Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/LCoUEax47kGqGiCuqcBQi2GTesU.roa
File: LCoUEax47kGqGiCuqcBQi2GTesU.roa (raw, json)
Hash identifier: IJOb0EvYMFxU2/6v/RPKM6efNRAz/BdqHodx1dKoF9M=
Subject key identifier: 2C:2A:14:11:AC:78:EE:41:AA:1A:20:AE:A9:C0:50:8B:61:93:7A:C5
Certificate issuer: /CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Certificate serial: 019F2368B3DDB3D768F3C62B989B9AFEC9E6
Authority key identifier: 5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/LCoUEax47kGqGiCuqcBQi2GTesU.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50399
IP address blocks: 92.42.232.0/21 maxlen: 24
109.232.40.0/21 maxlen: 24
185.3.204.0/22 maxlen: 24
185.223.140.0/22 maxlen: 24
2a00:11e8::/32 maxlen: 64
2a03:3300::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:dd:b3:d7:68:f3:c6:2b:98:9b:9a:fe:c9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c2a1411ac78ee41aa1a20aea9c0508b61937ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:73:22:b2:e4:0d:db:d1:d2:81:5c:de:fb:
a8:42:1c:26:fa:45:ad:de:09:fd:77:15:a0:56:a8:
ac:76:6e:d9:38:6d:24:d2:ca:ac:02:c7:98:f2:82:
1e:d2:9d:19:ea:c2:9c:4f:8e:91:ff:b5:a2:f6:42:
de:ea:59:69:6f:cb:b0:ab:91:40:1c:39:b8:80:5b:
b8:48:d2:ff:02:9b:d1:29:ec:90:a9:09:61:54:dc:
98:48:a0:83:e6:1f:37:d1:d2:38:01:0f:cf:3d:e8:
72:3c:f2:36:1e:90:c4:0b:c3:03:0a:a7:f1:a8:5e:
44:e6:89:f5:1d:1d:f5:55:35:01:ed:58:1d:76:51:
c5:45:2e:f0:9c:5e:94:da:78:ee:90:55:99:2e:1d:
76:ec:f7:ca:ca:6e:42:03:ec:d5:72:c6:d0:d5:0f:
09:8c:ea:0c:3d:6c:ea:b3:1e:d4:5c:9a:6b:5c:e9:
9e:39:bd:7c:7f:65:f5:bd:a1:29:20:67:6f:ca:e6:
f3:94:0f:e8:c4:b7:9c:bd:36:2b:a0:22:e1:21:2f:
88:22:f6:fc:50:24:32:b4:ff:ed:5a:08:d5:91:f2:
56:f0:02:bc:bb:2c:69:4b:cf:3b:26:44:de:99:17:
40:08:02:6c:98:fc:2c:99:e7:03:63:cd:5e:f4:84:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:14:11:AC:78:EE:41:AA:1A:20:AE:A9:C0:50:8B:61:93:7A:C5
X509v3 Authority Key Identifier:
keyid:5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/LCoUEax47kGqGiCuqcBQi2GTesU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.232.0/21
109.232.40.0/21
185.3.204.0/22
185.223.140.0/22
IPv6:
2a00:11e8::/32
2a03:3300::/32
Signature Algorithm: sha256WithRSAEncryption
49:a3:67:f2:7f:66:c9:5d:e5:a4:fc:07:8b:7f:72:c6:03:c5:
7b:63:70:cf:e2:b1:f9:7e:de:05:bf:87:36:ca:9b:c0:32:8b:
cb:1e:d7:07:83:70:47:a6:58:a5:70:cf:a7:71:24:ba:1e:89:
1a:f6:c7:88:f9:18:9b:e9:ed:34:f3:03:3e:60:be:83:4b:0f:
b4:b7:01:67:8c:46:be:3e:3c:d7:aa:05:9a:1b:21:60:53:9b:
6d:c2:8e:f0:9c:2c:a2:40:0b:aa:e9:7e:dc:28:75:92:0b:54:
fd:9d:88:03:5b:5a:b2:21:4d:91:e3:75:e4:f9:47:d2:81:bd:
a8:46:a3:7f:44:5f:79:5f:95:bb:68:ef:bc:66:f0:8e:cf:c5:
ea:ca:0b:9a:d2:ac:ce:c9:22:2e:15:23:c7:e6:02:96:b2:71:
b3:ea:5b:e7:58:3f:d4:06:64:7b:55:21:2b:7c:5d:01:fa:09:
8d:b9:d7:7b:8d:b0:f4:2c:8b:d6:58:34:a1:b5:7a:7e:8f:8c:
59:2a:25:89:98:47:46:64:01:4b:b1:7f:bd:5d:8a:1e:44:36:
44:52:4f:07:61:96:71:37:82:f4:cb:8f:4d:28:89:14:72:cf:
35:26:1a:e1:55:30:7f:63:95:01:95:73:32:8b:6d:42:66:a9:
76:3e:2b:1e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZ8jaLPds9do88YrmJua/snmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYmMxYjdlMzhiYWU3YmM2M2M1ZGFlYWFiYmQ0OWU3MjI4
OTVmZmYwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzJhMTQxMWFjNzhlZTQxYWExYTIwYWVhOWMwNTA4YjYxOTM3YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MJzIrLkDdvR0oFc3vuoQhwm+kWt
3gn9dxWgVqisdm7ZOG0k0sqsAseY8oIe0p0Z6sKcT46R/7Wi9kLe6llpb8uwq5FA
HDm4gFu4SNL/ApvRKeyQqQlhVNyYSKCD5h830dI4AQ/PPehyPPI2HpDEC8MDCqfx
qF5E5on1HR31VTUB7VgddlHFRS7wnF6U2njukFWZLh127PfKym5CA+zVcsbQ1Q8J
jOoMPWzqsx7UXJprXOmeOb18f2X1vaEpIGdvyubzlA/oxLecvTYroCLhIS+IIvb8
UCQytP/tWgjVkfJW8AK8uyxpS887JkTemRdACAJsmPwsmecDY81e9IQi7QIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFCwqFBGseO5BqhogrqnAUIthk3rFMB8GA1UdIwQY
MBaAFFq8G344uue8Y8Xa6qu9SeciiV//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3J3YmZqaTY1N3hqeGRycXE3MUo1eUtKWF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt
M2YxYzE1MjNhMTIzLzEvTENvVUVheDQ3a0dxR2lDdXFjQlFpMkdUZXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz
LzEvV3J3YmZqaTY1N3hqeGRycXE3MUo1eUtKWF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDXCroAwQD
begoAwQCuQPMAwQCud+MMBQEAgACMA4DBQAqABHoAwUAKgMzADANBgkqhkiG9w0B
AQsFAAOCAQEASaNn8n9myV3lpPwHi39yxgPFe2Nwz+Kx+X7eBb+HNsqbwDKLyx7X
B4NwR6ZYpXDPp3Ekuh6JGvbHiPkYm+ntNPMDPmC+g0sPtLcBZ4xGvj4816oFmhsh
YFObbcKO8JwsokALqul+3Ch1kgtU/Z2IA1tasiFNkeN15PlH0oG9qEajf0RfeV+V
u2jvvGbwjs/F6soLmtKszskiLhUjx+YClrJxs+pb51g/1AZke1UhK3xdAfoJjbnX
e42w9CyL1lg0obV6fo+MWSoliZhHRmQBS7F/vV2KHkQ2RFJPB2GWcTeC9MuPTSiJ
FHLPNSYa4VUwf2OVAZVzMottQmapdj4rHg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:04 2026 by rpki-client