3:c6:aa:20:ed:05:b5:55:7e:
28:06:ad:f3:d4:e9:ed:08:9c:0f:39:10:e9:c8:27:
6d:25:de:2f:50:e4:4c:ae:88:8b:e2:39:8b:c9:a4:
1e:a6:b3:96:20:88:ee:e7:d0:12:b4:07:8a:c5:0d:
d5:4d:71:68:67:e0:95:78:ef:17:4d:32:55:87:d5:
12:3d:82:81:93:ad:db:2d:71:06:aa:d3:60:c2:db:
f6:fb:16:c0:0b:a4:89:dc:1c:29:44:04:89:7a:d7:
dc:43:eb:fe:c3:de:bd:11:7d:e6:d7:7e:27:6d:d8:
37:70:a9:ec:bf:52:11:5e:a3:4f:4d:7c:80:3b:fb:
51:93:a4:82:6b:b2:1d:87:31:ba:59:ac:5e:bc:79:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:86:80:CE:BD:79:2A:D3:9D:A4:A6:B8:EE:09:DB:67:3E:D9:07
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LWaGgM69eSrTnaSmuO4J22c-2Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.43.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0c:e3:85:07:d5:af:7d:9c:4b:f1:be:a7:ef:d4:09:77:e9:
12:3c:6a:bf:c8:51:ef:d3:7b:e9:51:a2:1b:73:81:5e:0e:12:
ac:14:dc:a9:ef:f5:c5:71:40:28:fd:79:43:c4:08:39:5a:a5:
56:31:c2:1f:9d:6e:f6:b1:37:aa:3b:9e:27:7c:f7:3f:2e:49:
9b:df:83:55:5d:07:35:0e:5c:6b:04:4b:fd:9d:85:1d:da:e2:
11:be:26:3d:a7:ae:da:23:be:c0:76:59:3e:4a:b0:c1:c0:59:
c9:45:2d:56:1b:2d:9d:8b:83:f0:c0:0f:e6:c6:9f:ca:9a:aa:
37:3a:99:ae:20:7f:42:bc:0f:9a:a4:98:b9:42:bc:1e:14:83:
23:7d:61:f8:7e:66:b3:2c:f2:02:91:b9:29:ab:17:d5:03:a4:
64:3f:c0:a0:8d:09:c4:3c:4e:96:49:ee:e1:49:36:52:72:24:
ce:49:14:05:44:2c:c4:42:9a:f7:2a:e8:7c:75:06:b8:03:51:
c8:31:b9:83:02:16:35:5a:ba:d2:92:57:94:1d:35:f6:ef:ca:
53:4c:de:56:4a:70:61:b3:3c:26:59:55:d0:a6:cb:65:ac:b3:
97:30:44:bc:44:81:a6:46:16:85:31:d3:d9:b4:e1:76:f5:fa:
9c:87:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:27 2026 by rpki-client