Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa
File: Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa (raw, json)
Hash identifier: 0OJI/EzD/n3ipktQrZsvOEjmO2nCJlICQHLxRKAtWw4=
Subject key identifier: 2F:0D:9D:29:C0:FE:04:90:C3:73:0B:EF:FD:99:04:B3:69:EC:CE:13
Certificate issuer: /CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Certificate serial: 019F2368EFCB40A669859B42E6A2ACE93754
Authority key identifier: CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203567
IP address blocks: 109.125.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:cb:40:a6:69:85:9b:42:e6:a2:ac:e9:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f0d9d29c0fe0490c3730beffd9904b369ecce13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:83:b3:e4:07:01:d0:14:ac:4b:a9:1e:41:
22:b2:97:4b:ae:e6:1e:3f:44:22:fd:6f:26:54:ab:
67:9e:50:13:4f:05:08:96:3f:f0:e6:bd:ef:bb:f0:
68:60:be:b2:9b:aa:24:0f:ce:65:20:ee:e3:48:bf:
de:24:2f:eb:c5:e9:39:b3:e7:46:de:18:9c:c2:7c:
14:47:9b:5b:0b:6c:6c:e1:5c:62:83:82:c5:c9:d3:
b6:0a:a6:19:d3:14:81:ea:90:47:56:92:ec:3a:94:
4e:72:3e:d9:00:e3:31:3e:34:73:ec:43:f4:12:6d:
ba:22:42:93:d3:6b:cd:7b:43:d1:1d:77:5b:74:ec:
ac:ad:37:0d:b7:a4:43:f2:53:dc:23:a1:5b:22:4c:
5d:6e:51:ce:d6:1e:75:b6:64:2a:04:15:ea:93:7a:
9a:d3:b0:4a:4a:3f:74:9f:48:a6:2d:5a:e3:16:c5:
71:a0:80:a2:b5:07:16:74:72:4c:d7:0f:ad:c6:bb:
2d:7b:d0:2f:cd:92:a9:19:25:aa:b8:96:c9:c6:8f:
17:b1:3d:97:4d:23:74:b4:4d:45:49:a3:ab:7c:d7:
4f:dd:1f:22:01:38:21:74:10:15:d5:27:24:d8:22:
0b:31:c1:4a:31:36:f9:7d:d6:ad:98:7b:33:12:66:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:9D:29:C0:FE:04:90:C3:73:0B:EF:FD:99:04:B3:69:EC:CE:13
X509v3 Authority Key Identifier:
keyid:CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/Lw2dKcD-BJDDcwvv_ZkEs2nszhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:08:07:cb:44:06:06:1a:40:f1:49:12:18:fd:4d:db:1b:d4:
fd:59:fa:d5:d8:8c:4d:43:f6:63:d1:60:5f:92:43:a1:4a:3c:
a0:16:cd:d2:5f:03:20:c5:e3:e3:55:e4:95:f0:76:bc:9c:79:
4f:53:8e:03:38:65:87:02:09:83:d5:f5:19:ab:64:82:ba:3b:
00:05:6a:a4:d0:84:28:51:8c:55:af:db:ba:df:1e:7c:83:94:
b6:e7:14:87:33:57:82:f8:ac:3a:af:fa:40:93:04:30:e9:ec:
40:e1:c6:d8:fa:ed:7d:e4:cf:3d:df:8b:16:e0:62:2c:c1:ec:
15:23:69:1d:85:2c:35:f5:7b:52:41:66:61:6e:e3:f5:78:d7:
c5:8f:79:10:88:60:bd:e4:01:16:49:c8:88:52:6b:70:cf:c0:
49:67:eb:3f:22:6f:2a:1e:34:ad:8d:16:44:69:31:39:be:3b:
7f:ac:3c:63:25:f8:15:53:5b:cf:32:cb:8e:4b:23:f3:45:ee:
8f:cd:b0:2f:d2:74:41:76:6a:8d:a8:25:3a:07:15:55:c5:6a:
5e:fe:77:d4:ab:cb:ad:21:c9:76:3a:64:b8:8a:63:58:e6:75:
70:98:c8:dd:a8:54:e9:41:d3:84:af:49:bd:3f:a6:a9:9a:69:
ae:d2:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:56:35 2026 by rpki-client