Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa
File: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (raw, json)
Hash identifier: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=
Subject key identifier: 2E:1E:26:D7:27:EB:85:B0:3D:3A:12:94:BF:DB:28:31:1E:D2:76:24
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019F26E13E75DDBD798D0C8A4698FCA34D92
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa
Signing time: Fri 03 Jul 2026 07:28:43 +0000
ROA not before: Fri 03 Jul 2026 07:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.74.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:e1:3e:75:dd:bd:79:8d:0c:8a:46:98:fc:a3:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 3 07:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e1e26d727eb85b03d3a1294bfdb28311ed27624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:2e:41:48:fb:78:62:10:c0:ac:c8:e5:db:
47:bf:66:f5:2b:a1:3e:72:d4:49:d9:d0:e3:49:ee:
f3:8f:70:2b:20:33:d0:b9:73:02:ac:66:3f:b2:14:
53:7e:b3:77:69:bc:8d:46:e2:db:46:54:18:dd:54:
bf:01:95:bb:d6:c4:c2:65:50:1a:19:85:25:3e:e4:
8b:66:3a:14:cc:8a:88:b7:5b:b4:01:2d:22:2c:99:
98:03:6e:7b:94:5b:98:c8:1a:c8:68:ef:44:f4:1f:
46:2a:d9:70:d8:e8:87:1a:38:8a:1f:36:0c:f5:98:
d0:e1:c8:9d:a2:c8:bd:d7:b2:79:62:21:46:95:ea:
36:e8:8c:fe:8b:13:ec:4b:d1:0b:c4:94:e7:05:77:
85:72:da:3c:58:44:7c:9e:9a:f2:6a:d1:78:fd:34:
4a:54:e8:76:bc:0b:5c:88:8c:a2:4e:5d:a1:09:99:
b0:05:f1:7f:be:1c:24:f2:23:2f:f3:01:83:8f:b3:
68:13:6b:40:38:0e:c7:e8:82:f6:1b:8b:c7:53:b4:
4b:57:db:96:e5:53:9b:eb:2e:d6:c8:06:c4:fe:94:
1d:67:cd:c7:62:85:d5:af:e2:b1:f2:76:5a:02:5e:
2c:c0:c5:6a:20:26:f0:d5:27:31:5a:bc:81:97:5e:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:26:D7:27:EB:85:B0:3D:3A:12:94:BF:DB:28:31:1E:D2:76:24
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:0b:b7:b1:18:6e:bd:7c:41:f6:88:d1:35:0a:65:50:b9:18:
e6:4a:10:8b:2e:1a:88:05:e0:1e:ec:fa:79:03:d6:d4:31:cf:
9c:5a:a2:d1:b8:b4:2e:50:2a:59:cb:81:b8:1c:6d:7b:ec:71:
d3:3c:ed:16:d0:6e:05:66:30:d4:0d:a2:cb:03:b7:14:21:29:
ac:89:aa:26:81:13:23:56:09:b4:a5:b7:20:5d:37:6e:4b:52:
06:c9:5b:1e:fd:98:f7:01:af:38:37:b5:d9:fd:cc:e4:dc:bb:
5f:4f:1c:9a:4f:13:f9:52:65:94:90:c4:f0:34:73:f0:0e:76:
9b:0a:b1:22:c1:8a:a5:5b:a1:1c:05:3d:23:56:60:a5:ed:9e:
61:19:42:37:61:2c:2e:72:5d:74:98:dd:69:0f:5f:ed:28:ce:
38:48:11:26:d6:07:b6:95:07:a5:60:53:5e:85:d8:88:f1:b6:
1b:3d:f2:85:95:32:bc:ae:cc:8c:c7:0a:ba:f3:4c:b7:51:58:
54:c6:5c:45:78:e2:58:cc:21:2f:4b:41:a5:95:71:3d:89:62:
0f:67:2b:5a:03:d5:87:60:82:74:1b:d0:00:c6:2d:57:9e:80:
bd:1e:c3:b3:08:22:50:b0:f0:17:b9:f5:17:d7:90:c3:3d:97:
24:e3:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client