Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LgUUeqh3ims71RnrUA_xarGOS54.roa
File: LgUUeqh3ims71RnrUA_xarGOS54.roa (raw, json)
Hash identifier: XM8ylwmVXASMTtkjCxORM+AIHZRMGcONYjUO8loTY5w=
Subject key identifier: 2E:05:14:7A:A8:77:8A:6B:3B:D5:19:EB:50:0F:F1:6A:B1:8E:4B:9E
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A1C5B467B283602C4D77CD563D5BE92DD1
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LgUUeqh3ims71RnrUA_xarGOS54.roa
Signing time: Tue 10 Nov 2026 13:44:56 +0000
ROA not before: Tue 10 Nov 2026 13:44:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216394
IP address blocks: 185.7.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:b4:67:b2:83:60:2c:4d:77:cd:56:3d:5b:e9:2d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Nov 10 13:44:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e05147aa8778a6b3bd519eb500ff16ab18e4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:b4:7c:8b:4d:87:c3:50:92:2f:44:fa:d1:
c1:75:ed:a7:58:3c:1d:4e:6f:e4:dc:57:be:b1:d6:
db:5a:87:24:21:4f:22:43:92:82:68:10:b9:5c:44:
b6:4f:1f:d9:51:6a:b1:f4:d4:b6:28:e6:26:45:20:
dc:92:b3:fc:f3:48:3a:81:37:7c:41:9f:63:2c:01:
67:0e:7a:74:52:bc:93:7a:b4:f7:db:c7:08:5f:cf:
f5:bc:44:75:0d:30:b9:0e:50:30:6c:38:df:9f:d8:
65:3f:f5:86:3c:d4:1a:0e:55:05:ed:72:7f:0f:f1:
23:57:41:74:e6:bd:3b:8e:49:6b:af:0c:24:09:1b:
c8:5c:b8:97:13:7d:6c:d0:9b:d4:f0:49:96:33:96:
c9:48:be:b4:47:66:dd:c4:ea:d5:f6:c1:a2:0c:4d:
4a:de:a6:30:e3:e4:be:3b:bd:5d:79:27:61:85:43:
e2:e2:2e:78:6d:d8:83:00:37:6b:17:7a:e8:9b:24:
77:71:ea:2d:b1:d0:85:1f:4d:cd:97:f1:00:8e:47:
ac:0b:08:5c:55:15:6a:43:c8:21:75:bf:35:a7:0f:
b7:9f:9f:b5:42:b7:4c:52:d5:81:61:a4:7d:c3:f2:
b0:f9:86:bf:23:97:61:2c:d1:d6:38:f1:c1:1c:1d:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:14:7A:A8:77:8A:6B:3B:D5:19:EB:50:0F:F1:6A:B1:8E:4B:9E
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/LgUUeqh3ims71RnrUA_xarGOS54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:76:0b:66:70:70:2c:6b:1e:e8:e2:2c:8c:f3:14:90:93:
ab:80:1a:1d:d5:9f:cd:8c:15:e0:89:90:64:39:cc:df:24:93:
e7:5d:26:99:23:3f:dd:dc:06:40:c3:ed:bb:49:05:b7:a8:80:
fa:df:a1:18:1e:5a:65:ad:e9:a6:1d:93:5c:58:16:37:d8:13:
e4:53:ea:5b:1b:27:f0:10:6a:00:a6:88:fd:d7:72:05:6f:7a:
9d:b1:a2:2b:4f:4d:ac:12:ff:74:fe:54:7b:d9:41:fe:eb:71:
2e:93:61:80:f4:68:ef:c2:25:42:52:13:7c:10:ee:95:a5:bb:
75:5a:30:e6:02:2c:70:ca:e4:06:0b:b5:44:ee:6c:7a:e7:6b:
60:8f:8e:5b:20:e3:ac:05:78:c1:62:02:12:87:e7:a5:dd:ef:
0d:3c:c3:77:3f:a1:c9:ef:b1:aa:b2:96:51:1f:bd:38:a6:ae:
d1:f6:6f:b2:13:f2:3b:0d:33:c6:ef:1f:f9:dd:d5:8d:d8:22:
36:84:d5:c0:58:27:62:82:6d:7a:67:cd:fc:e8:9e:ce:b2:21:
93:ac:e1:3e:44:73:25:99:05:09:da:8e:59:5b:0b:bf:98:86:
90:e0:21:98:d4:84:2e:45:06:e1:39:81:e5:30:e0:c6:44:fc:
9f:96:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:50 2026 by rpki-client