Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa
File: LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa (raw, json)
Hash identifier: 7h9ibuh5D9RPhhsbZk+iDJYxN9/RBYhyuSLUZM4uQAs=
Subject key identifier: 2D:21:A5:07:E6:A3:27:31:4B:0A:7E:27:D8:82:C1:C7:34:CC:14:28
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A0F9904FA72C395858C7D9072ACD43FC81
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa
Signing time: Thu 01 Oct 2026 22:22:59 +0000
ROA not before: Thu 01 Oct 2026 22:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13287
IP address blocks: 89.28.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:90:4f:a7:2c:39:58:58:c7:d9:07:2a:cd:43:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 1 22:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d21a507e6a327314b0a7e27d882c1c734cc1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:22:13:18:f2:a6:a1:54:24:97:30:42:d2:
c5:bf:25:3f:48:b1:8f:df:8c:1a:92:1f:31:c4:e9:
4a:d3:37:92:cf:0f:85:c9:63:21:bb:c9:7e:96:e2:
fe:82:ba:46:f1:9f:d7:9c:53:97:16:e0:30:27:bd:
18:3e:3b:1b:21:1f:5f:98:49:1c:50:51:ae:73:75:
ae:c0:79:61:91:64:36:d8:c5:d2:37:15:56:ff:ee:
86:45:a9:11:31:e2:12:f4:ac:9d:c7:1e:dd:e7:8b:
ba:83:26:91:c2:ff:4f:0d:ec:a2:d8:ce:3a:86:05:
a7:5d:8b:36:e9:65:f4:73:12:50:93:17:03:4e:b2:
28:f9:57:73:71:6c:41:cd:e2:7b:09:89:8f:bc:56:
8f:e3:34:c1:20:3f:f9:46:41:80:82:25:21:c2:06:
8c:b8:f6:e2:dd:bb:e3:2c:3f:f6:85:fb:f0:e9:85:
1d:c7:bc:cc:01:29:ed:3e:ff:b0:c8:be:6c:9a:5f:
d5:75:40:b9:5f:9d:6b:f2:a7:16:e7:c8:85:61:bc:
ed:12:23:66:0c:3e:37:a1:83:ef:5f:d2:04:1a:82:
16:b3:39:22:3d:99:5f:a0:ff:de:e2:61:b9:9b:54:
bf:20:1d:d8:ea:ac:2e:85:f6:51:09:a3:f5:46:fe:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:A5:07:E6:A3:27:31:4B:0A:7E:27:D8:82:C1:C7:34:CC:14:28
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.201.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fa:15:b5:46:47:8d:92:e0:e5:06:bc:d8:e4:6a:d1:c4:f7:
75:15:a2:6a:2d:68:0a:4e:17:34:c6:de:d1:aa:04:ab:09:d1:
f2:47:e3:66:8e:42:33:6e:7f:78:76:a7:4a:31:59:a8:8d:a5:
ed:ef:6f:3b:63:bc:a1:56:d6:de:42:01:eb:c2:56:52:20:be:
66:16:d2:90:64:52:2b:98:e1:7b:63:c5:7c:1a:30:d8:59:38:
07:13:22:5e:cb:6c:86:1d:48:bb:12:83:98:af:79:b5:01:0c:
d5:50:7d:14:de:c6:7a:d0:cc:96:4a:65:85:18:b4:b7:f8:2e:
a9:41:80:f2:45:c6:77:7b:e5:bd:c2:74:8d:21:a6:cc:c8:84:
b5:26:9c:df:36:51:75:cd:6f:2e:22:08:bf:c2:07:4b:8c:20:
54:79:9f:e6:12:13:ce:95:e1:6b:4c:55:9c:61:0c:c3:f9:87:
7f:83:15:97:9d:6f:cb:53:c6:1b:67:4d:03:56:17:32:46:bd:
df:78:d8:16:d3:5f:c1:80:f2:e7:96:74:e4:b3:e7:18:6b:78:
2a:4b:30:21:c8:9a:97:5e:66:36:b4:a9:fa:bd:d3:e1:57:cc:
54:37:ae:7b:c3:92:a7:54:49:5c:7f:f5:60:4c:81:2d:e1:de:
bb:ee:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:21 2026 by rpki-client