Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lVdGF_smtjS2TJKO4-LgPM2UQ68.roa
File: lVdGF_smtjS2TJKO4-LgPM2UQ68.roa (raw, json)
Hash identifier: PODlANzvqjtbQ7kYZBP4/mKZdgr3aujboqFbWAkNa1o=
Subject key identifier: 95:57:46:17:FB:26:B6:34:B6:4C:92:8E:E3:E2:E0:3C:CD:94:43:AF
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01A0EA8A1B0FC10FAA0F2325087E8965D48D
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lVdGF_smtjS2TJKO4-LgPM2UQ68.roa
Signing time: Tue 29 Sep 2026 00:21:54 +0000
ROA not before: Tue 29 Sep 2026 00:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30247
IP address blocks: 83.223.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:8a:1b:0f:c1:0f:aa:0f:23:25:08:7e:89:65:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Sep 29 00:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95574617fb26b634b64c928ee3e2e03ccd9443af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:af:56:26:ca:7a:1f:71:f8:2a:9d:8c:a9:
a1:c1:41:2a:bf:88:b5:ee:0c:6c:d5:0b:4f:77:76:
bf:1e:93:97:c3:2d:77:34:11:2a:94:93:90:a5:f8:
93:c8:5d:18:fd:c3:16:1d:c1:4e:36:90:8f:d8:66:
39:d9:39:f7:ef:f5:fa:39:07:13:02:6e:d5:18:39:
6c:b8:ae:58:99:f6:56:f9:44:3f:80:6f:71:25:94:
5d:81:aa:5a:a8:f0:d6:2f:a4:1d:6b:f5:9f:e4:3b:
88:b0:d4:f2:c1:28:ed:d9:6d:ac:2b:48:7b:02:8e:
ee:60:79:84:05:98:9d:3c:b9:72:6c:2c:b9:4c:f3:
80:03:46:a3:55:bf:3f:e0:36:1e:9a:68:d3:ca:ca:
21:30:d4:35:00:e4:10:0f:de:71:3f:0b:2d:d3:e8:
39:b3:7f:43:c0:89:03:44:d3:c4:cd:31:a0:80:ce:
2c:07:56:bb:50:fb:c1:9c:87:cd:44:1d:68:39:3a:
11:f5:89:4a:e8:f4:38:69:58:44:32:9c:92:9d:08:
4c:20:b8:ac:ad:5f:6d:16:32:9e:10:68:df:3d:6b:
fe:8c:cf:a6:0c:6a:e1:9c:94:d8:69:c7:f9:af:e9:
8a:98:25:24:d4:63:b2:92:ef:92:dc:1e:11:a9:38:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:46:17:FB:26:B6:34:B6:4C:92:8E:E3:E2:E0:3C:CD:94:43:AF
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lVdGF_smtjS2TJKO4-LgPM2UQ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c4:f4:ca:bd:44:c6:e2:29:ed:f2:c0:2c:54:61:73:9e:1d:
d0:8c:5c:e8:df:3c:ef:ba:51:b3:d8:21:58:f8:98:9e:03:89:
24:1c:41:8f:dc:98:0f:db:c2:e9:c5:33:3b:8e:c6:88:f4:1d:
89:81:f3:09:74:b6:b9:3f:65:65:1a:dd:fd:5c:c6:9b:dd:db:
cb:a4:41:7a:ca:bf:2d:26:4e:bf:1f:84:24:8f:3e:35:04:1c:
4d:b0:0f:c9:d9:2f:1c:91:3c:4d:01:f1:d4:11:f2:b5:1f:01:
69:20:7d:a4:79:b7:4d:9e:20:4a:5a:a3:19:c7:36:0b:d5:ca:
45:0f:c5:62:08:75:73:ba:19:de:95:88:c7:86:36:57:61:7b:
61:d3:52:77:21:2c:32:97:48:1c:9e:b2:37:3c:c4:0a:0f:08:
17:c0:a6:f9:ef:43:9a:66:34:9d:b3:68:79:ef:9d:28:6d:8d:
62:e8:d6:8b:8e:ab:63:9d:48:1d:9c:f2:70:61:e0:4f:b8:01:
90:58:a8:4a:6f:d9:b1:82:65:0a:1e:97:f9:c9:24:c6:c8:f3:
fd:59:48:c2:d1:d0:3e:4b:08:a8:3b:6f:16:c6:9e:e8:5f:11:
80:0a:44:ba:35:95:4c:47:b6:a4:b5:81:90:8e:17:40:14:ad:
18:2e:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:08 2026 by rpki-client