Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lsc-WuU5v_kNnbPjD8avv2AE6hU.roa
File: lsc-WuU5v_kNnbPjD8avv2AE6hU.roa (raw, json)
Hash identifier: jxaOpc/bhcgP8AeMxjx4Z6hj4r4mddswk04iHdN3HeE=
Subject key identifier: 96:C7:3E:5A:E5:39:BF:F9:0D:9D:B3:E3:0F:C6:AF:BF:60:04:EA:15
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C60C9749282121CBCD5147972FBB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lsc-WuU5v_kNnbPjD8avv2AE6hU.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 109.176.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c6:0c:97:49:28:21:21:cb:cd:51:47:97:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c73e5ae539bff90d9db3e30fc6afbf6004ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:9b:1a:48:b6:c3:cd:44:ea:af:37:c0:f4:
5d:f2:44:fd:86:2d:b6:a4:6b:d7:0c:ce:15:25:f3:
33:2d:51:cd:2a:87:21:07:e2:45:ac:b0:9b:bd:62:
9e:03:cd:21:1d:16:d2:3f:76:05:a0:bf:ec:85:f4:
ce:f8:05:51:3e:4c:46:56:d2:8f:5e:08:30:20:d4:
07:f0:a7:11:ce:73:3a:43:23:bf:09:57:e0:a7:5f:
47:66:22:c1:d2:71:02:97:02:54:05:75:f9:64:d5:
82:75:99:ee:01:09:3d:e3:3f:a7:20:62:04:28:c6:
3c:85:cd:4b:71:d1:ee:7e:73:18:ac:27:88:0e:c3:
6e:ca:96:4f:aa:1e:64:cb:3c:e6:11:f4:0a:99:11:
67:ec:ec:60:35:bf:e4:f7:8f:62:49:a1:00:bf:be:
94:36:e2:af:ee:a0:89:d3:34:43:7b:f6:6a:3d:6e:
ca:a1:9e:5b:a6:3e:a3:a0:b1:82:48:23:ae:92:91:
4a:e9:df:9a:66:ee:13:36:ed:15:8b:1c:42:14:b4:
50:cc:6e:6c:53:21:e8:49:f9:b7:4b:bc:27:8a:a8:
a1:0a:71:63:fb:f7:5c:b1:f5:b0:3a:40:66:25:a9:
1c:25:19:3d:35:24:81:d7:6f:a1:60:38:7d:2e:53:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:3E:5A:E5:39:BF:F9:0D:9D:B3:E3:0F:C6:AF:BF:60:04:EA:15
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lsc-WuU5v_kNnbPjD8avv2AE6hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:02:85:20:b0:da:aa:94:c8:b8:1a:fa:b4:db:63:13:c1:9e:
66:22:24:e5:e0:e4:6b:9b:81:c3:e9:a4:25:fc:e4:ac:57:95:
3a:17:e3:12:65:74:e0:82:5f:77:cf:14:64:11:08:a1:cb:63:
a0:2b:6a:6e:a0:55:f2:eb:92:c3:6d:8b:62:7a:13:27:0b:46:
1e:b4:fe:95:1d:ad:88:b6:8b:a1:8d:64:4e:03:7e:c2:67:c2:
41:e6:49:5f:bb:34:37:3d:74:e5:2a:e5:b6:c4:62:4d:c8:38:
12:d3:4a:67:b3:5c:29:b1:ea:cf:24:bc:3a:55:e2:72:a0:65:
68:df:42:92:6b:11:e4:e4:39:db:f0:b4:ce:58:16:6d:1c:9d:
b1:a7:eb:f6:1c:e6:c3:fd:d7:8f:18:75:e1:2f:46:bc:8f:46:
51:97:26:06:f0:2d:72:aa:e8:5a:6b:1e:20:5f:bd:09:82:d5:
80:a2:c7:07:a5:a0:d1:28:fe:1b:b3:5d:47:59:d7:58:b6:14:
53:90:79:ba:53:14:d5:56:e3:f8:39:89:6f:bc:ad:6f:e2:44:
5d:8a:86:02:59:70:59:75:4e:aa:89:6f:10:89:cd:f8:c7:9e:
34:89:53:f2:d4:b8:b3:1f:1c:82:17:de:a4:92:26:ea:f4:0b:
9b:a1:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:06 2026 by rpki-client