Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/liNOwl4ffjTNwLOg4lX3c6vkVXc.roa
File: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (raw, json)
Hash identifier: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=
Subject key identifier: 96:23:4E:C2:5E:1F:7E:34:CD:C0:B3:A0:E2:55:F7:73:AB:E4:55:77
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019F18DD4C85B189EEE127F29006BFF0282B
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/liNOwl4ffjTNwLOg4lX3c6vkVXc.roa
Signing time: Tue 30 Jun 2026 14:09:43 +0000
ROA not before: Tue 30 Jun 2026 14:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34663
IP address blocks: 85.159.96.0/21 maxlen: 24
185.94.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:dd:4c:85:b1:89:ee:e1:27:f2:90:06:bf:f0:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 30 14:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96234ec25e1f7e34cdc0b3a0e255f773abe45577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:8b:4b:c9:87:1c:d1:e8:ec:f5:f4:8b:a1:
98:f8:bb:3a:00:a5:e2:a0:9a:d9:90:c6:dc:46:46:
e3:7e:14:89:da:1f:c7:4d:dc:e4:7a:6f:33:ee:f9:
82:3d:7f:a3:af:56:70:bc:e2:04:08:7e:80:40:53:
48:3e:7c:94:ba:cb:9f:8b:f5:37:89:87:5f:3b:b0:
b8:ec:06:7d:cf:8e:33:99:92:15:66:81:fd:d7:8d:
58:f1:29:80:e5:7c:e1:74:3d:4e:5f:67:33:8e:6d:
0b:e1:2c:b9:57:29:f9:48:3c:45:2b:5a:50:3a:0b:
83:d4:6b:c4:c3:3c:a0:f8:9f:80:60:31:51:bd:03:
a8:48:e3:36:91:19:f7:37:3a:27:39:7f:d9:4f:9e:
5e:e1:58:d6:cb:49:60:57:a3:46:46:c5:54:53:96:
fa:d5:1d:e5:f8:0d:9d:d5:dd:97:85:c9:b7:ec:ae:
47:de:7f:33:9b:51:b6:59:c3:87:21:8a:3b:77:94:
11:78:f5:d2:e5:08:2a:05:6c:5d:79:4a:20:9c:99:
1d:7c:e8:15:03:59:2b:64:13:ec:f2:eb:f4:fe:cc:
0e:99:6c:a6:f2:59:ff:89:08:23:fb:78:1a:08:68:
83:2e:ff:f9:78:a5:31:e0:b7:c3:b4:6a:7f:1b:59:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:4E:C2:5E:1F:7E:34:CD:C0:B3:A0:E2:55:F7:73:AB:E4:55:77
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/liNOwl4ffjTNwLOg4lX3c6vkVXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.96.0/21
185.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:cc:6d:e6:d6:8e:38:31:8c:81:5d:07:5e:d6:a4:44:09:70:
d0:1a:b8:34:d8:6b:be:b1:e1:8a:e4:c3:b2:f0:5c:9e:bb:ad:
9a:2e:4d:c3:09:13:b1:b6:4f:05:2d:a3:04:4f:f7:93:0e:3e:
ba:36:b0:89:35:47:2b:81:fd:37:8c:aa:15:e9:c3:c6:85:3f:
dd:6e:2b:1d:f4:00:73:b9:3c:33:08:33:b9:e2:62:e0:d0:2d:
00:19:d9:e0:80:db:c1:b1:99:4e:61:5e:96:a4:1c:db:67:3b:
4b:21:19:e6:23:b1:1d:10:25:85:f5:09:39:f8:af:34:a6:85:
44:fd:8e:5f:dd:6f:52:a6:a8:8d:74:a6:75:68:60:b6:ea:63:
df:61:81:12:de:f8:38:68:90:07:26:6b:17:f9:15:86:0b:4b:
52:de:b5:f0:08:2a:4d:bf:45:08:8f:c6:0e:29:16:da:0e:a1:
3b:4a:f7:81:48:35:c8:da:48:84:c6:df:56:eb:66:79:77:f3:
64:ae:17:1a:45:2b:a6:c9:7c:b8:d5:66:2d:8a:70:2a:0b:d4:
6f:39:f7:b5:94:8d:a9:f9:bc:d9:a6:b8:fb:ae:33:97:ed:1b:
26:28:66:cc:b5:4d:eb:35:8a:1e:fc:29:53:23:17:73:4a:a3:
1d:de:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:28 2026 by rpki-client