Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/LPFoAB4sPBskTSmjN__uUCavKxw.roa
File: LPFoAB4sPBskTSmjN__uUCavKxw.roa (raw, json)
Hash identifier: ESBBS9bOaL8PT/NnpNwZWIjfHqj4VbeRzrLEqzVAw6g=
Subject key identifier: 2C:F1:68:00:1E:2C:3C:1B:24:4D:29:A3:37:FF:EE:50:26:AF:2B:1C
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019F6E86F6AB10BEAC365F3DA8F91C976FDB
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/LPFoAB4sPBskTSmjN__uUCavKxw.roa
Signing time: Fri 17 Jul 2026 05:22:46 +0000
ROA not before: Fri 17 Jul 2026 05:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60042
IP address blocks: 176.118.208.0/22 maxlen: 24
176.118.209.0/24 maxlen: 24
176.118.213.0/24 maxlen: 24
176.118.214.0/23 maxlen: 23
176.118.214.0/24 maxlen: 24
176.118.215.0/24 maxlen: 24
176.118.216.0/22 maxlen: 22
176.118.220.0/22 maxlen: 22
176.118.222.0/24 maxlen: 24
185.42.228.0/22 maxlen: 24
185.42.228.0/23 maxlen: 23
185.42.229.0/24 maxlen: 24
185.42.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:86:f6:ab:10:be:ac:36:5f:3d:a8:f9:1c:97:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jul 17 05:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf168001e2c3c1b244d29a337ffee5026af2b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:02:31:dc:cb:dd:50:f3:e4:30:2e:1e:6b:
d5:1e:b1:0d:3f:92:b2:87:6b:a6:87:48:b8:9b:40:
de:82:10:7b:8b:3e:cd:3f:b7:4b:e0:8f:96:20:12:
c1:08:88:fd:c9:c0:99:4c:d0:e7:58:d4:f0:34:0c:
f0:3a:46:b9:8a:89:ef:9a:bd:25:38:ab:c4:19:8d:
96:c2:4f:f1:c4:53:47:67:96:11:bb:82:5e:37:ef:
e6:09:8b:56:66:fe:f7:b2:11:b0:27:e3:3a:c7:6e:
09:ce:06:54:83:00:32:a9:c0:55:ed:28:cd:a3:6c:
ff:59:4b:da:4c:9b:fa:38:3b:d7:3d:2b:88:ff:0e:
21:0a:53:bd:f0:48:c1:90:90:6d:db:24:89:f7:6a:
9e:3f:7f:33:b2:d8:3d:96:81:89:14:cf:18:45:e5:
e8:03:ba:73:31:99:96:8a:6c:d5:ef:e7:95:c6:1e:
3f:4c:2d:ad:d8:aa:57:46:08:ed:ec:98:04:fe:1e:
e3:c4:c6:74:85:f4:da:c3:00:c2:52:7a:e1:b5:f3:
7b:b7:d3:29:a4:48:6a:91:69:f3:71:44:93:3c:d0:
d8:5d:4b:2d:54:ce:3b:c6:40:40:7e:64:a1:42:ce:
f2:41:46:a3:b7:ad:27:7e:bc:47:86:c8:e5:d6:9d:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:68:00:1E:2C:3C:1B:24:4D:29:A3:37:FF:EE:50:26:AF:2B:1C
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/LPFoAB4sPBskTSmjN__uUCavKxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.208.0/22
176.118.213.0-176.118.223.255
185.42.228.0/22
Signature Algorithm: sha256WithRSAEncryption
32:8b:b0:b9:28:bd:a2:af:a0:c8:ec:1d:f3:0b:c3:44:ef:8f:
de:01:aa:78:37:07:09:d2:2a:ea:42:ea:cd:ca:ea:50:c6:43:
fd:04:a3:ea:1b:10:2d:81:f9:e4:f9:0c:a4:cb:23:ca:2c:58:
0c:a2:c3:9c:ae:a0:2d:81:06:4b:6c:7d:aa:64:88:2c:05:27:
78:1b:f3:e4:80:55:92:d1:68:45:0e:b5:97:b7:bb:ef:5a:3d:
2f:70:62:bf:1b:ed:3f:31:5f:e8:f3:3c:27:f8:dc:9e:82:38:
67:49:06:0f:49:f6:09:c2:04:27:00:be:d4:d1:e2:4b:03:8d:
4d:5c:d5:6e:8f:28:ce:78:75:59:59:69:40:b4:d2:64:bb:0b:
84:1a:3b:82:84:b7:f3:8e:f6:75:98:ba:ca:11:4b:16:dd:02:
c7:5a:0c:42:4b:a4:a7:66:f4:0d:19:a8:45:8a:b1:ce:6c:12:
2f:dc:12:e6:61:d7:17:22:67:ef:dc:e4:0b:e8:3e:a1:8d:c5:
4a:d4:59:a6:82:e6:15:f8:84:f6:5b:17:0d:50:9c:4f:5e:72:
0d:09:8e:e4:9f:05:f4:82:72:5f:80:7f:80:59:cd:f2:9f:f3:
53:3a:10:75:30:ae:14:bc:2f:d7:bd:30:2f:3b:99:14:cb:b3:
19:a0:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:18 2026 by rpki-client