Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/lLnIh6czm0KWIQr0ccsD4cdToLc.roa
File: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (raw, json)
Hash identifier: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=
Subject key identifier: 94:B9:C8:87:A7:33:9B:42:96:21:0A:F4:71:CB:03:E1:C7:53:A0:B7
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 019CF8A014877845B0E220297C6E2BCBC805
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/lLnIh6czm0KWIQr0ccsD4cdToLc.roa
Signing time: Mon 16 Mar 2026 21:49:26 +0000
ROA not before: Mon 16 Mar 2026 21:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62172
IP address blocks: 80.75.219.0/24 maxlen: 24
2a03:f980::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 14:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:a0:14:87:78:45:b0:e2:20:29:7c:6e:2b:cb:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Mar 16 21:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b9c887a7339b4296210af471cb03e1c753a0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:c1:57:d3:88:34:09:95:3f:b3:fe:58:0e:
e1:94:ca:bc:d6:8f:e2:85:4f:df:c2:8d:16:e9:18:
21:9e:55:51:c0:e5:0b:9f:14:8d:08:bc:d7:ee:7c:
db:1b:d9:02:f9:cc:22:f4:72:07:a4:15:50:40:87:
90:43:68:eb:23:bf:4e:87:44:75:2e:32:a5:77:e6:
9e:44:18:7d:0c:c3:26:3e:06:18:6b:f6:c1:6e:9c:
06:e5:ab:40:28:19:84:b2:71:e4:01:8f:b7:ae:5d:
1f:70:b9:31:45:6d:d3:69:0d:4e:60:11:c7:4d:bf:
ef:82:d4:f1:e4:aa:65:fe:a7:cf:67:4f:a0:53:34:
d4:90:16:c1:53:6c:d8:44:dd:d6:bd:01:8a:58:3d:
d0:29:a6:bc:35:73:c7:56:e2:8a:17:fb:43:9c:6d:
f8:e2:83:aa:d8:9d:0b:ec:74:82:36:c5:58:de:0d:
0e:0c:ca:31:8c:8c:a7:b4:12:f1:04:30:6e:0f:23:
6d:a4:e0:a7:03:be:e5:4d:10:28:bb:22:3d:d6:17:
e8:18:4f:1c:81:17:4c:29:5b:65:46:60:68:6b:54:
c1:aa:ed:a7:1a:5e:a7:52:50:0f:f8:3f:ae:a3:07:
60:ed:c3:3d:4e:fa:f0:a4:a3:80:3c:38:92:a4:65:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:C8:87:A7:33:9B:42:96:21:0A:F4:71:CB:03:E1:C7:53:A0:B7
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/lLnIh6czm0KWIQr0ccsD4cdToLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.219.0/24
IPv6:
2a03:f980::/29
Signature Algorithm: sha256WithRSAEncryption
0d:46:3e:01:ed:40:39:9e:22:ac:78:59:ea:34:61:b7:82:7d:
40:6b:eb:e0:66:70:95:93:fe:14:50:e8:41:56:c2:9a:be:10:
8e:e4:57:a3:86:2d:ba:00:f0:51:01:39:32:47:ae:39:a2:d3:
e3:be:de:a3:bf:83:72:dd:62:4e:51:94:e9:a9:43:72:a0:a7:
af:55:21:4a:fb:ed:dd:d6:ff:8c:77:b8:1a:17:0a:b8:cd:0f:
91:14:9f:22:c4:33:3f:26:d2:9b:d0:9b:1c:a7:2f:b6:b4:d4:
3e:60:db:83:c0:19:01:79:f7:93:f1:2f:7e:6c:ca:3c:6a:70:
75:9e:46:cf:7a:58:0e:04:5d:a2:93:e8:a7:e2:a4:33:8b:64:
b0:22:a0:68:0d:66:d4:56:63:c2:5e:08:3f:f9:fa:3e:5c:ec:
db:77:3d:0e:ba:5b:be:64:9c:cb:4a:b8:5b:3d:fa:92:95:95:
17:e8:ab:54:7d:69:67:95:54:1e:c0:2e:83:cc:9d:ba:5a:61:
65:d4:53:09:d0:5b:3b:1d:6c:ca:e0:63:e0:26:36:90:12:94:
85:c6:b7:5a:04:1b:59:c4:07:4e:d1:6b:b9:5e:74:4d:0a:e5:
3f:34:53:13:d6:da:cd:24:95:57:cb:9a:84:cd:3f:ce:8f:b4:
ff:bd:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 22:12:25 2026 by rpki-client