Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa
File: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (raw, json)
Hash identifier: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=
Subject key identifier: 95:CD:1D:55:55:5D:80:FE:9D:6C:DD:63:FA:98:CC:7B:C9:EF:D2:93
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0597E6B9797A09421FC7C7F921DC39376
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa
Signing time: Mon 31 Aug 2026 20:24:12 +0000
ROA not before: Mon 31 Aug 2026 20:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41765
IP address blocks: 82.138.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:7e:6b:97:97:a0:94:21:fc:7c:7f:92:1d:c3:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Aug 31 20:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95cd1d55555d80fe9d6cdd63fa98cc7bc9efd293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:24:e6:85:73:54:a7:c7:27:11:52:be:a3:
2b:3b:bc:5f:0d:20:85:1b:06:e5:f2:e3:be:87:54:
fe:a8:a7:ba:e9:ed:f5:7a:c4:31:64:a1:72:da:d5:
dc:3a:25:93:e5:f1:32:b6:d3:7c:45:24:3c:75:2c:
fb:02:80:6b:7c:46:9c:97:64:46:6b:ab:38:29:0b:
51:2b:cd:7d:35:27:e4:bf:30:00:49:10:e0:2b:8d:
e4:bd:49:2b:b1:25:35:12:c4:73:57:5c:e2:9f:35:
0b:6c:c5:67:8c:8b:9c:5f:f5:31:e8:86:43:5d:64:
75:4d:26:01:47:a9:c1:1f:de:73:9f:f6:7b:b9:0c:
df:96:41:c8:5d:31:07:e2:84:fc:7c:2a:34:a3:07:
a4:a3:e1:1b:ff:0d:73:ba:96:d8:bb:ab:fc:b8:9e:
27:3d:fc:2e:b9:4e:67:f6:32:6d:dc:ac:96:11:9e:
f4:04:16:4d:a6:92:7d:55:a3:3c:be:45:3a:87:1f:
03:68:c2:af:10:76:a0:dc:a9:7a:7e:06:e1:a0:e5:
a6:59:a1:a8:ed:66:b6:e9:64:d5:99:42:83:75:5e:
29:24:a0:b1:5a:7b:54:0b:a1:fa:c7:04:11:4f:9a:
c0:e8:f4:e0:ca:a5:fe:8a:55:27:80:d7:d2:28:54:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:1D:55:55:5D:80:FE:9D:6C:DD:63:FA:98:CC:7B:C9:EF:D2:93
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.138.64.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:a0:75:c8:5e:92:9e:e2:a8:2f:f7:4c:e9:3e:10:b6:c3:e3:
0e:5f:3b:ff:ff:48:4d:d9:6a:bb:0d:6a:cc:da:53:09:4e:d3:
3d:09:a6:2a:1e:30:6d:7d:30:ff:6a:a9:e7:b5:42:d0:7a:07:
bc:f2:90:05:76:9a:f2:3f:a3:54:d4:3f:2d:26:28:5c:f9:f0:
c7:5f:ee:7c:51:67:fe:db:0b:e1:64:86:ee:86:9e:ca:b3:33:
c0:7c:91:54:30:fa:83:ab:82:63:cc:81:67:6a:a7:d1:97:c7:
60:20:8c:ee:a4:41:96:54:65:ae:81:f9:73:8d:6d:af:7f:53:
39:24:08:b6:30:aa:2b:3d:a3:b4:92:cc:36:af:50:f1:82:00:
66:7b:03:55:8e:25:20:d3:37:f9:54:94:31:64:f3:d7:02:9d:
fa:ff:e8:d1:79:77:f2:fe:06:9a:fa:7a:17:b6:ac:9e:de:f1:
cf:80:f0:85:34:bb:3a:e5:c1:1a:e9:b2:df:18:56:64:24:dd:
32:17:76:3c:d0:26:cf:a9:63:10:cd:c9:83:b3:ee:d7:2a:f4:
b9:31:c5:2d:9e:8c:84:a8:be:2c:14:75:8b:fc:5d:fd:4c:6e:
72:9d:08:3d:0d:0e:a5:58:9a:61:af:29:ca:8c:1e:32:7c:79:
72:f2:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:57 2026 by rpki-client