Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgiSzZg9cdlepWPscQ848vWt_3o.roa
File: LgiSzZg9cdlepWPscQ848vWt_3o.roa (raw, json)
Hash identifier: 1E5WAiTWJ2Uo1l7uWe55LLEVSoWDoil0vojNCJpx+5s=
Subject key identifier: 2E:08:92:CD:98:3D:71:D9:5E:A5:63:EC:71:0F:38:F2:F5:AD:FF:7A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FF3F22352AB46613816503DE50536B8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgiSzZg9cdlepWPscQ848vWt_3o.roa
Signing time: Sun 05 Jul 2026 01:45:44 +0000
ROA not before: Sun 05 Jul 2026 01:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 191.222.40.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.24.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:f3:f2:23:52:ab:46:61:38:16:50:3d:e5:05:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0892cd983d71d95ea563ec710f38f2f5adff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:c4:fb:96:40:77:85:79:8b:8f:f5:d8:25:
15:9f:51:c4:fb:80:2f:71:10:92:e4:ee:de:7c:52:
f2:31:84:31:28:c4:72:8e:82:90:01:66:e8:d2:51:
db:38:57:db:0a:73:8f:3d:39:6c:50:18:3a:55:24:
11:0f:8a:e5:e3:c3:6f:46:15:59:67:27:23:f1:6d:
e6:38:03:ed:7b:4f:53:22:34:9b:67:18:ba:e6:fe:
02:dc:f3:96:03:14:94:ce:62:fe:09:00:d5:d5:20:
f4:78:59:4c:b5:47:21:f1:e2:cd:dd:a7:d8:c3:f4:
9f:60:c0:bf:49:7e:5b:12:e2:a7:1f:fb:07:d7:eb:
85:a7:73:30:4e:75:01:ab:f9:4a:da:f2:c4:17:37:
e2:fc:cf:be:19:15:2c:8a:14:cf:6c:fc:13:17:ef:
8d:d8:04:e4:7d:49:61:eb:2f:32:78:f2:dd:ed:c6:
2c:fc:52:87:4d:2c:ad:cb:3c:d1:54:38:40:67:ae:
69:60:81:1e:86:81:75:e0:bd:d9:a2:e7:67:db:13:
2d:5c:39:b3:bf:dd:56:e6:35:ba:d0:5b:d5:51:c5:
e9:23:4f:67:68:d5:c3:94:93:0c:95:c4:ee:ba:e7:
09:60:0b:6c:21:fa:c0:48:80:26:3c:3a:2c:84:70:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:92:CD:98:3D:71:D9:5E:A5:63:EC:71:0F:38:F2:F5:AD:FF:7A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgiSzZg9cdlepWPscQ848vWt_3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.40.0/24
200.165.19.0/24
201.11.227.0/24
201.24.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b1:78:bd:53:68:ff:08:1a:7f:93:72:1c:b2:3f:ea:c3:b5:
d3:ca:1c:bc:76:b9:54:20:3c:87:9c:68:3b:d1:72:d2:63:19:
2c:e2:f8:c2:13:bc:5a:ba:32:36:d5:e5:9a:1e:19:8d:a2:92:
99:17:6b:af:b1:3e:eb:59:8e:7c:11:dc:c5:0c:60:39:cb:64:
b4:28:33:4b:48:c9:7a:31:6c:e3:5d:d3:1b:8e:87:c9:39:d6:
60:5f:2e:e7:3c:8d:f9:51:86:4d:a7:38:e5:a0:49:a3:43:d9:
ed:af:78:f1:90:f4:7d:c4:5a:6b:d1:1c:a7:e4:61:44:cc:9d:
8b:9f:d2:1d:b9:b9:a5:f8:fc:08:e5:58:ff:42:fa:e2:bd:b0:
72:84:8a:54:10:f5:1c:96:99:de:c2:97:f7:c7:c2:a5:05:fe:
48:85:09:86:d0:d3:c5:8d:3c:3b:7a:24:bc:d5:b5:cd:f6:1e:
61:04:8e:79:e2:93:40:e8:f7:97:4b:e5:88:91:c7:12:0b:5e:
ee:79:ff:de:43:e7:28:39:82:c2:e9:2c:7d:16:73:2a:e2:d3:
a2:fa:f3:f3:ac:88:b0:83:89:80:e6:3f:a2:79:f3:c2:ed:53:
dc:fd:51:70:2f:c6:90:b5:b8:77:04:6c:71:41:a2:74:9d:75:
35:d2:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:32 2026 by rpki-client