Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/lHJI6jEPkBn01XkO68qpjaIbBp4.roa
File: lHJI6jEPkBn01XkO68qpjaIbBp4.roa (raw, json)
Hash identifier: Wr8iSQaD7B+SmF7n+aUj/i7OLCYDdgcmxhreHklOPnw=
Subject key identifier: 94:72:48:EA:31:0F:90:19:F4:D5:79:0E:EB:CA:A9:8D:A2:1B:06:9E
Certificate issuer: /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial: 019F2368CB67CBA29007738F8E9A653E4101
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/lHJI6jEPkBn01XkO68qpjaIbBp4.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3624
IP address blocks: 185.117.213.0/24 maxlen: 24
2a06:8782::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:67:cb:a2:90:07:73:8f:8e:9a:65:3e:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=947248ea310f9019f4d5790eebcaa98da21b069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:0a:89:c6:c5:f8:70:2c:e3:c8:7d:5a:f0:
65:b8:ff:e2:28:a2:1f:b3:4c:db:44:91:92:69:99:
c0:8a:10:0b:7e:4b:e5:66:5b:7e:67:1b:44:05:e0:
0f:f6:67:67:ca:75:1c:5a:6f:18:8e:75:af:58:ee:
6e:f0:d5:01:c7:9e:44:93:ae:5e:87:73:0b:69:b9:
32:1e:17:4e:3f:e6:e3:54:73:ab:b8:71:c0:9c:af:
b5:dc:63:af:f1:a4:58:cb:ce:11:bc:04:2c:ba:b1:
63:11:e2:96:83:ab:f5:1e:5c:d0:ca:9c:79:bf:4e:
ad:78:16:7c:ad:f0:f7:58:38:b1:cb:11:11:a3:d3:
15:10:06:c6:77:46:bd:20:e3:e4:20:6e:fc:ee:d0:
d1:d0:a1:e8:08:48:87:3b:fe:cf:3d:6d:f9:f9:53:
05:58:c1:ac:fb:f5:d2:7d:06:3c:9f:de:25:f7:28:
b3:00:d0:32:cc:a5:0f:a2:07:81:bd:6c:ac:b4:3e:
2f:6a:91:af:b3:66:e8:e1:92:d7:4c:d9:15:e1:e8:
8a:9d:ae:d5:26:3b:44:3a:98:74:32:33:e6:d1:18:
0d:b4:86:a3:b0:a2:3e:e9:1d:5c:a6:9a:f9:56:51:
44:61:26:48:3a:ed:14:6b:d8:cc:b7:ee:74:2a:cc:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:48:EA:31:0F:90:19:F4:D5:79:0E:EB:CA:A9:8D:A2:1B:06:9E
X509v3 Authority Key Identifier:
keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/lHJI6jEPkBn01XkO68qpjaIbBp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.213.0/24
IPv6:
2a06:8782::/32
Signature Algorithm: sha256WithRSAEncryption
3a:11:43:97:bb:13:be:5b:cd:ee:fd:b5:9b:8f:b5:ce:bf:83:
ad:ff:b6:b0:46:99:0f:f2:e2:90:1d:ce:55:4a:8e:7b:38:62:
e7:b7:fa:0c:5a:43:98:ef:60:cd:1c:2a:b6:ed:23:81:a9:e7:
20:3c:62:d3:1c:9e:f4:18:d7:35:a4:70:48:65:62:c9:2f:14:
b6:3f:6b:66:54:d9:d3:ce:cb:c3:2d:6b:88:ec:00:35:f1:7d:
e0:00:12:36:74:13:29:6f:cb:0f:74:c2:25:b6:c1:e9:bc:c0:
49:8c:27:f7:4e:86:e7:ed:a6:47:3c:e6:3f:ae:f7:c7:ca:b8:
cc:bc:74:49:87:71:0b:75:7f:9a:a1:16:85:f8:19:24:f5:d9:
42:61:4a:26:d4:d9:02:e2:db:49:74:35:6b:04:3c:9f:e6:04:
68:4b:72:eb:5d:7c:dd:02:c7:0c:3f:e8:52:b2:54:b0:fc:f3:
76:47:54:ea:e1:d3:19:34:21:4f:8f:f0:92:ed:06:e1:a2:59:
06:fd:7d:f6:7b:7f:72:a1:04:9c:0f:6f:15:dc:c0:36:f3:2a:
7d:a4:61:48:cc:fe:dc:ad:9f:b1:4c:c6:cd:a6:d8:57:09:73:
1f:dc:ac:5c:ed:a1:0e:4c:18:9f:1e:46:11:5f:64:39:f0:05:
b0:b3:db:c1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaMtny6KQB3OPjpplPkEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlN2E5OWU5ZDJkOTVkMzJiN2ZhNWMyNTZhNjJjNGFmZjYw
YjFmMzcwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDcyNDhlYTMxMGY5MDE5ZjRkNTc5MGVlYmNhYTk4ZGEyMWIwNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCQKicbF+HAs48h9WvBluP/iKKIf
s0zbRJGSaZnAihALfkvlZlt+ZxtEBeAP9mdnynUcWm8YjnWvWO5u8NUBx55Ek65e
h3MLabkyHhdOP+bjVHOruHHAnK+13GOv8aRYy84RvAQsurFjEeKWg6v1HlzQypx5
v06teBZ8rfD3WDixyxERo9MVEAbGd0a9IOPkIG787tDR0KHoCEiHO/7PPW35+VMF
WMGs+/XSfQY8n94l9yizANAyzKUPogeBvWystD4vapGvs2bo4ZLXTNkV4eiKna7V
JjtEOph0MjPm0RgNtIajsKI+6R1cppr5VlFEYSZIOu0Ua9jMt+50KswRIwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJRySOoxD5AZ9NV5DuvKqY2iGwaeMB8GA1UdIwQY
MBaAFC56menS2V0yt/pcJWpixK/2Cx83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5xWjZkTFpYVEszLWx3bGFtTEVyX1lMSHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvbEhKSTZqRVBrQm4wMVhrTzY4cXBqYUliQnA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvTG5xWjZkTFpYVEszLWx3bGFtTEVyX1lMSHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXXVMA0E
AgACMAcDBQAqBoeCMA0GCSqGSIb3DQEBCwUAA4IBAQA6EUOXuxO+W83u/bWbj7XO
v4Ot/7awRpkP8uKQHc5VSo57OGLnt/oMWkOY72DNHCq27SOBqecgPGLTHJ70GNc1
pHBIZWLJLxS2P2tmVNnTzsvDLWuI7AA18X3gABI2dBMpb8sPdMIltsHpvMBJjCf3
Tobn7aZHPOY/rvfHyrjMvHRJh3ELdX+aoRaF+Bkk9dlCYUom1NkC4ttJdDVrBDyf
5gRoS3LrXXzdAscMP+hSslSw/PN2R1Tq4dMZNCFPj/CS7QbholkG/X32e39yoQSc
D28V3MA28yp9pGFIzP7crZ+xTMbNpthXCXMf3Kxc7aEOTBifHkYRX2Q58AWws9vB
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:15 2026 by rpki-client