Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lLUZVwT1VgYdQj8XiBAsWGV9wGM.roa
File: lLUZVwT1VgYdQj8XiBAsWGV9wGM.roa (raw, json)
Hash identifier: voltHgTjYTdXXjc8NGMg4PBkoqW4bXpU99IOkKybBTQ=
Subject key identifier: 94:B5:19:57:04:F5:56:06:1D:42:3F:17:88:10:2C:58:65:7D:C0:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F8FDEDD0AA927D9B3DF5B065E78DA540F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lLUZVwT1VgYdQj8XiBAsWGV9wGM.roa
Signing time: Thu 23 Jul 2026 16:46:15 +0000
ROA not before: Thu 23 Jul 2026 16:46:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 5.231.94.0/24 maxlen: 24
2a02:2fc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:de:dd:0a:a9:27:d9:b3:df:5b:06:5e:78:da:54:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 16:46:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b5195704f556061d423f1788102c58657dc063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:18:3d:30:f6:c3:3b:0a:13:3d:ce:93:34:
20:89:82:e1:f5:23:23:e9:43:dd:64:d5:3c:1c:1a:
f1:fd:b7:83:8c:e4:59:1f:be:e8:65:f7:f4:99:bb:
4a:d7:7b:ed:a8:5f:fd:8b:83:40:7b:6d:fd:27:2f:
3e:5d:94:10:5b:2d:07:e3:21:93:40:12:77:5d:dc:
c3:0c:c5:78:5e:b3:d5:fa:33:28:31:b5:3a:a3:4a:
11:c1:19:c9:f6:dc:ce:3a:2c:e0:a7:f3:ac:6f:bc:
f0:a7:e7:e9:88:20:db:7d:2e:74:bd:3f:1f:0d:ff:
c7:e5:aa:e5:7d:e0:67:79:b1:18:38:80:d2:f3:02:
5b:3a:ff:72:cc:f5:98:9c:af:d8:03:38:af:9e:38:
81:0a:35:6c:d1:8c:6c:21:b5:d7:ea:e8:be:22:0d:
f5:b8:e4:c7:34:45:f6:3d:f5:87:75:09:be:24:72:
8a:fb:03:f5:a8:a4:ee:d6:e0:f1:e0:d4:7f:d6:93:
06:c1:b8:66:98:29:df:17:d0:9f:91:a2:6b:f0:54:
d4:37:93:34:a4:b8:c4:9c:8e:0b:16:2e:08:10:91:
e5:78:00:98:b8:f7:3e:d4:51:92:c8:fd:00:89:60:
8a:59:a7:1f:7c:d7:53:98:19:46:a1:c0:bc:e6:53:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:19:57:04:F5:56:06:1D:42:3F:17:88:10:2C:58:65:7D:C0:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lLUZVwT1VgYdQj8XiBAsWGV9wGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.94.0/24
IPv6:
2a02:2fc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
b8:ab:7f:2e:bf:70:78:3c:18:30:3a:c6:f3:69:7d:33:6f:5e:
1c:78:17:4a:97:0d:d1:73:cc:db:58:44:5c:a5:64:95:e9:0f:
5c:89:68:89:08:ee:b9:b2:16:30:ba:69:65:58:64:56:0b:62:
b3:c7:ed:e9:24:97:19:03:42:cc:f1:b3:9d:61:01:bb:5c:52:
e2:b9:95:14:e7:65:c5:57:e7:76:35:b6:0f:4f:d0:f7:65:83:
9e:de:ac:e9:59:f1:9b:ef:3f:59:0b:31:2c:93:0e:48:52:a9:
2d:52:1f:7d:dc:0a:73:c0:2a:a5:d4:a8:b1:20:31:b1:d7:2e:
be:41:b8:b8:29:49:f0:6d:2d:10:46:08:47:82:4b:9c:be:e8:
85:25:e1:20:b5:04:80:eb:78:e1:6f:be:07:ac:25:a8:cd:9f:
94:ff:db:12:bc:4f:56:0f:b6:fd:83:16:df:5e:da:43:0f:ed:
92:42:d4:45:32:ba:77:95:ec:ab:06:a5:fe:a9:f4:e6:88:30:
38:18:60:c4:19:74:d1:f7:64:dc:ef:e3:56:4c:68:6b:34:8f:
a5:84:50:0b:ad:b8:a4:a1:c8:8e:eb:ab:0d:a5:da:56:7a:05:
72:cd:a5:10:6f:f2:90:d6:66:c2:a6:bb:f1:a6:8b:8d:4c:b3:
7b:d1:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:53 2026 by rpki-client