Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa
File: ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa (raw, json)
Hash identifier: BKzDpz91rBGUfq74JahLX4rr+D8vrn+n570lJmbIsaI=
Subject key identifier: 96:3A:F9:12:FF:25:B6:3F:90:D5:66:E4:18:30:EF:31:5B:0E:99:87
Certificate issuer: /CN=1dd948535128826a76bff708dd171887464f761d
Certificate serial: 019F2369306E39E0083DCBB2AD106DED9E3B
Authority key identifier: 1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39292
IP address blocks: 185.80.247.0/24 maxlen: 24
2a01:1b1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:6e:39:e0:08:3d:cb:b2:ad:10:6d:ed:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd948535128826a76bff708dd171887464f761d
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963af912ff25b63f90d566e41830ef315b0e9987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:42:0a:d1:50:25:49:8f:20:58:86:88:fe:
e6:27:9c:6b:53:8f:06:a2:74:33:8c:f4:6d:90:56:
ea:78:88:91:af:4f:51:13:fe:bf:2d:54:55:4c:9e:
63:81:4f:5e:d9:d8:3c:58:54:0b:6c:56:53:d9:f9:
dd:b5:c7:a1:67:09:d0:20:b6:6f:a7:f6:ed:f7:a5:
e2:e3:39:2f:da:e2:19:2d:5b:08:ac:ae:3e:5c:4b:
5c:b8:49:8f:6f:9e:0f:ef:2d:cd:aa:25:0c:d9:72:
86:3c:6b:ab:75:ec:d8:81:fc:63:b1:0c:16:a4:c0:
4c:49:2a:d0:6f:f2:d1:14:ab:59:23:09:0d:70:f9:
25:21:6a:6e:25:fc:82:22:c4:fd:56:0c:b9:3f:9a:
b0:b2:e2:0d:2c:cd:92:4a:99:d2:fe:5d:b0:91:52:
e1:7d:41:ec:a7:fe:00:cd:5e:d3:eb:8d:82:8d:7a:
a2:57:b1:e0:a4:cc:f9:d0:b3:94:fe:0d:e0:61:30:
42:99:ff:52:17:e4:b1:a8:43:72:63:9a:34:94:d0:
20:b1:22:8a:f5:12:54:cb:4d:4f:00:3c:fb:32:10:
c0:86:8e:e9:be:83:f7:f7:d3:ad:d4:6b:ca:ae:00:
69:d0:18:4a:3b:f3:e4:31:66:93:8d:93:51:01:b4:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:F9:12:FF:25:B6:3F:90:D5:66:E4:18:30:EF:31:5B:0E:99:87
X509v3 Authority Key Identifier:
keyid:1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.247.0/24
IPv6:
2a01:1b1::/32
Signature Algorithm: sha256WithRSAEncryption
1a:7f:f5:db:12:ca:be:d7:53:db:db:5c:03:7b:9f:7e:6d:07:
0b:e0:6f:c7:30:1d:69:a6:65:5e:1d:18:83:ba:38:c5:a3:ee:
a6:c8:f4:bb:10:46:32:49:ee:ad:d1:b3:7d:20:cc:c9:94:1f:
3b:16:2f:b8:43:6e:57:c4:4b:a1:d4:f3:15:fd:5e:99:eb:17:
04:21:f9:48:fe:13:b1:06:25:93:03:db:14:b5:2a:54:3e:92:
fd:64:d2:b0:eb:53:d1:32:34:c2:53:e2:3c:94:32:06:86:91:
52:1c:e5:ed:2b:e4:72:f1:85:45:59:dd:e0:b3:af:44:26:5e:
be:b7:a8:ab:48:92:6a:7b:9a:8e:a3:12:a3:a3:2b:79:49:d7:
c2:48:ae:22:2e:dc:f8:95:1a:55:5c:47:d7:f0:cf:20:e0:cf:
9d:1a:e0:77:0a:cc:03:45:48:cb:96:90:1a:50:90:ee:1c:77:
8b:ee:f1:20:57:ac:ac:88:17:db:1e:4c:ab:28:3d:49:c8:f1:
2c:b5:33:33:71:43:34:20:20:79:22:39:4f:c3:32:cd:9d:4f:
0b:b4:5e:a4:90:cf:11:51:d0:2e:c7:85:9e:da:d8:fe:b9:cd:
a2:ec:92:01:cc:60:61:aa:cb:bd:42:76:c0:1e:cd:0a:9b:1e:
83:0e:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:26 2026 by rpki-client