Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa
File: 1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa (raw, json)
Hash identifier: 9Mjx66ZRNBzOgezobspQ/N2rC12olhMnxONbq/i+6C8=
Subject key identifier: D4:B8:2E:D7:EC:C1:F7:29:6C:4C:B4:3F:CC:91:55:DB:1E:50:06:D7
Certificate issuer: /CN=e91c145f7c2ab613f0962256e8ba211056379cad
Certificate serial: 019F2368ADDE1CD2AA0A168DC3FEC6353014
Authority key identifier: E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196954
IP address blocks: 185.28.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ad:de:1c:d2:aa:0a:16:8d:c3:fe:c6:35:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91c145f7c2ab613f0962256e8ba211056379cad
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b82ed7ecc1f7296c4cb43fcc9155db1e5006d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:9e:79:1b:85:8b:11:f0:87:30:f5:c9:09:
89:3b:57:96:75:de:5b:47:3a:82:0d:72:72:85:65:
77:64:ad:e9:b8:72:a3:4f:5e:27:2e:de:11:bb:3b:
a4:5f:39:ac:e4:63:26:74:4d:3e:b1:46:7f:d8:98:
bf:12:e1:cb:30:ea:90:b4:b2:f3:47:3a:58:da:3c:
51:65:85:fa:b7:61:19:75:db:42:22:fd:a9:0d:72:
4e:31:71:4d:2a:cb:ea:86:7b:30:33:4a:7d:e3:1a:
3b:86:94:bb:16:12:64:db:82:2c:f4:59:d8:6b:19:
d6:67:59:d5:de:19:25:88:42:fc:22:c6:eb:ec:d7:
82:7b:6d:e0:0a:6e:1b:9c:33:f6:80:9e:2e:da:13:
01:88:ae:dc:27:35:83:05:8c:a6:51:49:a8:d4:e1:
5b:13:a8:f0:dc:7a:02:06:39:45:f7:21:1c:e7:c9:
b1:b4:4d:e7:1d:86:5b:18:62:d7:5c:54:41:af:34:
7f:4f:ea:2b:aa:a7:ca:4a:96:7d:76:b5:9a:3b:df:
7d:02:61:94:55:45:95:d2:5a:fb:77:10:32:e6:c6:
d2:28:6b:d2:b1:4c:21:be:20:61:38:59:01:51:50:
8a:70:4e:8a:ae:16:98:a2:c4:b2:14:a9:b2:d7:59:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:2E:D7:EC:C1:F7:29:6C:4C:B4:3F:CC:91:55:DB:1E:50:06:D7
X509v3 Authority Key Identifier:
keyid:E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.116.0/24
Signature Algorithm: sha256WithRSAEncryption
12:51:38:ba:60:b6:e9:d2:a8:58:46:68:f3:fe:69:43:32:54:
9b:2c:26:42:dd:29:ad:5a:0f:c9:4a:0e:35:10:f8:ca:7a:a2:
97:55:a1:e0:c1:5c:24:64:c9:1c:2a:cb:23:1e:28:4a:1c:3e:
e2:e2:32:cd:ef:ae:41:67:54:a3:9a:87:21:54:35:20:75:68:
6b:e5:a0:d5:b5:de:85:52:af:bd:d0:83:7c:df:27:7d:21:8a:
6a:bd:d4:8c:c2:cd:90:17:e5:57:84:3d:2a:d3:0c:46:dd:04:
ba:72:8e:d8:76:51:0e:e7:40:19:a3:7f:36:fb:9a:64:b8:cf:
a2:c5:db:1f:a4:dc:51:c0:ae:aa:f6:6b:f9:66:c7:47:4a:5f:
89:74:fa:2c:fd:b3:33:60:38:18:9e:a4:21:75:59:39:91:c1:
5f:ba:ae:fe:d4:d7:98:2f:6b:92:3d:16:82:74:12:39:2f:e7:
64:27:d2:c7:af:9f:f5:7b:12:b2:a1:01:82:21:16:f5:6b:ee:
e6:c1:57:8c:50:bb:bd:c8:62:0f:00:79:2e:59:f2:c8:0a:3d:
45:62:3d:64:04:fd:4d:e1:b2:67:dd:b2:6a:61:b5:d2:41:a6:
78:10:e3:1f:47:06:69:29:c6:14:24:0d:04:7a:08:94:e9:5b:
0b:52:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:09 2026 by rpki-client