Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/LCOG7rRmZF-WFd19tuqfjxjQ9fg.roa
File: LCOG7rRmZF-WFd19tuqfjxjQ9fg.roa (raw, json)
Hash identifier: cNq6diUEXkiKDTfphkgeeXm5+IhK4woGyGck3EspxMc=
Subject key identifier: 2C:23:86:EE:B4:66:64:5F:96:15:DD:7D:B6:EA:9F:8F:18:D0:F5:F8
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019DAF8426B27EA128837DC096D70B83858B
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/LCOG7rRmZF-WFd19tuqfjxjQ9fg.roa
Signing time: Tue 21 Apr 2026 10:09:26 +0000
ROA not before: Tue 21 Apr 2026 10:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48109
IP address blocks: 89.31.192.0/21 maxlen: 21
89.31.192.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
89.31.197.0/24 maxlen: 24
89.31.198.0/24 maxlen: 24
89.31.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:84:26:b2:7e:a1:28:83:7d:c0:96:d7:0b:83:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Apr 21 10:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c2386eeb466645f9615dd7db6ea9f8f18d0f5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:be:be:ba:af:66:a4:1b:9f:7c:80:de:0b:
8f:e4:10:79:fe:45:17:10:31:1e:58:2b:a8:b0:08:
68:14:90:5f:fc:0c:c3:dc:a9:7b:c3:dd:0c:b5:f6:
48:f6:c9:d7:d7:6d:24:f2:45:97:5f:60:6a:da:ab:
66:06:87:17:ff:95:03:26:8b:de:40:e4:d7:fb:33:
b6:9d:30:d1:e1:cf:8d:6b:57:51:a7:07:7d:0f:56:
d2:c6:ac:73:94:7c:dd:64:89:26:8f:22:15:43:9c:
16:59:50:2f:67:6e:d1:42:05:03:c0:be:8a:e6:1a:
9b:fc:b6:c0:6a:6a:5e:05:16:30:0a:b6:33:a5:14:
49:9c:0a:95:c2:98:89:57:43:96:06:c0:bb:ec:dc:
7e:04:1d:29:8d:cc:fa:b7:5d:03:23:fa:7c:16:e4:
4d:7e:9c:c6:55:d0:25:d8:40:b1:0a:17:49:25:6d:
93:52:33:fe:e0:35:ff:5e:71:e2:35:52:46:9e:8a:
c1:e4:33:d9:e0:40:6f:a6:bc:5e:42:0f:e5:46:25:
c7:db:9c:02:6e:ba:ee:94:79:2b:96:a3:c1:b7:6d:
d7:19:e1:de:85:d6:f7:b9:bf:0f:1b:e8:bc:af:f8:
4d:f1:88:f1:f9:c1:1f:94:e3:32:95:50:89:fc:a2:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:86:EE:B4:66:64:5F:96:15:DD:7D:B6:EA:9F:8F:18:D0:F5:F8
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/LCOG7rRmZF-WFd19tuqfjxjQ9fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:aa:0e:2e:df:c9:fb:2f:41:44:be:e4:6e:c6:e2:19:e7:79:
2e:cb:db:77:5b:99:63:9b:ab:04:01:84:98:51:f8:03:78:61:
88:93:b5:20:98:17:10:98:9e:6e:35:34:9c:ee:0b:64:8a:15:
aa:3c:54:a7:01:7d:d6:44:35:81:dd:67:4e:84:64:01:a9:f6:
a9:2f:ab:51:c3:2d:b9:22:81:89:2a:17:f6:73:e5:f8:d8:02:
6c:c1:a9:44:91:85:7f:6c:92:e6:6f:c0:50:e2:43:6b:18:ee:
97:68:1b:59:22:4e:07:e7:e5:a1:1e:6c:7e:c1:8b:6f:16:0f:
74:6b:dd:57:ee:cf:b0:40:e5:d8:10:08:21:1a:57:63:da:4b:
83:dd:8a:2f:cc:80:94:d4:3f:46:ae:62:43:be:9d:5f:b2:33:
18:2a:05:0a:04:e6:e0:50:e9:c0:68:ab:4d:a8:91:67:ee:49:
8e:2b:c4:91:a6:e6:01:50:28:3e:b6:d3:5d:b7:c8:9d:4c:2c:
be:93:45:18:7f:ee:12:c6:de:23:fc:8a:12:f1:c4:71:57:69:
58:03:28:c4:da:6e:44:78:de:ab:f6:c6:71:b3:1f:e6:7a:24:
6a:2b:ff:6d:89:1e:67:3b:16:58:c3:0d:1d:0c:2b:90:d8:a4:
0d:9b:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:38:56 2026 by rpki-client