Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/LsI5zfsSjbzK-FULs6vPqtoagqE.roa
File: LsI5zfsSjbzK-FULs6vPqtoagqE.roa (raw, json)
Hash identifier: s9PEAwBrSwP6zTFQRrH++D0pU2vqD3A9Z5nIOQdQBiQ=
Subject key identifier: 2E:C2:39:CD:FB:12:8D:BC:CA:F8:55:0B:B3:AB:CF:AA:DA:1A:82:A1
Certificate issuer: /CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Certificate serial: 019F2368D24B9080C4D159647E73F0CBCCE8
Authority key identifier: 36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/LsI5zfsSjbzK-FULs6vPqtoagqE.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25275
IP address blocks: 195.234.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d2:4b:90:80:c4:d1:59:64:7e:73:f0:cb:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec239cdfb128dbccaf8550bb3abcfaada1a82a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:f2:8e:6a:cb:30:ef:50:09:73:82:06:21:
73:0b:8f:42:0c:a6:1f:e5:7a:c5:35:7b:24:d5:75:
69:aa:78:eb:ec:b3:bb:85:14:a4:17:e2:46:25:6a:
6a:a5:f6:f8:4e:6b:5c:b1:ae:1b:19:2e:2c:91:5f:
6a:36:e1:6b:3a:77:68:7f:9b:a6:87:6a:9c:4f:4a:
2d:48:b8:d7:46:66:a1:24:c8:b7:1a:c1:19:fa:58:
dc:55:85:d5:9e:4a:07:f6:1e:d2:1c:99:7f:10:24:
28:67:74:31:c0:0e:0f:86:56:12:07:df:1c:db:5d:
a7:92:df:7d:62:0b:81:82:8a:ca:cc:f7:e7:e4:11:
dc:77:68:45:73:64:c5:2b:ba:bf:b7:d7:fc:c8:9d:
01:1f:6d:48:0e:9d:ff:b7:c1:40:3a:91:4d:af:9b:
09:8e:10:02:70:ad:76:1d:83:9e:f6:97:f8:1f:3d:
c9:aa:41:1e:20:bf:ba:2f:10:7a:00:aa:85:59:e6:
7b:e7:9e:0c:0f:9a:d8:f8:e3:22:05:42:36:fb:7a:
4b:57:50:d2:cd:1c:46:5a:81:05:17:6c:ed:39:af:
d9:21:5d:a5:82:58:d5:bd:72:dc:8c:1f:b6:d6:f1:
42:85:20:66:80:23:84:e8:d8:44:d3:84:ea:a9:de:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:39:CD:FB:12:8D:BC:CA:F8:55:0B:B3:AB:CF:AA:DA:1A:82:A1
X509v3 Authority Key Identifier:
keyid:36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/LsI5zfsSjbzK-FULs6vPqtoagqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.224.0/22
Signature Algorithm: sha256WithRSAEncryption
81:43:12:da:c0:e4:67:70:63:5e:4a:38:f8:51:a7:b4:c9:51:
14:14:81:59:48:6a:67:09:9c:8d:15:77:0f:3b:25:a5:09:fc:
fc:b1:69:ee:fd:d1:ab:c2:88:97:28:a6:42:79:dd:53:2d:55:
ae:95:fa:6b:98:78:25:5e:69:58:36:85:d1:83:f3:46:84:96:
3b:e6:44:9a:3d:66:27:27:6d:0a:8e:bb:9a:10:f9:c7:be:fc:
63:09:9f:a6:b1:dc:6b:6c:de:43:5d:d4:65:7f:9d:9e:24:60:
6c:1c:e1:cd:57:94:bd:33:e9:5c:dd:fd:20:d2:bf:a3:40:a7:
f9:b3:8e:76:fc:e6:c0:b9:b7:bd:78:5b:0c:cf:b4:f7:f2:cd:
7a:bc:c6:46:bb:c5:06:b7:f8:bc:13:7a:8c:3a:aa:6e:b5:6a:
4a:0b:93:40:02:6c:66:e5:0f:14:d4:3a:ec:77:b4:7d:d6:71:
04:eb:c3:ff:a2:82:45:16:fc:73:d3:23:06:3c:0d:c5:3a:ba:
9c:4a:6c:b3:ed:e0:ec:67:ef:f6:ba:76:d3:7a:83:68:12:5f:
43:41:84:2d:95:b9:61:f5:f0:2b:ca:40:70:5e:62:c5:f9:ad:
79:c5:96:9f:e0:69:8e:1a:1e:38:9e:a4:84:c6:bc:f3:75:fc:
93:9d:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:57 2026 by rpki-client