Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/LXq-oiqft7wRDdw64Jvaiks2PDY.roa
File: LXq-oiqft7wRDdw64Jvaiks2PDY.roa (raw, json)
Hash identifier: kUfgi4D0OUuHWv0dHkOts8Krj7+6E/9PnZ3dk+UjfjE=
Subject key identifier: 2D:7A:BE:A2:2A:9F:B7:BC:11:0D:DC:3A:E0:9B:DA:8A:4B:36:3C:36
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019CD379589FC469D1B9D391FBC484CD351D
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/LXq-oiqft7wRDdw64Jvaiks2PDY.roa
Signing time: Mon 09 Mar 2026 16:41:10 +0000
ROA not before: Mon 09 Mar 2026 16:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 65.87.128.0/20 maxlen: 24
65.87.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:79:58:9f:c4:69:d1:b9:d3:91:fb:c4:84:cd:35:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Mar 9 16:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d7abea22a9fb7bc110ddc3ae09bda8a4b363c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:28:6a:da:49:8e:a7:1b:57:60:78:b9:eb:
38:08:75:29:3e:82:5d:01:36:a4:7e:9d:72:49:e4:
bb:e9:f4:65:ba:41:a3:e9:c8:41:39:2d:96:cd:9e:
e9:71:8e:60:cc:03:fd:0c:fa:93:e8:3a:bc:4b:50:
c7:2e:2d:68:f8:d4:91:ab:d5:0b:97:7d:38:a6:6b:
4f:d9:e7:0c:e6:93:83:54:cf:2d:8d:1d:33:13:1e:
d6:e5:73:ab:1e:da:84:a1:90:74:31:36:e1:14:4a:
86:0f:ae:e9:97:29:06:fb:04:42:7a:2f:e8:61:6f:
e5:2e:bd:5f:e5:13:2b:fd:24:39:5a:18:18:bd:c9:
b6:f2:5f:ac:27:b3:3d:6e:5b:76:97:6a:4e:b0:69:
0c:ed:08:5c:c2:2a:10:6e:67:a6:58:ea:22:42:6b:
be:80:23:f9:20:15:cd:d4:4e:b5:b1:7a:7e:b7:0d:
22:4f:3d:18:c1:4f:38:88:3f:ea:27:1a:28:ba:71:
a4:7d:7d:09:8b:f3:0c:2e:35:c3:2c:5a:24:1f:63:
19:a7:74:ff:9f:80:57:69:a2:9e:1a:df:72:ba:6a:
e2:36:79:08:50:ca:5e:43:69:c0:98:06:19:63:f7:
8f:69:0c:13:0c:a6:31:50:30:0e:39:79:eb:ea:5a:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:BE:A2:2A:9F:B7:BC:11:0D:DC:3A:E0:9B:DA:8A:4B:36:3C:36
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/LXq-oiqft7wRDdw64Jvaiks2PDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.128.0/20
Signature Algorithm: sha256WithRSAEncryption
61:40:32:3d:f4:e7:74:17:4e:e4:ec:93:67:a2:2c:b2:d4:8c:
69:31:91:9b:e5:ff:4a:a9:6c:b6:11:91:7e:32:40:68:fb:94:
13:ee:03:eb:0f:f2:b7:d2:38:97:75:a8:01:27:83:cc:28:4d:
08:89:20:8c:b9:63:da:70:77:e4:45:ad:2f:9f:2e:3e:4b:b2:
f0:3b:91:53:10:80:e7:43:b1:c8:1d:09:94:32:8b:ad:41:db:
5d:b9:3d:ff:0f:6f:c1:5e:6f:2b:9e:41:d6:4e:9f:4f:91:4d:
5d:e8:2c:e3:87:38:99:21:72:e5:df:49:16:eb:13:4a:ca:89:
ca:49:d9:f0:ab:77:6e:f3:d0:1c:42:9b:ba:60:73:70:ed:a6:
64:e5:1f:40:50:42:42:a8:1d:30:99:69:9d:d0:1d:5d:33:86:
73:09:55:d0:62:eb:f5:dc:7a:36:9c:1e:4b:fd:ad:06:c6:c9:
77:bd:21:60:32:87:40:a4:39:51:5e:45:02:21:13:f0:a8:18:
7b:f3:8c:92:61:a8:00:56:57:a1:ea:95:a9:87:3c:dd:31:89:
3b:01:9d:d5:37:e5:aa:13:44:d2:19:89:52:7a:df:0f:5f:e7:
6a:60:6f:14:8a:55:26:e3:dd:3f:23:6a:ce:8c:2d:40:bb:86:
dc:d4:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:14 2026 by rpki-client