Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/luvynRK9zRctpYNuVu7JoC2FPIc.roa
File: luvynRK9zRctpYNuVu7JoC2FPIc.roa (raw, json)
Hash identifier: /8JV6pjISCw5Ecf+vQRoN2O57HDIakLbtZkGh2tuNtw=
Subject key identifier: 96:EB:F2:9D:12:BD:CD:17:2D:A5:83:6E:56:EE:C9:A0:2D:85:3C:87
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F510B5105C643A109A58D0CD6E704B694
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/luvynRK9zRctpYNuVu7JoC2FPIc.roa
Signing time: Sat 11 Jul 2026 11:58:43 +0000
ROA not before: Sat 11 Jul 2026 11:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:51:0b:51:05:c6:43:a1:09:a5:8d:0c:d6:e7:04:b6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 11 11:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ebf29d12bdcd172da5836e56eec9a02d853c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:86:9c:85:37:79:1e:35:31:38:0e:08:4d:
78:49:14:2a:6e:b4:71:11:33:af:0a:0d:06:b8:53:
7f:a7:06:de:a2:1a:6c:97:93:ee:7d:f3:33:f9:3d:
40:87:ea:af:b6:51:63:cc:80:f9:fd:33:c6:25:a6:
76:ca:6a:ff:7a:49:23:b4:05:92:f9:d9:be:7e:ee:
a7:3e:6b:29:2f:11:7b:bd:8e:08:1b:7e:a8:a2:53:
f0:eb:55:a8:17:5e:0a:16:9f:4b:60:e9:14:b8:31:
97:55:5d:c7:fb:6a:3e:31:35:ef:6d:77:05:08:a6:
26:00:b7:f2:22:d7:bc:11:81:bf:07:da:93:85:d7:
b2:4c:c2:a4:08:96:f4:e6:24:53:3b:a4:2a:96:25:
c4:58:0f:27:38:ed:f2:9d:a7:7b:29:7c:d4:aa:71:
a9:48:bc:da:3a:d1:e4:46:62:a5:c7:f4:23:b7:09:
8c:a3:96:4b:d6:81:e7:6c:a4:23:7e:f6:28:7c:3e:
22:0f:44:67:51:7d:e5:a1:1d:08:a2:71:45:e4:e0:
a6:4e:35:03:71:37:a1:8b:79:f5:50:b6:73:06:43:
5c:30:c7:11:b8:c8:98:d4:34:25:ff:1c:ac:d2:93:
0f:82:c6:6e:e5:4f:11:6d:9c:0e:0d:0c:b7:83:07:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:F2:9D:12:BD:CD:17:2D:A5:83:6E:56:EE:C9:A0:2D:85:3C:87
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/luvynRK9zRctpYNuVu7JoC2FPIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4f:86:c6:d6:67:d2:2c:f9:42:00:2b:a0:a2:24:02:dc:a6:
8c:11:08:a5:cc:d4:ca:ae:6d:23:8c:88:8f:59:80:64:d6:9f:
dc:68:02:f0:ff:a0:e7:f3:76:d3:17:03:d2:72:5b:09:e3:ee:
82:b8:f0:3e:06:c4:30:4d:a8:68:2c:99:ad:43:f7:4b:d7:b9:
3a:a9:e0:40:bb:bc:c0:11:92:46:c7:85:9d:ee:1f:4b:da:94:
30:3e:15:e4:1e:97:d8:37:cc:a2:33:91:6c:5c:fd:cc:9a:9f:
c1:20:80:b7:7f:f8:21:5c:0b:44:4f:52:6e:12:dc:5d:43:35:
86:f6:66:59:96:9f:3e:f4:18:0d:de:da:cf:6b:5b:1b:b6:60:
4a:97:37:49:93:22:7e:16:07:c9:0c:0e:07:37:96:6a:b2:dd:
ab:06:de:30:fa:31:bf:09:e3:c4:f7:03:a3:fc:2d:97:45:48:
ea:1f:56:1a:f7:4b:9b:27:a2:69:33:b0:53:ff:57:31:e3:23:
3a:10:54:15:68:80:08:98:9f:da:7c:a8:f3:2e:e7:10:ed:82:
97:0c:b5:da:f3:54:fa:f2:5e:3a:ef:66:16:77:ab:a9:24:1c:
73:22:07:8a:dd:bf:cd:78:07:1b:e7:bf:30:f3:44:4b:9a:61:
62:28:8c:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9RC1EFxkOhCaWNDNbnBLaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwNzExMTE1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmViZjI5ZDEyYmRjZDE3MmRhNTgzNmU1NmVlYzlhMDJkODUzYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZGGnIU3eR41MTgOCE14SRQqbrRx
ETOvCg0GuFN/pwbeohpsl5PuffMz+T1Ah+qvtlFjzID5/TPGJaZ2ymr/ekkjtAWS
+dm+fu6nPmspLxF7vY4IG36oolPw61WoF14KFp9LYOkUuDGXVV3H+2o+MTXvbXcF
CKYmALfyIte8EYG/B9qThdeyTMKkCJb05iRTO6QqliXEWA8nOO3ynad7KXzUqnGp
SLzaOtHkRmKlx/QjtwmMo5ZL1oHnbKQjfvYofD4iD0RnUX3loR0IonFF5OCmTjUD
cTehi3n1ULZzBkNcMMcRuMiY1DQl/xys0pMPgsZu5U8RbZwODQy3gweRRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbr8p0Svc0XLaWDblbuyaAthTyHMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvbHV2eW5SSzl6UmN0cFlOdVZ1N0pvQzJGUEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwajSMA0G
CSqGSIb3DQEBCwUAA4IBAQA9T4bG1mfSLPlCACugoiQC3KaMEQilzNTKrm0jjIiP
WYBk1p/caALw/6Dn83bTFwPSclsJ4+6CuPA+BsQwTahoLJmtQ/dL17k6qeBAu7zA
EZJGx4Wd7h9L2pQwPhXkHpfYN8yiM5FsXP3Mmp/BIIC3f/ghXAtET1JuEtxdQzWG
9mZZlp8+9BgN3trPa1sbtmBKlzdJkyJ+FgfJDA4HN5Zqst2rBt4w+jG/CePE9wOj
/C2XRUjqH1Ya90ubJ6JpM7BT/1cx4yM6EFQVaIAImJ/afKjzLucQ7YKXDLXa81T6
8l4672YWd6upJBxzIgeK3b/NeAcb578w80RLmmFiKIw7
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client