Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/LdnRVTGcUO5Stvhmskc32iutcnE.roa
File: LdnRVTGcUO5Stvhmskc32iutcnE.roa (raw, json)
Hash identifier: EPUZRPaZar98ym68mGtV4ZY5AaOVjRoRsebXdabpj34=
Subject key identifier: 2D:D9:D1:55:31:9C:50:EE:52:B6:F8:66:B2:47:37:DA:2B:AD:72:71
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019FEB07494E4DF3E730FBD6F3476667C8CC
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/LdnRVTGcUO5Stvhmskc32iutcnE.roa
Signing time: Mon 10 Aug 2026 09:35:51 +0000
ROA not before: Mon 10 Aug 2026 09:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 89.255.251.0/24 maxlen: 24
185.28.69.0/24 maxlen: 24
2a00:9d20:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:07:49:4e:4d:f3:e7:30:fb:d6:f3:47:66:67:c8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 10 09:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dd9d155319c50ee52b6f866b24737da2bad7271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:88:04:6d:b9:d4:f5:e3:30:f4:77:ed:cc:
cf:a1:88:7e:b2:0c:02:a3:f6:e3:b1:f6:43:a1:4e:
20:d2:5a:c7:7f:a7:68:d9:5d:30:22:f1:db:99:b7:
86:8b:98:75:f0:b0:06:52:d3:cc:75:79:b9:83:4a:
0c:56:57:a5:7d:98:07:ce:c4:44:b4:61:4f:5e:56:
19:c7:15:a8:cb:03:1b:43:10:3a:ac:c4:20:b0:39:
14:a1:be:0c:4b:c3:af:f3:00:58:40:40:10:de:2f:
65:3c:d0:0d:07:4f:cd:e1:e9:72:88:69:c3:5f:b0:
78:08:b5:a2:87:10:b0:54:1a:13:e4:17:e9:36:ad:
e7:b5:ac:7c:65:da:3a:ba:c3:dd:fa:29:d0:53:a7:
cc:16:aa:fd:69:53:cb:b7:e3:5a:a9:37:c2:d7:10:
04:b9:42:49:d9:84:58:2c:b8:1f:f2:4c:91:18:20:
d4:96:17:09:3e:c0:36:1c:64:22:9f:b2:f5:a2:62:
af:71:bb:e1:f3:4c:2b:0f:bf:e1:f9:d4:a2:01:23:
1d:b9:50:61:36:ba:f5:e2:a1:81:45:56:b5:5e:eb:
e4:c1:3b:cc:78:e1:5a:01:c9:dc:91:28:46:b7:d7:
ae:f3:6c:02:fb:a1:0d:49:b4:4f:43:b3:d2:ac:67:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:D1:55:31:9C:50:EE:52:B6:F8:66:B2:47:37:DA:2B:AD:72:71
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/LdnRVTGcUO5Stvhmskc32iutcnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.251.0/24
185.28.69.0/24
IPv6:
2a00:9d20:49::/48
Signature Algorithm: sha256WithRSAEncryption
a7:36:af:cc:bc:b8:e6:74:26:3e:79:59:83:57:ef:05:76:00:
b2:63:df:70:23:c3:4c:e9:3e:ec:b0:e6:0d:37:18:64:84:f7:
82:e0:79:29:fa:81:a8:c8:7d:ca:c4:92:bc:cf:f9:47:0f:a5:
29:12:99:16:9e:19:ba:25:61:c9:b6:87:c3:a3:1f:73:30:04:
36:b5:58:39:72:2c:ec:7e:84:78:82:57:a8:04:de:2d:e6:bc:
67:ee:47:24:82:ff:a6:2c:50:36:8a:97:27:77:86:7c:d8:05:
06:f7:5d:c3:39:23:e8:a4:7d:a2:a5:b0:27:d2:3c:dd:95:63:
74:66:90:59:54:25:bb:9a:d6:e6:2e:f6:d7:1b:b6:a7:22:43:
55:86:bb:3d:67:60:02:fe:ed:38:d4:e5:cc:fd:b3:04:db:9b:
55:a8:4a:d6:fb:c0:7e:39:c1:54:ee:2a:ce:42:dc:d0:32:8b:
6e:18:01:d9:02:39:de:85:ad:16:a6:92:74:93:6d:fa:5a:79:
51:74:f3:7d:03:12:cb:9f:1d:73:d7:6b:10:fd:29:ec:68:f0:
9a:f6:7e:b1:b3:cf:37:9a:a1:8b:44:3b:bb:74:93:dc:a1:7d:
cb:4b:e4:ce:8b:7b:84:39:5c:b3:88:29:36:97:d5:a0:a3:1d:
84:f0:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:35 2026 by rpki-client