Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa
File: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (raw, json)
Hash identifier: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=
Subject key identifier: 96:73:9D:60:F4:9A:D5:F2:63:A7:D8:71:8D:69:77:12:0C:AB:59:87
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019E11BD43C3349C2F822664F4BC1CB19A79
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa
Signing time: Sun 10 May 2026 11:54:36 +0000
ROA not before: Sun 10 May 2026 11:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 185.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:bd:43:c3:34:9c:2f:82:26:64:f4:bc:1c:b1:9a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: May 10 11:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96739d60f49ad5f263a7d8718d6977120cab5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:81:0c:fc:78:29:20:b9:b4:d4:82:44:3d:
3f:9a:7d:91:cb:bc:b1:9a:5b:ae:01:0d:70:1e:7a:
0d:0e:5c:31:83:8d:6a:88:ea:17:46:01:8c:f2:c6:
dc:50:bb:e6:00:ec:14:f1:ce:54:1f:0a:00:de:1a:
95:46:3c:9a:41:14:89:50:3d:89:db:a4:6f:84:26:
13:57:6d:65:ad:3d:b6:13:9d:55:72:be:ad:2d:23:
67:be:d3:cc:5d:8b:ef:6a:5a:8e:34:a5:69:76:2c:
eb:71:fd:4f:ea:7a:13:be:73:88:e7:d4:63:f6:79:
c7:ef:f1:83:4e:dd:57:f6:8b:d3:5c:00:12:11:76:
43:22:c4:9d:4c:61:5c:05:41:24:fd:1d:37:de:c3:
c9:08:81:65:b8:4b:65:ac:27:c0:94:32:3e:a1:85:
64:3e:4f:88:8f:09:c9:72:f9:40:24:9b:6f:d3:f9:
ad:75:fe:f8:91:fe:05:66:8b:d5:af:be:bf:12:c2:
4f:b3:2b:5e:8c:5a:83:48:4c:49:a3:48:a2:41:61:
96:c5:2e:5c:8d:c4:d4:c7:9a:de:8c:15:8e:c4:73:
53:fd:41:66:06:36:48:76:a4:17:f2:11:44:66:60:
4c:a7:ed:be:95:bc:fb:2a:e8:40:1e:8f:db:7d:41:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:9D:60:F4:9A:D5:F2:63:A7:D8:71:8D:69:77:12:0C:AB:59:87
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.157.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bf:e8:72:cf:9d:e8:eb:ab:8b:f0:9d:5f:1b:42:1d:07:21:
aa:18:85:ec:01:94:c0:2c:26:cc:b6:7f:ee:c1:74:60:20:49:
29:68:fc:96:6b:03:e2:00:e7:73:e5:3e:01:40:cd:b9:6e:bd:
9d:e0:4d:a0:a7:23:1d:25:b3:2b:31:04:b5:01:21:72:6c:76:
a3:9e:51:71:d7:26:cf:28:20:94:9c:88:45:98:c5:5d:b7:19:
4d:2b:ed:c6:88:bc:4f:7f:5e:68:be:ec:9a:25:4a:ae:a4:5e:
bd:00:60:01:35:d3:c6:7e:29:78:17:60:26:b0:d5:ab:92:23:
b1:08:62:f3:9d:a4:50:bc:d0:24:cc:fb:e2:92:c4:04:ec:c0:
29:ef:4e:ad:db:83:f7:56:f3:4c:21:4f:69:8a:4d:1d:aa:bc:
e6:5c:0c:a9:72:7b:58:9a:13:a6:dd:38:fc:cd:1d:db:66:db:
1d:a9:15:b4:c0:03:cc:7f:ca:50:14:5b:81:31:54:9c:7e:85:
7b:dd:12:71:76:d0:3d:4c:72:cd:b9:26:56:29:9c:f5:bc:b9:
7e:74:81:2c:b7:dc:dd:61:88:9e:74:37:ee:59:c0:d0:6c:e0:
00:8a:5c:c9:a6:3e:43:8f:fa:ca:52:4f:91:a9:51:d3:b2:f3:
e1:cf:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:52 2026 by rpki-client