Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LHIeUVA9wsCM7bmZaVgrPaNNziw.roa
File: LHIeUVA9wsCM7bmZaVgrPaNNziw.roa (raw, json)
Hash identifier: NBcTepDFdXpBgX4qPundU4bCWFb04yiAHriwN4bBQ7M=
Subject key identifier: 2C:72:1E:51:50:3D:C2:C0:8C:ED:B9:99:69:58:2B:3D:A3:4D:CE:2C
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 019CD81E071D838268DC2AFD3FE3118DEE1A
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LHIeUVA9wsCM7bmZaVgrPaNNziw.roa
Signing time: Tue 10 Mar 2026 14:19:32 +0000
ROA not before: Tue 10 Mar 2026 14:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44812
IP address blocks: 195.200.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:1e:07:1d:83:82:68:dc:2a:fd:3f:e3:11:8d:ee:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Mar 10 14:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c721e51503dc2c08cedb99969582b3da34dce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:ab:40:45:39:8d:ca:f3:3a:fe:ba:4c:ef:
a4:89:8c:92:0e:41:fe:29:b7:0f:b1:e8:a1:9c:14:
26:54:5d:2a:fb:7f:32:02:4c:b4:d0:aa:28:78:b4:
06:84:6c:5e:ad:a0:3b:07:8d:e2:98:56:6a:06:38:
91:07:16:3d:81:e3:4b:01:c9:53:e2:3f:fb:5c:28:
a5:16:c1:d7:81:9e:11:dd:18:83:3b:92:bd:5b:c3:
8b:6e:84:d4:46:81:c2:e5:3b:cf:dd:7a:bc:18:26:
6c:89:af:cc:f4:e3:00:61:fe:20:dc:b1:b3:8f:fd:
58:f7:2d:cc:a1:7b:ed:15:a9:e9:b3:22:04:b7:ac:
98:a5:aa:03:60:8c:49:dd:f0:d1:2f:12:41:0f:77:
56:13:73:ca:43:59:40:a3:e4:2c:b9:03:cb:29:d7:
0a:a4:14:90:3b:f2:be:64:8c:54:23:32:9e:8a:1e:
2f:74:d6:9c:dd:07:f3:bf:89:0b:28:01:02:f4:ff:
4e:6e:dd:f0:83:97:bd:78:a7:23:af:39:2e:77:a0:
f1:ee:fe:07:9d:28:2f:08:d4:8b:fb:dd:3e:bc:1b:
0e:bd:f4:b0:6c:07:80:b4:6e:a4:be:cc:f3:b4:77:
43:7c:89:b0:dd:d7:62:a9:0e:c8:62:5c:5c:3d:a2:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:1E:51:50:3D:C2:C0:8C:ED:B9:99:69:58:2B:3D:A3:4D:CE:2C
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/LHIeUVA9wsCM7bmZaVgrPaNNziw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ca:bb:41:14:6b:1a:4c:d5:04:d5:f9:6a:63:90:69:2f:60:
02:2a:e6:25:fd:42:85:21:9c:6b:b6:66:e4:6d:f9:6d:05:7b:
31:03:33:d8:31:dc:fc:7f:1d:f8:f8:52:2a:bb:10:d9:6a:74:
ad:e6:05:e1:8b:7f:00:c0:00:3c:c2:ca:0f:6a:6d:0e:6a:04:
5c:a2:ee:58:0f:95:e0:f2:7e:bf:fb:33:91:3f:54:e0:cf:d3:
08:6b:4d:51:ef:17:c3:18:87:68:30:9b:a9:5a:92:21:ee:d2:
c2:43:54:74:29:ba:6f:4c:d0:e8:e8:ba:fd:0e:51:e4:69:d5:
ee:fa:c2:39:c2:54:9a:e1:a3:cf:00:20:b4:39:ed:8e:07:a6:
2e:53:93:38:03:7d:09:14:c0:25:80:19:c8:ed:46:4c:fd:1b:
06:d4:ac:df:e7:a9:7c:7b:a1:99:f6:0b:7b:2d:73:8a:aa:dd:
4f:f9:c9:9c:c4:7f:fe:97:d6:fc:80:13:f6:63:54:cb:8b:ab:
78:33:dc:45:73:05:2c:9f:52:23:2a:18:a6:3a:ab:fd:ea:28:
91:19:2f:e1:24:75:ca:05:77:d4:23:48:1d:7e:8a:e6:72:a1:
44:17:bf:ab:f7:a0:e1:79:f3:54:91:45:94:ea:33:c8:eb:6f:
59:f3:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:09:39 2026 by rpki-client