Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LNvVGCuQ-Wo76XPegxtkYyhv_iM.roa
File: LNvVGCuQ-Wo76XPegxtkYyhv_iM.roa (raw, json)
Hash identifier: INL8Q/XXjPPYBRujcfcohz0Sv3xJEO6ICTGU9+YOzks=
Subject key identifier: 2C:DB:D5:18:2B:90:F9:6A:3B:E9:73:DE:83:1B:64:63:28:6F:FE:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019ED682AEAE25F7F9B5A9ABB59052292A63
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LNvVGCuQ-Wo76XPegxtkYyhv_iM.roa
Signing time: Wed 17 Jun 2026 16:55:49 +0000
ROA not before: Wed 17 Jun 2026 16:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152631
IP address blocks: 2.26.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:82:ae:ae:25:f7:f9:b5:a9:ab:b5:90:52:29:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 17 16:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cdbd5182b90f96a3be973de831b6463286ffe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:16:f7:3b:1e:c3:eb:5a:c5:72:d3:51:7c:
b4:8f:fa:4b:82:9a:f0:53:8b:66:0c:40:74:ac:ca:
0b:68:13:14:27:27:93:92:cc:c3:0e:3a:b8:82:34:
11:ac:c6:bb:78:07:95:e5:89:34:a5:9b:51:f7:81:
3b:a1:c6:1b:7e:58:50:13:59:9a:b0:68:05:f5:19:
07:ee:91:16:02:11:ee:48:d4:22:10:42:ab:54:0a:
75:02:6f:34:16:2e:d6:7f:e7:04:e1:26:8d:66:eb:
d9:fd:86:b3:c5:7e:55:9f:78:61:65:2c:b0:37:b7:
e1:5b:23:cb:03:94:76:94:16:a9:bc:41:9c:a2:60:
b5:ef:2f:b3:59:cc:a1:8e:93:6e:f0:bd:4d:41:74:
8d:a4:06:0c:bf:30:4d:63:29:47:64:5d:7c:1e:63:
13:db:a5:4d:dc:75:9a:a1:34:6d:69:6b:65:e3:12:
0e:6f:80:45:f2:c9:fd:2d:8a:9f:bf:5f:30:e3:43:
d6:53:ae:e2:13:3c:b2:69:e4:b5:3b:68:44:28:e2:
a1:1b:e3:7c:37:4e:23:70:5f:06:47:f4:79:70:06:
6f:83:e8:33:5a:8a:0d:b3:c6:88:30:d1:5e:7d:30:
e0:0c:88:c0:f8:67:5a:7a:db:0e:b6:4e:6c:29:0b:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:D5:18:2B:90:F9:6A:3B:E9:73:DE:83:1B:64:63:28:6F:FE:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LNvVGCuQ-Wo76XPegxtkYyhv_iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:99:38:02:1d:77:f8:17:51:7e:7a:02:a3:9b:a6:c9:f8:f0:
e8:29:02:f2:12:1d:09:79:87:ac:13:20:14:a0:a3:89:11:db:
a5:d1:ad:77:fb:aa:fa:44:44:57:92:b8:76:71:62:86:1e:b0:
da:b9:a1:41:38:30:b0:2a:0c:08:c5:4c:e6:a2:b5:af:94:21:
1f:20:2b:2b:d7:30:a9:a8:7a:19:5f:b2:8f:0d:7b:1a:99:2a:
39:6c:32:8d:80:fc:43:4f:00:6c:17:f5:43:60:4b:bb:c3:26:
8f:37:79:61:20:8c:fe:59:af:6a:f5:d5:a1:5b:77:91:27:51:
4d:c5:f6:17:02:9b:ab:82:6d:ee:55:e8:df:6f:0c:7a:94:6f:
31:15:7c:1d:68:e8:ee:7f:7e:24:3e:9b:1a:36:26:95:84:6c:
c0:85:d5:b8:3d:9c:9c:3e:da:12:9e:27:c5:ac:f8:4b:06:b2:
80:17:9c:fd:83:1b:dd:ea:45:1d:8d:91:93:d0:fb:1d:90:34:
68:97:bb:68:c9:dc:db:84:3a:a3:b9:51:be:34:69:25:9f:ef:
61:eb:9d:53:7b:e9:e4:eb:12:f7:55:cb:96:bc:0a:74:90:17:
3a:dd:76:44:92:1c:9d:4d:1b:5e:85:c5:4c:b3:80:24:9f:2a:
79:a7:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:04:34 2026 by rpki-client