Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LGHjgqjqLoivhJWXviaJyuFRJ5c.roa
File: LGHjgqjqLoivhJWXviaJyuFRJ5c.roa (raw, json)
Hash identifier: m7Ft5KtRo1XEL9mN7nn0D80sqQa8tT7qZTCkhsWkJrA=
Subject key identifier: 2C:61:E3:82:A8:EA:2E:88:AF:84:95:97:BE:26:89:CA:E1:51:27:97
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019FF126AC31AA61E6AAA33040DDCB8A41D1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LGHjgqjqLoivhJWXviaJyuFRJ5c.roa
Signing time: Tue 11 Aug 2026 14:07:51 +0000
ROA not before: Tue 11 Aug 2026 14:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200181
IP address blocks: 45.43.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:26:ac:31:aa:61:e6:aa:a3:30:40:dd:cb:8a:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 11 14:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c61e382a8ea2e88af849597be2689cae1512797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:2e:8e:81:7d:b3:5d:8e:66:ac:35:e0:c7:
7c:fe:52:68:c6:4d:e2:4c:aa:86:ca:ca:5b:b0:70:
97:cd:4e:c6:86:76:18:ba:e4:95:10:40:a7:97:12:
f1:f0:64:16:37:a1:8c:22:65:7c:cd:70:75:fa:18:
17:5a:60:2f:26:08:43:04:9c:30:d2:fa:a9:10:fa:
c6:67:2c:da:2d:84:3f:6d:cf:54:9a:6d:c3:96:35:
29:06:7b:52:dd:0d:e6:39:ef:85:a3:39:a5:6a:a5:
f5:73:48:9c:b7:9a:28:1c:94:41:9c:6f:14:a3:7c:
65:22:ec:31:95:e5:1f:f7:af:0d:f3:02:16:fb:87:
55:ac:dc:ea:59:7d:29:bd:99:51:8e:bc:ce:fc:2f:
61:41:4e:00:c1:7e:06:33:4a:de:b9:0d:e3:37:48:
98:7d:37:8e:78:60:7c:91:05:df:fd:c5:d0:76:9e:
b7:56:0f:59:75:a5:bb:8b:42:70:e2:df:87:ba:ad:
d7:4d:8d:49:fb:d8:19:33:10:5c:33:f7:cf:85:fc:
28:1b:e7:4b:20:1f:0a:18:95:14:fa:8d:8c:9b:80:
33:b9:fe:35:00:b3:bd:91:3a:87:f4:e7:9b:2b:d7:
c1:f7:b0:4f:b2:45:0c:49:85:31:d5:2d:fc:59:00:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:E3:82:A8:EA:2E:88:AF:84:95:97:BE:26:89:CA:E1:51:27:97
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LGHjgqjqLoivhJWXviaJyuFRJ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.74.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7d:d3:a7:58:da:2e:96:b0:f1:6e:2a:f9:f4:aa:cf:f8:51:
2f:9c:84:be:a4:fb:72:a4:63:0e:ca:cc:c7:1b:4e:29:25:00:
51:6c:f4:dc:7b:52:af:92:a6:dc:9e:2f:74:5c:b4:5b:f4:98:
38:1c:29:91:6a:95:db:56:e5:34:3d:fd:c1:fb:75:3f:ae:bb:
fd:58:97:32:8c:32:a0:21:de:b1:3e:b4:24:d1:9a:59:06:72:
1d:4e:98:af:14:5a:ab:31:b9:64:af:7d:ea:b9:b4:9e:3f:2a:
d8:e5:5d:95:b0:0a:8f:17:ad:f0:c1:b2:67:4d:81:8e:92:91:
23:9d:38:b4:44:03:79:05:80:f5:28:0b:22:6f:a6:aa:67:b3:
e1:a2:d2:37:13:fa:46:a2:35:2b:13:85:c2:6d:17:c8:17:24:
dc:27:85:6f:75:92:75:5e:65:f2:5c:79:31:cb:18:a8:09:a1:
1f:18:c7:b1:f4:57:ec:81:85:f6:aa:ed:07:d4:16:6a:f4:6c:
0e:a0:eb:d7:d6:a0:d3:a7:19:97:18:6b:84:57:d7:41:71:d8:
39:aa:c4:85:dc:c7:ed:bb:7e:dd:c4:03:c5:ee:7b:a2:dc:b1:
33:10:8d:61:60:a4:f5:c7:49:34:36:a1:17:f1:aa:1b:74:b9:
1a:68:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:40:48 2026 by rpki-client