Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa
File: L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa (raw, json)
Hash identifier: MmKVAG1nuZbxn4BHXng/K07ASVdY2tArz6SaT43xauM=
Subject key identifier: 2F:6E:CB:83:C9:78:BE:5F:2E:31:0C:45:A4:67:04:B0:29:92:54:C7
Certificate issuer: /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial: 019F236923150C536F2AB4C15362A36D7952
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12567
IP address blocks: 78.138.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:15:0c:53:6f:2a:b4:c1:53:62:a3:6d:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f6ecb83c978be5f2e310c45a46704b0299254c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:84:72:8a:44:cc:3a:c2:34:5a:5d:5e:7f:
27:50:65:6d:ab:8d:78:68:df:c6:46:4a:bc:32:78:
7e:50:60:3d:09:01:9d:40:af:20:72:c0:d2:6c:f4:
c0:9e:a3:21:50:e8:cc:b9:d6:d9:32:a5:4b:14:07:
01:ea:06:6e:26:38:6c:f6:11:4a:26:83:68:09:c7:
75:43:42:e0:b5:58:fd:71:02:12:a2:b4:ab:41:82:
ca:6d:ef:20:3c:a5:30:67:df:a7:99:64:0d:95:03:
38:c6:2c:8c:7f:79:29:74:08:37:a2:e2:84:4d:99:
46:2a:13:bb:38:67:eb:31:62:d2:05:5f:3a:1c:29:
26:aa:36:91:18:6d:22:a2:12:f8:e2:20:3e:31:7c:
c5:f5:30:50:91:91:17:ab:b4:72:8c:56:b5:ae:49:
9a:09:dc:d8:66:17:93:50:3f:ea:3c:2f:0f:ca:20:
f8:10:3d:b9:60:f2:5b:c9:01:f4:47:6b:91:be:05:
0e:d5:68:1f:7e:77:c0:91:2c:57:e9:7e:67:d5:05:
c4:78:15:32:49:3b:bd:78:ff:13:3d:01:e4:fe:b0:
71:f5:e6:7a:37:98:fb:b8:3f:3f:9a:b3:22:1d:eb:
83:df:a6:92:82:98:0b:14:b6:2a:8d:3b:54:48:e0:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:CB:83:C9:78:BE:5F:2E:31:0C:45:A4:67:04:B0:29:92:54:C7
X509v3 Authority Key Identifier:
keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.44.0/24
Signature Algorithm: sha256WithRSAEncryption
07:91:f9:01:67:90:c6:19:bb:35:ba:90:54:9c:3e:c6:90:47:
ef:f9:9c:bf:4a:81:c3:b4:8b:b6:76:ca:1a:2a:ce:13:96:b6:
ba:92:4e:83:76:c9:d1:3b:7b:fb:35:3f:a1:89:0a:1f:3c:de:
94:e8:af:42:9e:db:0c:0a:4f:b7:d9:da:98:5c:51:3e:67:02:
14:a0:12:20:c1:9b:29:e7:f1:3e:20:3e:d0:97:ec:8e:be:8e:
64:95:38:41:03:61:e8:4d:33:09:9b:9b:d1:30:f9:e5:c7:88:
a8:91:27:ec:cb:74:ec:b0:3e:0b:5c:26:aa:40:c0:43:85:da:
82:e4:39:6e:71:3e:23:25:c9:0b:3a:bd:0e:0a:97:18:2d:ab:
e2:5a:9f:14:a6:ac:cc:30:51:81:d0:20:4d:3b:ad:1f:43:0c:
29:8c:fc:2a:ce:37:b0:e5:7c:c9:40:76:d6:1f:09:0f:43:c9:
38:06:d5:66:55:b0:a7:75:05:da:e7:35:75:dd:49:ea:6a:43:
02:e7:11:5e:f5:3f:f7:c2:43:2c:62:cf:d2:8a:34:1b:b6:9c:
ab:b9:6a:7b:74:a4:57:24:d2:54:2a:a3:e6:b8:46:7c:90:75:
34:54:d4:3c:08:60:a9:d1:ac:cf:5e:a0:0c:36:33:ff:49:82:
4a:9a:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:24 2026 by rpki-client