Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/llJY_tMKH9qEG2EGVgJMVtNu4P4.roa
File: llJY_tMKH9qEG2EGVgJMVtNu4P4.roa (raw, json)
Hash identifier: Q4aZamr0Kbs+h6gmlTqUcfEDvUgGQgiHgd9HSFEOpoY=
Subject key identifier: 96:52:58:FE:D3:0A:1F:DA:84:1B:61:06:56:02:4C:56:D3:6E:E0:FE
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019EFA580C5DA3EDD1BF698137EDFBE360D5
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/llJY_tMKH9qEG2EGVgJMVtNu4P4.roa
Signing time: Wed 24 Jun 2026 15:55:34 +0000
ROA not before: Wed 24 Jun 2026 15:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 195.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:58:0c:5d:a3:ed:d1:bf:69:81:37:ed:fb:e3:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jun 24 15:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=965258fed30a1fda841b610656024c56d36ee0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:ad:93:d8:d5:e7:59:56:ad:75:f6:1e:04:
97:c1:23:05:93:8a:51:fd:6d:77:7c:ae:04:75:8b:
f6:96:57:a6:86:e2:74:20:7b:a1:de:c0:83:5e:19:
67:d4:87:0e:3d:94:d1:26:68:4e:7e:51:32:6b:59:
37:a2:85:54:4a:b2:84:ac:30:55:1f:bc:21:75:d4:
ab:19:ac:e3:6e:75:58:62:8e:ea:33:17:b5:8f:49:
ac:83:e2:1e:65:9a:a7:89:0c:9f:a4:ec:4e:dd:36:
07:27:d1:7b:b6:5c:fd:ce:79:8b:5d:54:c9:fe:da:
f4:bd:5f:2c:12:6e:fc:6e:68:11:b4:96:39:cd:1a:
6a:05:b4:69:89:5c:67:20:a4:1a:d4:48:b3:79:7a:
7b:1f:ff:98:7b:fa:91:d5:1f:a4:1f:77:5e:1f:d4:
ab:81:aa:90:9b:66:a2:7c:0f:8b:78:83:d5:97:ac:
38:e7:b3:a4:9d:f6:26:52:a6:74:58:86:a3:ef:89:
62:58:ea:fa:c0:b8:78:66:98:52:67:cd:63:29:15:
c7:09:2e:0e:b7:be:92:2a:69:48:9c:b8:93:18:cd:
0e:56:3b:2d:a8:54:e1:5a:57:d8:93:be:ad:98:3a:
ff:77:28:a1:c2:3c:a8:b4:08:b3:f4:93:28:b3:20:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:58:FE:D3:0A:1F:DA:84:1B:61:06:56:02:4C:56:D3:6E:E0:FE
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/llJY_tMKH9qEG2EGVgJMVtNu4P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:b1:e0:42:9b:d8:de:35:e9:e1:8f:85:6f:cb:fc:5f:9f:
34:1a:51:db:02:7f:37:99:ed:d7:dc:dc:66:30:c6:f0:58:1a:
dd:77:3a:e6:53:80:2b:28:87:0b:89:96:49:a6:46:cc:d9:1e:
8d:6a:3c:9f:71:48:50:89:ef:d8:89:2d:6f:6e:00:e2:0b:93:
a5:5f:4b:a5:41:1b:ca:b1:91:b7:f0:8d:56:2a:b3:80:ec:50:
f7:3d:b5:78:c5:8e:38:db:70:ef:dc:69:56:e5:12:b6:e5:b3:
54:db:f0:1f:d6:6b:41:37:ee:f5:c8:bf:71:55:9b:80:c5:1c:
d5:bd:1b:ff:34:94:5b:bb:6d:d9:04:75:28:6d:b9:85:43:a8:
f2:ae:36:e9:23:ae:6b:52:9f:cf:c0:ae:79:0d:37:a5:fa:c5:
3f:85:b0:24:52:4c:41:10:a6:ef:d2:77:ee:fb:24:f8:21:2b:
b1:4a:a0:f3:66:f2:08:59:90:48:c0:c4:b9:f4:ae:1d:0c:3d:
e2:a5:af:42:74:54:9e:7d:90:9e:b0:b0:ce:0c:d4:21:1e:25:
aa:8d:8c:55:3f:c6:96:cc:b1:ff:a2:df:25:9b:f1:6d:5d:2b:
5a:49:1b:56:2a:ee:9e:84:b9:c3:0c:0f:35:8c:0d:6c:11:22:
02:f3:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:06:48 2026 by rpki-client