Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/lt--SRcLVtMBAyUSEaED30Ld_II.roa
File: lt--SRcLVtMBAyUSEaED30Ld_II.roa (raw, json)
Hash identifier: fD6QaGq2/0miHmRj75lRsimQs6FUvOJWMmVCig6mCWU=
Subject key identifier: 96:DF:BE:49:17:0B:56:D3:01:03:25:12:11:A1:03:DF:42:DD:FC:82
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A000644ABECDC0B4C9D8F313B99CEF2700
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/lt--SRcLVtMBAyUSEaED30Ld_II.roa
Signing time: Fri 14 Aug 2026 13:09:27 +0000
ROA not before: Fri 14 Aug 2026 13:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218952
IP address blocks: 187.13.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:64:4a:be:cd:c0:b4:c9:d8:f3:13:b9:9c:ef:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 14 13:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96dfbe49170b56d30103251211a103df42ddfc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:39:95:f0:dd:4f:91:75:4b:a1:45:27:4b:
4e:52:4b:11:f5:12:1d:5a:a1:77:a8:6a:77:14:99:
5e:ff:5d:8b:73:8c:a3:4a:d6:c8:05:09:cd:03:12:
13:fe:21:42:33:21:80:24:5b:60:d5:1a:93:05:91:
7f:a9:83:8f:01:0a:08:a9:7b:7d:a4:a1:36:09:26:
b8:53:35:43:ae:a7:14:bc:d5:34:d9:ee:63:e9:18:
f7:3b:6b:e6:02:27:4f:bd:9f:72:33:e9:8d:27:bb:
be:a9:c1:04:c1:38:c5:da:81:c1:52:ed:61:6c:54:
5d:b5:d1:26:e8:cb:5b:a8:f9:75:d6:02:40:1d:4d:
fd:da:46:32:87:ae:c7:98:ca:0d:1a:11:ba:bc:af:
e9:65:ab:e8:76:ea:85:8a:4e:2f:54:c3:4e:bb:5a:
c1:fa:ba:67:04:9d:bd:71:8a:6b:46:57:f0:54:ef:
55:b9:ea:54:82:71:60:5f:73:e3:f5:cc:41:6b:1b:
b2:71:f4:26:3a:44:7d:de:ad:0d:5a:b1:88:79:44:
8a:19:c2:22:ff:94:78:43:04:ea:08:93:93:4e:53:
ff:a0:21:ee:57:c8:84:e5:c0:8a:68:dc:82:15:a4:
1a:34:33:4d:be:ee:cd:82:7a:9c:89:e1:a5:73:6c:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:BE:49:17:0B:56:D3:01:03:25:12:11:A1:03:DF:42:DD:FC:82
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/lt--SRcLVtMBAyUSEaED30Ld_II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1a:fd:91:cb:24:b1:d9:54:a3:e2:c4:30:79:d2:8e:31:53:
18:26:15:37:80:e7:57:60:f7:83:23:5a:26:56:69:74:ac:4b:
cc:a3:3b:ac:f5:a7:77:99:25:32:57:6f:77:dd:16:c8:d0:95:
1f:d7:9a:d6:1c:88:9c:bc:f0:86:9b:d9:86:1b:75:be:6e:33:
f4:e7:39:65:67:11:f2:70:44:32:cd:49:b7:fd:23:0c:83:9f:
30:91:76:c0:a7:e9:53:9d:8c:6a:fa:fb:4d:e8:69:06:bc:f5:
ae:d1:79:ce:3a:d4:64:11:8b:5f:9d:a8:b8:f9:b0:df:dc:09:
d2:25:aa:93:46:2d:9b:71:1d:5d:05:b1:ce:17:0a:9b:ca:90:
7b:cf:31:1c:52:dd:56:99:8d:de:26:be:d1:a0:75:0d:d5:4d:
38:19:a8:b1:6f:dc:78:8b:00:65:89:69:e8:b8:c6:d0:1d:59:
78:05:de:bc:84:62:98:b0:ce:4d:66:4a:c3:3d:28:6e:a2:58:
e2:94:01:2b:ad:04:ca:70:79:54:11:b2:2b:2c:29:b8:21:ef:
79:66:51:f2:7a:bd:38:d5:76:18:8c:ab:64:bf:ff:a4:dd:66:
f6:dc:f6:47:7d:51:3f:eb:d5:43:e7:d6:f3:4d:92:9b:68:e5:
50:64:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:19 2026 by rpki-client