Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/LpjcaoIABKxEWEJC1GMJsyYoWho.roa
File: LpjcaoIABKxEWEJC1GMJsyYoWho.roa (raw, json)
Hash identifier: /UlLeQcx4E9kX93CQUxbrdOXx8Wjk8b18bZu0oQv+wo=
Subject key identifier: 2E:98:DC:6A:82:00:04:AC:44:58:42:42:D4:63:09:B3:26:28:5A:1A
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F1D66046ECC8A437D899FB910D0641C67
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/LpjcaoIABKxEWEJC1GMJsyYoWho.roa
Signing time: Wed 01 Jul 2026 11:17:32 +0000
ROA not before: Wed 01 Jul 2026 11:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 201.24.60.0/22 maxlen: 32
201.34.156.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:66:04:6e:cc:8a:43:7d:89:9f:b9:10:d0:64:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 1 11:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e98dc6a820004ac44584242d46309b326285a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:69:c6:35:ba:f6:7a:c2:db:b9:63:29:9b:
2f:c8:3c:26:cc:8a:8b:8a:43:1e:e8:d1:db:ff:43:
86:61:38:38:ef:09:4f:56:7b:b9:c8:85:e6:79:a8:
0b:e8:1c:8a:c6:b1:2d:cd:b1:ac:37:da:f4:bc:8c:
67:6b:fc:9d:cb:72:33:b4:c7:d9:e5:b6:ff:1f:75:
c5:8e:a8:8b:11:e2:86:cc:83:c1:88:18:ec:0f:88:
a1:5d:6c:e9:95:c5:a5:27:d8:02:0d:f5:b9:81:dd:
11:18:98:fa:be:24:c7:12:73:ec:f3:d9:94:da:51:
68:84:13:aa:20:f5:27:85:34:56:91:71:81:09:36:
f9:f2:66:1d:a1:45:50:9b:c8:49:1e:08:d4:20:c3:
a0:04:89:5b:5f:fc:52:71:f4:c1:ca:f3:29:98:c0:
10:ec:8e:10:30:68:92:40:69:3a:02:ac:7e:38:54:
17:10:30:14:af:c5:42:1b:66:a3:16:c8:20:17:6e:
93:b0:38:8d:af:61:fb:a0:6e:01:9f:2d:7b:ab:24:
06:5b:9f:c8:7e:95:79:cc:5c:c3:cb:dc:2f:f2:af:
78:ec:66:64:b2:12:95:bc:2f:e7:5f:a2:2b:d4:98:
b4:e3:c7:b1:d2:a4:c1:35:29:86:37:3b:51:19:2a:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:DC:6A:82:00:04:AC:44:58:42:42:D4:63:09:B3:26:28:5A:1A
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/LpjcaoIABKxEWEJC1GMJsyYoWho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.60.0/22
201.34.156.0/22
Signature Algorithm: sha256WithRSAEncryption
95:68:ac:40:9b:ad:7e:1b:18:14:20:8c:71:23:99:da:e9:41:
3c:81:eb:f3:57:b5:28:5f:06:05:a5:0e:82:a8:92:f0:17:d9:
4d:41:8d:37:79:5f:db:9a:f0:dc:1f:00:9f:6f:e1:41:62:86:
b1:08:2d:40:46:b9:e7:26:ff:e3:77:0c:5a:57:08:bb:78:66:
1c:e5:2e:bb:c9:7d:bf:79:9c:29:97:23:78:f7:d8:6f:d1:59:
b0:fb:82:2b:ec:ec:a3:2b:74:c0:47:d1:55:9e:4b:1e:c5:7a:
dd:cc:6c:20:02:49:08:06:0b:01:80:2a:d2:06:ab:14:d9:4d:
28:f9:94:39:43:bf:05:a3:37:cb:d3:b3:c5:cb:27:64:4c:b7:
53:66:9b:47:16:07:0f:26:e2:30:f4:fe:6b:70:40:b1:2e:9f:
5a:ec:4a:b4:5e:e0:98:af:2a:20:5d:32:35:90:b8:50:04:5a:
ba:ad:9c:68:8c:cb:59:2f:9b:b0:6b:ee:9b:0d:00:36:9a:f1:
48:9e:81:cd:d5:2b:9b:a0:a9:f5:b7:e9:5c:a2:fa:dc:29:86:
d5:25:e8:2a:bc:e2:56:c2:3e:fb:1b:64:d5:92:49:72:8f:ef:
ab:e0:fc:1a:ac:6e:33:00:ab:b9:aa:41:b2:03:ef:97:aa:d1:
dd:9b:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:31 2026 by rpki-client