Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/lGUSShaLZbHrG2hxXfbd3gujno0.roa
File: lGUSShaLZbHrG2hxXfbd3gujno0.roa (raw, json)
Hash identifier: cC+BsnEt29P3BJfc+K3wjvfhKLVQR7wZcV1TURDbdTs=
Subject key identifier: 94:65:12:4A:16:8B:65:B1:EB:1B:68:71:5D:F6:DD:DE:0B:A3:9E:8D
Certificate issuer: /CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Certificate serial: 019F2368F668551C614DC17C93C53C199FC0
Authority key identifier: 3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/lGUSShaLZbHrG2hxXfbd3gujno0.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12905
IP address blocks: 62.176.160.0/19 maxlen: 19
185.250.244.0/22 maxlen: 22
2a06:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:68:55:1c:61:4d:c1:7c:93:c5:3c:19:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9465124a168b65b1eb1b68715df6ddde0ba39e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:91:11:17:c3:56:83:d4:32:80:5a:9f:83:
0b:0e:4c:66:7e:31:1b:e0:15:3b:b7:3d:41:45:41:
17:92:eb:d0:ca:4f:04:e1:58:31:21:62:f1:01:27:
88:3a:9d:12:a1:31:45:d9:0a:b9:ca:65:6d:82:c8:
68:76:27:67:5f:01:ee:48:fa:d4:84:30:e0:55:81:
7f:ba:e6:cb:8d:41:a3:96:af:3b:59:e8:74:0d:ef:
ec:90:43:6f:d3:e1:a2:7e:c7:19:2c:21:7e:d9:84:
cc:ea:1f:00:1c:bf:99:25:2c:e1:ae:4a:85:6d:78:
40:21:fc:fd:3a:bd:6a:1d:46:9b:9a:6f:14:45:77:
ea:ac:1f:d8:5c:1b:27:0d:98:93:47:dd:cc:d7:94:
72:48:bb:3a:86:1e:0c:d9:a2:a3:67:bc:c5:ac:a9:
20:f9:81:8f:de:68:54:b9:58:34:3f:cb:0e:51:d9:
fa:aa:3f:92:cf:9b:24:2d:64:bf:d6:ea:a1:5e:6f:
66:61:33:15:63:e9:48:17:9c:e4:0d:3a:e7:82:cf:
c0:f1:8a:59:48:1d:b4:38:e9:30:43:c2:1e:33:e5:
b0:0a:6a:ba:90:df:b8:b8:12:2f:81:60:27:a5:bd:
a9:fc:cc:d3:21:5b:2e:4a:d9:22:c4:33:2c:e1:43:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:12:4A:16:8B:65:B1:EB:1B:68:71:5D:F6:DD:DE:0B:A3:9E:8D
X509v3 Authority Key Identifier:
keyid:3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/lGUSShaLZbHrG2hxXfbd3gujno0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.160.0/19
185.250.244.0/22
IPv6:
2a06:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:9d:be:55:d5:f4:2f:3f:59:f3:29:d2:e9:61:79:01:f2:2d:
60:db:b7:77:34:86:07:95:e5:16:2d:5a:63:60:6f:b5:56:70:
22:96:f8:99:80:93:4a:5f:5c:98:34:9d:64:91:d7:e5:87:4e:
45:b8:96:8a:a8:e2:00:f9:be:4a:fa:01:d4:8f:ef:a8:a7:31:
38:38:67:3d:00:08:93:0a:5a:2f:e7:c4:28:5a:2d:5a:c1:70:
86:f9:5e:c5:92:2e:0c:b0:e0:30:ee:65:f8:e6:05:5b:86:68:
47:e5:a8:b8:6d:ce:2c:d3:2d:ab:c3:90:27:d3:ad:08:e9:80:
b5:5e:a4:25:f3:f4:d3:39:95:1b:b0:7d:ce:89:5b:9f:e4:be:
25:6b:e5:ac:87:1b:58:aa:19:2a:1d:60:12:73:ba:81:04:d5:
9c:56:12:1d:b3:e4:9a:2a:0b:51:4e:74:1e:ab:12:6b:17:c5:
34:a2:2b:ec:96:88:f1:69:cd:11:4f:05:09:6f:30:f7:40:ba:
04:27:46:fb:70:23:cd:83:48:af:4f:39:b0:9e:9a:fe:a4:5f:
04:81:03:55:6d:c7:c7:32:b2:85:c3:d9:84:88:cd:6d:cd:44:
c6:bb:a2:c7:46:ed:96:db:7e:5b:34:1f:eb:66:cc:ae:5d:d1:
c4:65:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:50 2026 by rpki-client