Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/LQc7fYojJgzWlrEmCIeGuS-vbEs.roa
File: LQc7fYojJgzWlrEmCIeGuS-vbEs.roa (raw, json)
Hash identifier: O5mcfT9HPPgkRGxxvUjGl6E4bI5HZSLCf0z5Kwq7Vw4=
Subject key identifier: 2D:07:3B:7D:8A:23:26:0C:D6:96:B1:26:08:87:86:B9:2F:AF:6C:4B
Certificate issuer: /CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Certificate serial: 019F236830C3FB190FDF16E78DD86A88E957
Authority key identifier: EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/LQc7fYojJgzWlrEmCIeGuS-vbEs.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205679
IP address blocks: 84.234.114.0/23 maxlen: 23
84.234.114.0/24 maxlen: 24
84.234.115.0/24 maxlen: 24
88.218.252.0/22 maxlen: 24
92.118.164.0/22 maxlen: 24
185.210.36.0/22 maxlen: 24
2a0b:51c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:c3:fb:19:0f:df:16:e7:8d:d8:6a:88:e9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d073b7d8a23260cd696b126088786b92faf6c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:ee:23:84:0e:53:d0:92:1c:46:c2:50:da:
aa:e7:c9:51:3d:52:77:8c:a1:2c:85:20:31:bc:af:
5a:e8:e8:3e:98:43:5f:b0:8b:e8:5f:39:0b:b5:63:
7d:dd:31:f2:56:e1:c1:2f:21:40:a8:2b:63:8f:2a:
74:e0:c2:b4:9b:b8:68:bb:4e:8e:88:b0:40:e1:95:
20:4e:5b:7d:9e:2a:9d:85:61:7e:ad:83:4c:fa:2e:
8e:05:19:ee:b1:85:43:55:0e:48:2d:07:69:e4:e9:
08:39:ff:ab:a3:66:49:db:ac:87:77:01:0f:21:53:
3c:e8:46:49:ba:31:a9:8c:57:49:e6:0b:53:13:6b:
cc:01:d8:72:0c:be:a6:5c:dd:71:67:dd:f9:4f:85:
9e:36:5d:bb:49:2b:4b:1e:4d:b5:4c:90:33:85:8b:
72:fc:21:f5:fc:81:3d:2a:ef:89:4e:c5:f1:6d:3b:
b7:52:12:ef:4e:dd:d3:4f:c3:29:74:b0:73:a3:5c:
12:4b:44:ab:43:4b:d1:8d:5c:5c:dd:78:66:24:88:
81:cb:74:09:45:ad:dd:d5:5e:4f:b8:b1:f9:8a:ee:
05:55:de:b9:ee:f9:6a:f5:06:89:71:42:9d:f1:98:
83:1b:8d:53:6d:39:bb:03:ec:95:3b:a0:2c:af:e1:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:3B:7D:8A:23:26:0C:D6:96:B1:26:08:87:86:B9:2F:AF:6C:4B
X509v3 Authority Key Identifier:
keyid:EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/LQc7fYojJgzWlrEmCIeGuS-vbEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.114.0/23
88.218.252.0/22
92.118.164.0/22
185.210.36.0/22
IPv6:
2a0b:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:0b:f7:4b:1e:6f:64:b1:3c:d8:d1:f6:1d:f0:26:f2:c1:6d:
5b:24:f3:b3:43:0d:8b:8b:90:2d:bb:27:a2:06:6c:63:d2:e7:
b9:2b:2e:e0:0f:b9:3c:18:25:c4:39:7b:57:cc:3e:7c:b8:2d:
72:71:83:58:24:19:ee:cf:00:51:e5:34:c3:f2:a7:3a:48:57:
4e:e0:0f:62:59:3d:fc:06:ed:49:e2:c3:da:0b:50:5e:53:1a:
db:96:5e:5b:d8:64:be:ee:89:fa:6a:93:3a:f0:4f:45:3a:f4:
dc:eb:91:b5:10:5e:87:6f:d5:87:74:ed:5d:48:3b:13:da:b1:
f4:bb:01:5c:70:12:4f:02:58:dd:7a:48:48:36:90:d7:78:55:
22:26:bb:65:cd:4d:55:bb:41:9f:e7:46:3b:bc:f1:39:59:f3:
56:54:9d:01:dd:cf:72:2d:82:0e:fa:cf:bd:3d:75:bb:de:0d:
99:2d:c1:ff:19:37:91:5b:98:a4:a8:fd:0c:06:57:3e:43:b9:
d1:17:8d:e0:48:fe:95:25:ad:23:4d:e7:6c:c2:07:da:83:24:
6c:dd:71:e0:b0:a8:75:ea:2c:1b:36:32:3c:5c:80:b3:38:0e:
1d:41:5f:e1:91:07:b6:11:b9:66:fe:7b:51:92:25:01:9b:b2:
3c:bf:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:30 2026 by rpki-client