Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LCybd15yHpcj2zkIju0JSWqlx1I.roa
File: LCybd15yHpcj2zkIju0JSWqlx1I.roa (raw, json)
Hash identifier: OcoWeYTZwhrWPQ8Or5v8rVePJZS88fT4pYELiK+bvQ8=
Subject key identifier: 2C:2C:9B:77:5E:72:1E:97:23:DB:39:08:8E:ED:09:49:6A:A5:C7:52
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019F43049DAD1AE18BE6ABCC92C936635501
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LCybd15yHpcj2zkIju0JSWqlx1I.roa
Signing time: Wed 08 Jul 2026 18:36:43 +0000
ROA not before: Wed 08 Jul 2026 18:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 94.177.27.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:04:9d:ad:1a:e1:8b:e6:ab:cc:92:c9:36:63:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 8 18:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c2c9b775e721e9723db39088eed09496aa5c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:1d:6d:d5:7c:72:31:fc:df:60:db:13:7f:
59:d0:cb:6a:52:0b:de:f2:b3:d2:e3:75:f3:93:c3:
62:05:5e:f4:71:ea:b9:6f:f2:9d:13:fe:ac:b8:6a:
fa:c7:a1:3d:a9:da:2b:03:0a:01:8d:bd:09:60:ba:
02:3c:6e:f5:7f:d0:fc:60:9b:9e:59:1d:30:e0:91:
58:3d:12:29:12:b7:c3:93:23:be:9f:57:57:c5:e5:
f3:56:ad:ea:3f:86:4c:7c:c6:57:dd:76:f8:2b:a6:
cf:2b:9d:3c:ff:88:15:65:8b:a9:57:37:17:32:97:
26:94:69:34:2f:24:f5:2d:fc:dc:15:5a:d5:23:0b:
f8:85:e5:0b:20:e1:0c:15:7a:e6:3e:4e:df:04:72:
c2:86:62:2c:3f:dd:cc:ad:5b:be:1a:98:16:7c:14:
37:58:46:ab:39:9f:b6:e6:a7:b9:2b:b2:52:a7:e1:
1f:e1:00:13:d0:eb:a7:fb:70:db:18:a7:d8:62:ed:
80:be:30:98:5a:bd:3f:60:26:da:12:e0:59:16:01:
01:9a:23:ec:f2:f9:fd:d4:79:b2:c5:61:fb:f1:7e:
60:c1:4b:6b:3e:8a:7e:49:95:8c:fe:11:a9:75:4d:
a6:91:8b:a3:08:48:6c:b5:cd:86:4a:c2:28:ab:bd:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:9B:77:5E:72:1E:97:23:DB:39:08:8E:ED:09:49:6A:A5:C7:52
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LCybd15yHpcj2zkIju0JSWqlx1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.27.0/24
176.223.181.0/24
Signature Algorithm: sha256WithRSAEncryption
98:da:5b:fd:96:9a:83:a2:ad:0a:c5:e3:2e:2b:8d:c0:82:66:
13:eb:22:04:c2:b7:bb:46:8c:50:51:3b:76:62:85:57:b1:2d:
b7:eb:0b:2d:a3:32:a2:f0:4c:6f:63:29:30:7d:07:1c:dc:b2:
cf:53:db:17:05:08:76:fd:2f:7f:32:a4:de:bf:5e:52:b3:9c:
24:34:87:df:e9:8b:63:f9:35:bc:59:c1:2e:30:de:e1:62:71:
22:31:27:13:49:45:29:75:7b:8b:a6:4b:0c:a9:90:88:fe:f6:
18:19:7c:6f:b0:94:fa:ff:d8:de:80:03:5a:2e:fc:5d:f2:78:
d5:13:02:16:dd:95:2d:3f:61:e3:4c:3a:d8:6e:6a:22:79:76:
c8:04:23:9a:25:36:94:8f:2f:8f:c0:bb:b0:2d:07:30:8c:e1:
1b:41:2b:e9:fa:09:34:54:1e:b8:f8:29:a0:36:23:cb:2a:b5:
ca:df:4a:29:b1:a1:8d:af:b9:08:aa:09:5f:7a:48:56:78:a8:
e5:38:a9:68:df:08:94:d1:7e:65:9a:6f:10:f4:e0:46:10:6d:
24:d6:3e:c9:9d:85:4d:dc:4d:2d:97:3f:b2:71:97:a9:55:b1:
83:a0:b2:c4:91:1f:54:97:ae:3b:0d:8b:7d:33:73:e8:70:52:
c3:eb:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 15:25:44 2026 by rpki-client