Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/LPKZHo6MzilyDcIWroDw7KuE26w.roa
File: LPKZHo6MzilyDcIWroDw7KuE26w.roa (raw, json)
Hash identifier: 6ECwi37v8DXacNNB1z8Dc8Ge455dunxRMIIW2ER4Abg=
Subject key identifier: 2C:F2:99:1E:8E:8C:CE:29:72:0D:C2:16:AE:80:F0:EC:AB:84:DB:AC
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F23693B8DF635AE3B7AF3A87773FF3194
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/LPKZHo6MzilyDcIWroDw7KuE26w.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3b:8d:f6:35:ae:3b:7a:f3:a8:77:73:ff:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf2991e8e8cce29720dc216ae80f0ecab84dbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:1b:32:c7:c5:98:54:ea:ad:d0:94:4c:ef:
7c:f7:72:18:c0:06:5a:36:d7:34:87:0a:32:e9:56:
c6:29:76:d2:5e:e2:cf:31:4e:88:a0:be:b9:44:8d:
8d:c4:ed:ef:9b:80:45:d4:d2:1c:4e:00:25:88:fa:
bc:4b:6f:62:a2:dd:b6:91:e2:c8:9e:e1:d4:8e:da:
12:dc:19:35:86:0f:83:7d:e9:48:71:74:01:03:76:
4e:4b:6a:7e:16:9e:f2:2f:a5:95:cd:9f:b7:f9:5b:
e6:7f:93:b3:a6:19:43:b3:4f:24:f2:67:28:49:a7:
1a:07:d5:aa:f2:ef:6d:6f:09:54:be:74:00:5f:04:
02:b2:82:e6:dd:16:77:21:16:55:06:41:f1:d3:62:
fe:98:3a:1c:a4:14:fb:59:7a:14:7d:a2:bc:09:92:
d4:72:ef:f1:c5:94:fb:8e:68:8e:6b:bf:cf:59:b0:
24:b7:2a:87:ca:8f:a3:f3:b8:c4:a6:12:77:d9:66:
38:ad:81:16:3f:1b:1a:46:0b:07:98:38:de:96:b1:
cd:e5:96:4a:98:7b:bc:d6:77:b5:e6:bf:4d:b3:22:
10:54:d5:56:71:dc:bb:3f:38:11:8a:cd:16:3e:f8:
9d:5a:52:d8:e5:0a:c2:0d:40:07:93:b5:c0:7e:5e:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:99:1E:8E:8C:CE:29:72:0D:C2:16:AE:80:F0:EC:AB:84:DB:AC
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/LPKZHo6MzilyDcIWroDw7KuE26w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:b9:54:89:5f:65:4c:19:fd:c6:1c:d6:4a:93:08:fa:85:43:
25:5a:98:a6:15:d1:ec:88:eb:24:18:4b:9e:f8:a8:fc:f4:7c:
fb:30:a1:d4:2f:a8:43:74:06:aa:75:02:66:e3:a6:3c:ea:37:
61:65:33:bc:a9:94:1f:5c:24:da:65:53:04:83:1f:c2:9d:e3:
dc:28:d2:91:9b:c7:96:5a:45:b8:3b:50:29:1d:e0:79:82:25:
24:65:3f:2a:6c:de:9c:84:a7:d3:fa:20:1c:3a:26:62:db:15:
66:af:a7:fd:73:03:a7:27:51:c8:00:ab:70:bb:cc:53:2f:86:
24:d2:a3:8f:52:b8:1a:55:1f:d8:a5:74:05:24:93:e0:42:98:
f9:a6:68:09:ab:59:ef:3c:df:2d:c9:8f:b4:36:1f:8e:00:43:
a9:7c:93:08:55:bc:53:1b:51:b6:b3:fb:3c:73:51:78:4b:9c:
28:46:a7:8d:d5:67:9b:8b:6d:98:4d:9d:9e:67:d4:4d:e0:f4:
d1:e3:db:73:6f:06:a5:9d:7b:11:84:58:af:d8:fa:64:d3:64:
b7:b8:25:83:d7:70:3a:12:ff:55:c8:2f:ae:96:4b:92:bf:f7:
db:83:ff:9e:f0:ba:d5:8a:28:65:49:8b:11:78:45:49:96:07:
4e:f3:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:28:56 2026 by rpki-client