Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LPg31pzkTWkBFd5VkhWAhJYXkUg.roa
File: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (raw, json)
Hash identifier: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=
Subject key identifier: 2C:F8:37:D6:9C:E4:4D:69:01:15:DE:55:92:15:80:84:96:17:91:48
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019CCE4494AFBA3C47192CA7AC83AA4AF2E1
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LPg31pzkTWkBFd5VkhWAhJYXkUg.roa
Signing time: Sun 08 Mar 2026 16:25:26 +0000
ROA not before: Sun 08 Mar 2026 16:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 185.182.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ce:44:94:af:ba:3c:47:19:2c:a7:ac:83:aa:4a:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 8 16:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf837d69ce44d690115de559215808496179148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:5b:12:4f:ed:04:6b:6f:5c:69:c3:b5:c5:
a0:23:08:45:a4:7e:d7:eb:e3:65:fd:fc:9f:76:ec:
ed:87:46:cc:27:fe:ce:74:59:02:fc:ee:a4:69:a7:
c6:0e:e0:aa:c5:4c:cc:15:a5:08:46:0f:29:ef:63:
83:cb:d6:3b:f6:d9:2a:fe:c3:7c:15:fb:fc:10:a5:
07:73:0c:05:1c:ef:49:19:d8:2c:aa:57:56:23:53:
77:68:74:79:d8:f6:2c:4b:e5:e7:bf:ab:8f:3a:e9:
3d:d5:da:14:e4:bc:fe:b5:13:94:71:9c:c3:13:2e:
85:08:54:4b:71:d9:14:eb:69:11:ab:5e:88:d5:8d:
d2:a6:cc:db:d2:4d:5b:f0:aa:5a:f1:fb:b0:88:87:
f9:a5:96:a6:87:54:0e:27:bc:ac:30:21:a3:4e:72:
0b:98:b6:79:3f:3f:ac:f8:6b:ca:fd:c2:c6:f9:b7:
ee:0c:29:2d:21:8d:24:83:57:51:06:c5:61:73:2a:
c3:18:bc:e2:2f:5f:34:f5:65:42:ee:94:8e:f8:54:
8c:fb:79:78:ce:dd:7b:8d:9d:a8:39:23:42:3e:d8:
c8:a7:2f:08:49:ce:87:b9:16:b5:37:d2:00:e5:99:
49:7a:39:34:b0:d4:c7:d8:79:22:09:33:ea:19:f0:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:37:D6:9C:E4:4D:69:01:15:DE:55:92:15:80:84:96:17:91:48
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LPg31pzkTWkBFd5VkhWAhJYXkUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:eb:c3:e4:43:b6:f1:b4:2e:7b:b0:83:c8:2e:ff:85:55:2f:
b2:59:5d:88:58:07:57:ba:a3:53:8b:a7:7f:22:c7:13:71:01:
7e:a7:54:de:f9:ef:ed:5a:3b:4c:26:bc:65:1a:b8:29:14:60:
55:f5:cc:e2:57:86:c6:c1:c7:28:31:d7:1e:48:00:da:05:70:
0b:58:cc:ab:cb:59:be:3d:75:0c:55:5e:be:3e:4b:1f:6d:52:
73:c4:27:e0:85:4c:cd:88:de:0b:13:2a:6c:25:10:d0:7a:d1:
a4:5e:92:bd:ec:fe:7a:53:a9:fb:01:b2:52:df:d6:a7:26:48:
60:42:70:3b:39:6a:60:f5:9f:90:7e:69:04:bf:e1:d0:f8:5f:
32:a3:d7:43:31:ef:da:8f:fb:0d:da:d3:2d:36:8f:38:e5:bb:
da:6b:08:de:1a:ae:57:0c:a0:49:6b:cd:31:b7:5f:3a:57:af:
7d:04:85:18:1b:13:ad:ca:1d:18:9f:17:ff:fb:68:99:58:09:
0c:43:3e:33:bb:6c:d0:f5:26:83:74:8b:dc:ab:e4:73:f1:dd:
a0:cf:cd:0d:a0:ae:29:ee:75:0f:26:74:7f:7f:77:cf:0f:68:
6a:69:10:b7:71:ea:67:ea:7f:db:3d:98:79:b2:f9:f4:f6:b1:
5b:85:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:56:35 2026 by rpki-client