Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa
File: LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa (raw, json)
Hash identifier: 5qQkG5GA0vL9xdZjlKuNfICEj7ccLwak75srLkqU+GQ=
Subject key identifier: 2C:B1:98:56:C3:9A:4B:5C:E4:52:4C:E4:4B:C4:91:17:B1:86:E0:F0
Certificate issuer: /CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Certificate serial: 019F2369324D1EAE927F1A87106E3B2F8ABB
Authority key identifier: 91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 45.157.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:32:4d:1e:ae:92:7f:1a:87:10:6e:3b:2f:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910aac3373f2fac6cc245f3ac4d1c055e51ecf4b
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb19856c39a4b5ce4524ce44bc49117b186e0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:2d:80:6c:a8:b6:b4:0e:fc:78:ea:7b:8e:
7f:fb:67:6b:cd:58:d3:02:44:d0:bb:a4:27:32:92:
2d:21:fd:e1:1f:da:3d:0a:c8:8b:64:a8:10:32:21:
65:a3:bb:33:80:6e:71:88:89:55:20:b3:fe:f5:7a:
f9:4e:9c:a4:57:c0:24:a0:78:2c:fa:f0:be:ae:80:
2e:d1:cb:0d:28:21:b6:22:3f:2c:7c:86:89:ed:8a:
60:e6:dc:5f:f8:ac:9c:21:bc:6e:b9:4f:fd:db:c8:
95:cb:35:b9:f8:cd:bc:c9:e8:10:aa:3a:5d:58:6f:
d8:29:f6:84:25:7e:e9:40:c0:63:bf:f3:f7:d2:09:
fa:bc:da:1e:40:93:d2:9c:9a:7b:49:4b:e7:b7:1e:
38:9f:1d:0f:4b:18:96:df:0d:c9:be:cb:78:76:4e:
25:91:f9:ca:4c:53:2a:3c:2a:24:55:dc:9a:3b:d6:
85:75:d8:7d:4e:ba:f6:04:a0:58:b9:e3:f4:10:b2:
98:ba:5a:6f:17:52:03:e8:c2:16:c7:6c:30:1d:27:
8d:7e:05:18:c3:3d:a8:66:1f:02:1c:fa:8a:71:00:
f0:a6:4a:64:29:99:ff:27:c0:08:8a:26:93:5f:70:
44:c6:92:ec:6f:c8:d2:5f:03:06:1c:69:5f:d3:a9:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:98:56:C3:9A:4B:5C:E4:52:4C:E4:4B:C4:91:17:B1:86:E0:F0
X509v3 Authority Key Identifier:
keyid:91:0A:AC:33:73:F2:FA:C6:CC:24:5F:3A:C4:D1:C0:55:E5:1E:CF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQqsM3Py-sbMJF86xNHAVeUez0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/LLGYVsOaS1zkUkzkS8SRF7GG4PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/kQqsM3Py-sbMJF86xNHAVeUez0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.7.0/24
Signature Algorithm: sha256WithRSAEncryption
de:d9:ca:dd:39:28:5c:b3:1c:d3:74:84:9e:93:44:4a:47:7d:
ef:62:77:0c:48:98:ee:3d:93:77:5c:f8:b6:60:d6:4b:e7:5f:
6a:68:3d:98:3e:52:58:33:49:1f:04:44:ef:cd:e6:8a:da:3c:
d0:27:76:34:f4:4f:d7:2d:ad:97:68:02:a5:2a:53:1c:c4:b9:
9b:9b:05:76:5c:27:37:fb:23:79:f6:9c:05:60:c0:e7:6f:9c:
2e:5c:63:52:b3:51:b3:ba:0f:ee:ed:77:74:7c:ed:b8:22:02:
d7:17:7e:3b:46:43:0d:4a:13:36:53:1a:c4:71:42:f5:e4:79:
47:e5:11:e1:72:85:78:98:e7:ee:ba:47:dd:9d:5a:f4:1f:23:
66:fc:7b:7f:e7:a3:e3:e1:6b:0a:3a:14:d6:2e:e2:ff:25:98:
9c:98:79:59:c3:63:6a:b5:c3:d1:8d:b7:fd:5e:6a:43:09:11:
d0:78:43:30:4c:0e:66:f9:31:43:95:89:c9:86:c1:b8:1d:4c:
93:a9:76:93:be:0c:7c:0e:08:4d:8f:f6:ec:31:db:bf:91:61:
bd:21:92:e2:ef:36:61:de:bc:01:fe:8a:6b:4f:0b:bb:21:d2:
66:52:65:59:59:fb:ab:18:3c:85:3a:39:09:83:92:56:c1:28:
5c:9f:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client