Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa
File: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (raw, json)
Hash identifier: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=
Subject key identifier: 94:67:C3:AF:5F:B3:A9:FB:79:B3:17:4D:DD:90:6E:C5:82:E9:25:0F
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 019F236852808105FFA639E4900959CE1A72
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:52:80:81:05:ff:a6:39:e4:90:09:59:ce:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9467c3af5fb3a9fb79b3174ddd906ec582e9250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:51:f5:43:42:a2:74:be:47:5e:92:80:37:
db:7f:38:df:c9:ef:7d:b5:eb:5a:bb:5e:3f:35:ca:
86:be:d9:68:8e:50:05:dc:62:38:7c:62:c7:06:fc:
83:cf:87:c3:dd:38:28:99:43:d6:ed:83:92:d4:de:
da:d9:e5:15:1d:bd:8c:0e:1b:62:e6:87:da:05:a5:
d7:09:50:92:76:90:72:d8:29:14:cc:2d:b2:53:f9:
78:d2:54:bc:05:09:d1:ea:a5:a7:b6:67:5e:8a:ce:
4f:f8:e1:1d:39:36:09:9a:0e:27:6a:c5:47:48:c7:
8a:43:34:1f:4c:35:8a:48:6a:99:00:7d:8e:a3:9b:
8f:56:92:6d:dd:86:90:7a:00:25:13:c5:dc:b4:b8:
2c:01:83:a6:55:f7:7f:9f:44:2d:22:b9:8c:ce:65:
17:eb:ed:2a:1e:b8:43:06:f7:a0:cd:3d:a9:80:34:
b2:14:37:b0:06:e2:87:a9:1c:ef:16:f0:88:f8:0b:
22:b4:1d:50:7b:9b:f6:45:e7:54:fa:92:0c:72:ab:
67:3c:ce:66:09:48:74:23:66:fc:ab:96:94:a5:e6:
89:93:08:73:59:a8:0a:61:f6:d8:cc:60:e7:cc:bb:
8a:60:75:ed:66:ab:d3:f8:f9:bd:b7:04:19:90:a3:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:C3:AF:5F:B3:A9:FB:79:B3:17:4D:DD:90:6E:C5:82:E9:25:0F
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a6:df:a3:ea:bc:af:39:c3:33:f5:c8:12:c5:b5:1d:33:1d:
a1:6d:eb:85:79:a2:d8:f4:61:06:10:41:ed:ec:bd:93:87:4c:
2a:d3:d2:03:bf:7f:b7:dd:81:af:53:d7:5e:af:72:75:df:ef:
ee:73:51:c3:2f:1f:3a:c2:77:e6:c0:e8:60:5c:54:ea:da:1d:
d5:4f:43:d4:e4:00:81:a0:5b:b1:25:d7:26:44:4d:ef:14:f9:
b4:87:41:ab:8f:f0:94:22:4d:43:91:a9:fd:27:2d:8e:ce:94:
91:ab:68:ac:89:d0:b9:b6:40:13:b2:81:e7:50:c2:42:02:8d:
b4:55:ac:d6:02:3a:87:3c:36:e0:48:5b:47:47:ff:3e:14:cb:
f0:f2:8e:ef:39:9d:78:5a:35:a8:d5:aa:77:6c:68:a2:11:e0:
27:5b:b7:31:74:88:ef:9e:ab:f6:a4:72:55:ed:02:89:4c:bf:
0e:69:20:e8:bc:ca:ef:51:33:ea:34:64:31:5a:27:8f:fd:7b:
75:9d:6e:3b:a0:96:8e:17:ec:7f:da:e2:e0:d8:67:1d:5d:ac:
d9:c8:2c:52:01:d9:ea:ac:29:6c:ef:ff:b4:d1:73:4a:78:58:
f9:68:9f:1f:77:e2:bb:d3:ad:2e:c6:9f:c6:17:2b:ea:24:ed:
22:16:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:24 2026 by rpki-client