Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/lfsA-CiV23r-qpL7I-OyuqCLA7E.roa
File: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (raw, json)
Hash identifier: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=
Subject key identifier: 95:FB:00:F8:28:95:DB:7A:FE:AA:92:FB:23:E3:B2:BA:A0:8B:03:B1
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019F18AD227104D7EE5074329DC8E469CA01
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/lfsA-CiV23r-qpL7I-OyuqCLA7E.roa
Signing time: Tue 30 Jun 2026 13:17:07 +0000
ROA not before: Tue 30 Jun 2026 13:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219313
IP address blocks: 89.234.128.0/24 maxlen: 24
2a00:5880:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ad:22:71:04:d7:ee:50:74:32:9d:c8:e4:69:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jun 30 13:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95fb00f82895db7afeaa92fb23e3b2baa08b03b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:7a:9b:0f:8b:27:57:ba:44:31:1d:9a:7d:
4f:21:1e:7f:8e:4d:84:eb:7c:21:4e:63:b5:4d:db:
92:31:4b:19:70:03:9e:f3:96:07:74:25:2c:3e:f2:
4c:b1:3b:88:8e:5a:86:f3:6d:a1:f0:22:46:9d:c4:
96:24:5c:bd:1a:99:6f:ea:4c:7f:4d:2f:a4:62:41:
82:5d:cf:c5:98:37:05:4f:78:1e:48:fe:5d:a3:58:
fd:8c:76:f6:9a:ed:40:53:f1:88:be:d4:18:dc:81:
43:15:ac:b2:21:13:ce:2b:24:f7:e3:24:a4:f0:4f:
d5:4a:5c:ce:95:d6:26:30:df:8f:9c:c5:13:c7:28:
91:9a:e1:60:5c:65:84:e9:bc:b0:be:59:be:24:ba:
69:26:51:45:2b:29:6b:25:d7:2e:b7:96:ed:78:e2:
25:d1:89:d2:6a:ed:19:d4:45:3e:62:bc:d7:7e:0f:
fc:8a:d6:81:d9:c4:7c:dc:db:2d:4c:8e:4d:75:2d:
f3:6f:de:5f:c3:3f:34:ce:f9:a6:da:53:62:37:ca:
ac:53:e8:f4:1c:1e:8d:3e:14:36:95:cf:c5:66:63:
fd:13:5f:47:23:8a:4d:8d:2c:6f:b3:e5:d4:79:57:
8c:f5:f9:60:e5:d1:7c:33:59:2f:ec:4f:03:93:d0:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FB:00:F8:28:95:DB:7A:FE:AA:92:FB:23:E3:B2:BA:A0:8B:03:B1
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/lfsA-CiV23r-qpL7I-OyuqCLA7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.128.0/24
IPv6:
2a00:5880:40::/48
Signature Algorithm: sha256WithRSAEncryption
cc:51:19:6e:17:b4:3a:71:7c:40:34:9b:96:9a:58:e6:ec:25:
a4:39:c7:14:ca:78:4c:0e:4f:63:f6:4b:e7:62:d8:c0:0c:99:
64:5f:4e:3b:f2:ad:99:93:67:f6:56:52:67:e4:db:35:96:6f:
fe:37:c0:8f:a1:e3:01:9c:77:7e:e4:c8:b1:9d:e8:fa:99:52:
5b:a8:ff:5a:61:52:d8:20:5b:45:a2:30:18:8c:99:f2:e6:2f:
ae:c7:f3:f5:79:da:10:81:a6:32:9f:3e:58:57:79:4b:47:04:
41:16:23:0c:e3:54:69:2f:1f:94:8a:03:32:c3:80:78:19:81:
0d:24:b7:7c:66:75:a8:21:8b:e7:ec:20:c0:a6:fe:bb:66:a5:
4b:3f:47:af:60:ee:12:f2:11:36:51:04:1d:f6:21:9b:3f:f3:
38:78:b5:1e:f4:be:ee:f0:62:75:56:f7:1b:ad:d7:1a:37:a4:
91:94:5d:fb:4a:43:d5:f9:30:4b:cb:bb:ca:62:de:f6:2c:ca:
93:b0:d9:aa:52:eb:b2:b7:ee:4a:bd:6a:c7:55:2f:d1:20:ac:
3c:5c:93:8b:ea:78:17:c9:49:4f:e9:a3:30:f5:fa:89:bc:a3:
e0:5a:21:04:c2:b7:0d:b2:8e:3f:ce:c1:d9:5c:97:b6:c0:0a:
1e:ed:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:53 2026 by rpki-client