Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LxEtgE1n6L_Yhgg6QC1oPmDgELY.roa
File: LxEtgE1n6L_Yhgg6QC1oPmDgELY.roa (raw, json)
Hash identifier: lTBs3H/9zdGT8HhVn2bf1p574+D0AB/a9wAlGB+hY8c=
Subject key identifier: 2F:11:2D:80:4D:67:E8:BF:D8:86:08:3A:40:2D:68:3E:60:E0:10:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F86107A0E6EFF4654F963F0955930E727
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LxEtgE1n6L_Yhgg6QC1oPmDgELY.roa
Signing time: Tue 21 Jul 2026 19:04:14 +0000
ROA not before: Tue 21 Jul 2026 19:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.170.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:10:7a:0e:6e:ff:46:54:f9:63:f0:95:59:30:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 21 19:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f112d804d67e8bfd886083a402d683e60e010b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:a6:05:6b:a4:af:66:a9:44:10:be:dd:c9:
20:04:4b:1d:ca:99:8a:b3:7a:b5:c2:05:2a:3b:59:
f5:83:61:9f:3b:89:f1:a7:17:82:f8:32:48:c6:87:
52:58:26:7b:89:21:df:17:62:f2:cf:f6:47:17:83:
90:cd:37:3e:03:a9:9c:84:91:ad:16:de:20:11:2d:
8a:44:72:f1:9e:4e:8a:03:0c:bd:d6:a6:3d:fe:5a:
af:24:97:c2:95:aa:78:10:04:d6:1b:9e:e6:6e:86:
fa:8f:ec:22:55:dd:77:51:df:fa:e4:e1:6f:e6:20:
1d:f2:8a:71:07:ed:e2:e6:50:07:1a:8c:3d:30:83:
39:a7:75:4e:17:75:5f:3a:7d:e1:d9:06:33:dd:fc:
da:77:0a:91:6d:9e:b7:13:08:7a:22:df:4a:e6:03:
e0:d7:6a:b8:db:f7:c5:37:f4:33:e5:6c:26:9e:05:
e1:71:cb:92:eb:cb:bc:52:77:8c:60:f3:28:e7:b1:
47:5d:ae:1a:32:04:7d:2e:04:9c:01:df:05:61:4d:
0b:e7:0d:e6:cb:42:53:aa:40:45:f3:fd:0d:1d:e8:
25:af:3c:24:9a:6b:af:4b:88:85:4e:b3:8c:ac:8a:
46:35:a6:7e:26:1e:27:1d:3a:d1:dc:75:f7:4c:b7:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:2D:80:4D:67:E8:BF:D8:86:08:3A:40:2D:68:3E:60:E0:10:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LxEtgE1n6L_Yhgg6QC1oPmDgELY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
194.87.205.0/24
212.192.253.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0c:cd:8b:cc:82:00:6b:ff:97:01:92:ec:f7:b5:5a:8f:3d:
2d:37:3a:dd:17:f5:88:b0:6a:74:7f:c1:65:04:66:31:87:e2:
6a:32:50:da:18:80:0d:4d:03:d2:f6:bf:56:87:f3:cc:b1:9c:
39:eb:e0:b6:55:ff:a1:43:c7:32:a2:9b:f4:d5:a9:77:a7:89:
f9:04:d9:ab:2d:f2:f0:a3:14:be:77:d4:81:e2:bb:e0:44:40:
44:4f:85:0c:13:c2:22:01:71:55:c9:ca:a2:c8:81:ba:9c:0e:
f5:7b:a3:ff:ca:be:c6:c7:ee:4a:29:ff:be:f7:f0:56:46:6d:
99:d2:6a:87:35:92:d8:9d:ee:a1:32:06:7e:37:d3:a6:e4:be:
96:32:9f:e0:a5:7b:c2:96:3e:5b:a0:2a:ea:0d:0e:44:99:d3:
eb:04:6c:4b:c7:f6:ff:4f:15:17:6f:e2:f8:fc:d5:ee:66:c9:
70:25:76:6e:06:f8:88:f0:c7:ec:51:20:5a:74:33:d5:e4:a8:
62:1c:93:c3:30:37:11:44:1f:a2:aa:03:91:25:fe:0e:9e:15:
c1:6a:56:da:ce:23:3a:51:1b:63:6a:57:da:fc:1b:e5:87:e7:
22:0e:51:f7:c5:33:18:34:b8:d7:e2:98:e2:58:0c:35:17:cc:
53:0c:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:58 2026 by rpki-client