Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lndm0p0wldFDqdbhzM-OVYFHlEs.roa
File: Lndm0p0wldFDqdbhzM-OVYFHlEs.roa (raw, json)
Hash identifier: 6yVp2qQTeVe2mWxlPoTHG85I5cvD1rf6JumWkqbYfEs=
Subject key identifier: 2E:77:66:D2:9D:30:95:D1:43:A9:D6:E1:CC:CF:8E:55:81:47:94:4B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A037F4D85140355625A5614926B8954506
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lndm0p0wldFDqdbhzM-OVYFHlEs.roa
Signing time: Tue 25 Aug 2026 08:06:28 +0000
ROA not before: Tue 25 Aug 2026 08:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 193.8.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:f4:d8:51:40:35:56:25:a5:61:49:26:b8:95:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 25 08:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e7766d29d3095d143a9d6e1cccf8e558147944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:23:26:ee:56:6f:b6:c9:0e:fb:cf:3d:a2:
8c:ca:7b:f0:27:4b:05:4e:f6:6e:40:77:aa:e9:a5:
5b:43:29:ff:ea:c4:08:3f:77:2f:54:30:82:f0:97:
09:17:73:2e:c3:7f:e6:4e:c4:26:20:80:fd:37:09:
b9:b9:a3:8e:c3:32:cf:01:b0:c9:c2:d8:81:68:46:
b6:de:62:e0:5f:ec:f9:2d:5f:f5:a1:a4:73:aa:12:
1e:c8:11:b9:92:97:df:49:fc:02:cf:38:3e:24:27:
ce:c1:71:88:ec:97:b4:d4:8b:37:e3:c1:4d:16:5d:
68:83:6f:7c:07:88:18:dc:87:33:55:ee:82:74:7c:
32:f0:a1:ce:30:d9:4b:b6:b9:63:59:48:6a:d3:da:
01:43:7a:15:c8:99:c2:c1:7f:97:3b:ce:16:8d:d4:
7a:b2:d0:b2:97:92:ae:ec:c7:28:0e:d1:57:82:bc:
95:12:eb:a0:4a:30:24:44:31:11:7b:f3:91:36:2d:
0a:da:3a:44:21:76:bc:10:f5:24:57:03:a8:dc:11:
82:ad:5f:a1:34:5d:f1:20:30:bd:64:d4:1b:73:3b:
c5:1c:69:96:6b:05:7e:df:e0:fc:d1:cc:b5:5e:8f:
20:b2:14:61:2c:9d:b9:12:59:e8:38:74:d2:97:30:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:66:D2:9D:30:95:D1:43:A9:D6:E1:CC:CF:8E:55:81:47:94:4B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lndm0p0wldFDqdbhzM-OVYFHlEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.113.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1b:fe:8d:aa:48:eb:2f:e3:d6:9e:79:79:77:c7:e7:49:35:
10:d7:54:bd:bc:4b:ab:66:2a:d1:ac:d3:18:3a:f4:d1:3f:7d:
5b:78:11:28:9c:ad:80:28:cd:1f:bd:c5:91:0a:19:76:fb:bb:
48:55:16:f1:e3:39:6a:36:10:c9:eb:16:14:d8:2e:88:43:d5:
eb:e7:4c:04:75:68:e4:99:19:3f:91:59:65:28:7e:3d:7a:cd:
d4:29:10:3b:c8:0b:3b:25:3c:b6:73:23:92:66:34:12:51:a9:
2a:6c:dd:57:52:15:ae:60:85:70:e1:ff:db:3b:a0:b0:f2:0e:
fe:14:df:8d:7e:53:cf:b3:90:ab:cb:3e:53:dd:fa:22:36:a1:
d7:1f:f0:36:30:99:be:91:e2:e8:ec:57:c4:0d:e8:90:32:14:
e9:cd:0c:33:87:b3:40:1c:bc:ce:e6:92:9c:a6:83:1c:98:59:
cd:9e:ec:d9:94:96:62:a5:b0:81:47:0b:6e:d9:38:d9:ed:48:
59:c1:21:15:9f:30:07:98:22:1d:a7:49:09:e4:1f:39:2e:88:
7e:64:fa:78:04:35:25:2e:71:4c:98:be:31:a0:4f:f6:04:62:
4b:31:38:04:09:41:bc:83:14:02:f8:54:ba:41:f8:9f:a5:64:
3a:9e:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:47 2026 by rpki-client