Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa
File: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (raw, json)
Hash identifier: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=
Subject key identifier: 8A:47:1D:BF:54:0E:06:84:B3:0D:67:E3:08:20:D9:83:DC:9C:0C:77
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 019F23683D7AB0DEF046206E1556165C740A
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30790
IP address blocks: 194.54.184.0/24 maxlen: 24
194.54.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:7a:b0:de:f0:46:20:6e:15:56:16:5c:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a471dbf540e0684b30d67e30820d983dc9c0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:ac:27:8e:d4:60:d3:8a:ce:4d:05:cd:c5:
e5:b0:19:ca:c4:98:7f:cc:27:94:d4:e0:99:00:a7:
43:65:69:cb:24:97:62:e0:d7:cd:20:8c:1a:1b:3b:
a1:d0:5e:a5:69:f2:3a:c3:8f:4e:8e:e3:6f:80:18:
94:d3:a8:22:c0:c3:6e:bd:07:86:dd:59:a4:73:cd:
ce:f7:47:5f:df:fb:03:2a:87:31:d0:45:70:75:c2:
0d:c8:b0:63:a6:ae:8b:a2:f6:81:9a:c5:de:0c:e3:
e8:ae:b5:ea:a2:38:e2:23:d4:92:b2:9a:07:be:b8:
9b:3a:ba:82:49:a4:44:80:58:4c:5d:32:9a:6a:c4:
a2:15:fe:d2:50:db:4e:a9:8c:b5:34:bf:f2:50:f2:
20:65:ae:2b:63:f7:29:58:f7:56:12:4c:e0:4b:26:
a2:ea:cf:4a:a8:73:ac:fe:96:19:d2:91:7e:bd:3c:
97:b1:c8:bb:fa:ad:ab:d1:c7:f5:2c:60:10:13:5f:
fc:21:0d:c4:ff:84:80:0a:88:6b:dc:76:02:97:d3:
36:e6:66:3e:e7:1d:a3:ed:69:36:a3:d4:34:36:97:
50:19:e5:8b:5e:0c:15:39:f9:e7:1c:8e:c2:59:97:
f1:42:ca:4c:59:64:56:ee:0d:a9:8e:a6:8e:72:de:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:1D:BF:54:0E:06:84:B3:0D:67:E3:08:20:D9:83:DC:9C:0C:77
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:71:bf:9f:fe:1a:1b:70:d5:b4:10:17:b2:f9:b9:61:b6:a8:
db:5b:f3:83:5c:b3:64:f2:7a:1e:ea:48:4b:d8:59:73:f9:ad:
ae:ec:5d:a7:02:b5:48:80:4f:84:28:27:f9:77:4f:55:d0:b9:
1b:98:60:1a:3f:a3:02:35:63:4e:d6:33:d8:1a:0f:9a:d0:7d:
c7:2b:ff:c1:d2:d3:fa:44:f2:65:41:97:dc:d5:f0:16:5e:96:
dd:a8:87:9b:07:48:a2:00:5e:2f:44:25:d4:d1:fb:49:dd:39:
05:da:3a:28:19:6f:95:71:c8:2c:1d:fa:35:20:87:99:3e:2b:
b1:f9:50:64:af:08:1e:e3:c6:54:47:00:f8:26:bb:1a:5f:d5:
e7:89:20:23:a5:23:73:4c:bf:60:7c:34:5d:6d:b9:68:90:ae:
8c:c0:90:09:28:0b:7f:68:73:1d:8a:aa:7d:50:8c:74:f5:13:
0f:12:cd:49:58:34:4f:7d:ae:85:68:58:48:54:c5:c5:80:79:
7b:e6:a6:60:b1:16:30:9d:28:22:cd:b3:5f:a3:e8:a3:ea:92:
24:0a:31:a5:33:14:fe:ca:fa:5a:a5:23:3e:87:0e:9f:de:01:
f9:78:d4:4d:9d:a3:8a:d3:4f:7e:ff:e3:2a:6d:27:e4:55:4e:
c4:d7:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:18 2026 by rpki-client