Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa
File: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (raw, json)
Hash identifier: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=
Subject key identifier: 97:0A:F8:BA:38:D5:45:9F:65:4D:3E:A7:DF:C4:5A:4E:61:A5:EB:30
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019E7029C890C625F7909CED02B8FA6DE4C6
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa
Signing time: Thu 28 May 2026 19:57:26 +0000
ROA not before: Thu 28 May 2026 19:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 217.18.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:29:c8:90:c6:25:f7:90:9c:ed:02:b8:fa:6d:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: May 28 19:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=970af8ba38d5459f654d3ea7dfc45a4e61a5eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:3f:61:2b:f3:b1:f8:e2:a9:b4:d8:f9:ca:
2b:da:27:d5:71:53:47:9f:03:77:bd:49:58:c9:f7:
4b:fd:0c:cf:96:d2:dd:05:be:10:b1:ee:9a:5f:06:
df:7c:16:eb:a4:33:83:3a:9a:30:08:b7:9a:9c:1d:
7b:5f:19:b4:6d:f8:c2:06:86:25:db:49:3d:3c:c4:
7c:68:03:d7:40:6c:6d:12:e7:66:8e:34:da:e0:3b:
ca:29:e3:ff:ff:8f:d2:b7:d7:eb:bd:8a:fb:80:9f:
71:1e:1f:71:62:22:5b:cc:f5:46:e4:3c:47:fe:88:
6c:7e:e0:53:a2:72:13:f3:83:81:bf:69:58:30:09:
06:55:0e:6f:22:80:8b:e4:66:01:4c:77:4f:1d:c9:
fb:0c:73:0e:99:c8:5c:ae:b4:36:6a:c0:1a:65:46:
6b:59:ce:e0:17:1c:c7:2e:1e:53:60:71:8d:cd:a9:
80:c9:d0:dc:f4:2f:d3:6a:b0:7d:75:b1:95:4d:9b:
6f:7e:9e:fe:48:3b:e4:b7:66:f5:05:ca:ba:06:16:
1a:3a:fc:c9:b9:42:43:08:b9:e3:96:a5:e4:da:40:
a7:e1:e1:af:12:b7:e5:52:76:0f:4e:7c:c5:6f:03:
ea:e0:84:4b:11:2b:01:03:7a:7e:e5:83:45:00:7c:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:F8:BA:38:D5:45:9F:65:4D:3E:A7:DF:C4:5A:4E:61:A5:EB:30
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.49.0/24
Signature Algorithm: sha256WithRSAEncryption
90:56:4d:9d:b5:c3:63:3e:7b:fb:8a:54:d0:fc:21:84:c8:12:
f5:e1:80:72:13:81:e7:0a:6e:60:b4:45:04:12:a4:1b:2e:e8:
72:e3:d3:60:3b:04:c3:bb:1b:35:93:ce:d1:4c:35:4f:58:97:
fa:b6:ca:d5:26:a2:2b:09:9b:5f:07:ba:10:fd:bd:db:1d:c4:
83:85:58:d1:a6:3b:75:25:52:91:06:16:d1:b2:6a:04:f4:02:
42:e3:a7:1c:c0:55:bb:23:3b:cd:51:2b:1c:aa:93:c7:26:1e:
0d:e2:ed:60:bd:cc:94:da:d0:e2:11:54:8d:2d:58:86:d2:44:
74:03:68:f2:74:d0:91:c9:f8:42:fb:54:ff:d9:c3:c8:7c:7f:
fa:11:f9:68:4a:bf:a3:4f:51:4e:8f:8f:ea:7f:53:67:62:d5:
a4:a5:bd:6c:23:87:51:7c:d1:4f:38:7d:4f:a7:ea:f0:fd:48:
a0:cb:13:ec:43:83:9d:2e:56:3b:e0:bf:1b:5d:d1:bd:ff:e8:
28:a4:f1:c7:d2:94:52:7f:d3:ba:04:c8:9c:6c:61:f5:b6:ea:
0e:4e:6a:0a:cc:bf:7a:ad:b8:dc:c1:14:c4:57:c9:f1:e9:61:
ee:78:ee:dd:3a:d6:94:9d:18:dc:6b:a6:f5:17:34:76:4a:98:
a8:97:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:40 2026 by rpki-client