Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lf7c--DZ93PNNb0_f-BQqGACsvM.roa
File: lf7c--DZ93PNNb0_f-BQqGACsvM.roa (raw, json)
Hash identifier: 1DwgbGHJtPj3hya2FmhobIzwDNVmq+s/euanF5AHR2U=
Subject key identifier: 95:FE:DC:FB:E0:D9:F7:73:CD:35:BD:3F:7F:E0:50:A8:60:02:B2:F3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D2441B59C255B5692A5DAD9BFC4F05F7F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lf7c--DZ93PNNb0_f-BQqGACsvM.roa
Signing time: Wed 25 Mar 2026 09:09:39 +0000
ROA not before: Wed 25 Mar 2026 09:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202765
IP address blocks: 206.203.2.0/23 maxlen: 23
206.203.2.0/24 maxlen: 24
206.203.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:41:b5:9c:25:5b:56:92:a5:da:d9:bf:c4:f0:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 09:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95fedcfbe0d9f773cd35bd3f7fe050a86002b2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:68:9b:3e:0a:0b:f4:61:04:db:ba:9d:07:
3e:87:d8:6d:47:ef:c9:45:1f:ce:69:f8:a0:cb:30:
f6:de:75:4b:15:88:7f:7c:b3:e9:88:87:14:98:c1:
9b:78:8b:44:f1:68:5c:21:71:fc:45:f3:e0:84:72:
05:a5:a9:04:01:e3:6a:26:0c:39:d2:d0:17:73:36:
78:ef:1b:e2:c0:0f:db:fe:d7:2b:b9:5a:a6:f3:76:
3c:50:25:a9:88:c3:4e:f5:9e:15:ac:de:86:d1:98:
86:f5:95:84:73:b2:79:37:3a:d9:6e:40:ff:2b:08:
c0:8b:09:dd:fb:e5:97:04:03:18:a2:30:63:47:5e:
78:3a:de:ce:b7:2f:98:dd:44:5c:29:93:82:55:55:
36:ab:4b:64:e1:2e:00:d2:67:46:d8:79:4e:e3:58:
32:4f:80:c4:7f:d7:6e:94:9a:cc:03:62:01:af:e1:
70:92:0b:61:36:1a:c1:af:5a:25:81:a1:7d:df:65:
b9:2b:3b:93:22:b8:09:36:5f:9f:de:76:d5:56:f7:
ec:b6:2f:69:fc:4b:b2:8e:b7:de:67:4a:9b:11:c0:
1a:13:49:e3:cd:4b:cd:2a:9a:07:8b:99:13:46:0e:
ed:c2:a9:22:07:4c:9a:54:3d:fb:be:80:0b:1d:5c:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:DC:FB:E0:D9:F7:73:CD:35:BD:3F:7F:E0:50:A8:60:02:B2:F3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lf7c--DZ93PNNb0_f-BQqGACsvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.2.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:2b:c3:35:62:1f:bc:84:80:d5:46:d8:2d:78:77:7e:6b:49:
e8:83:d0:1d:e9:6c:c3:04:9c:6b:9e:05:1a:c8:49:be:61:cc:
a1:bc:1c:c9:c0:fe:83:40:f4:3f:e1:bc:27:80:e5:3b:a7:e5:
10:9a:e9:2d:68:a5:0c:bb:9e:23:c6:49:73:87:ed:17:b9:e0:
4b:96:46:71:22:f4:95:2c:eb:f3:65:4b:8c:9d:a5:63:93:fd:
2f:54:86:72:99:03:b0:cf:c3:c7:4c:5c:26:40:60:68:db:a1:
c1:d7:72:af:b7:cb:5a:56:77:d0:00:72:f9:ea:0e:25:ea:e6:
20:80:7d:23:21:a3:f1:9a:d5:0a:0a:48:b3:8f:3b:95:ba:a9:
5c:6e:e7:02:6b:60:89:35:e9:b5:2a:9e:45:4b:cf:b4:d9:52:
20:1e:13:50:46:6f:0b:90:db:39:27:97:f5:79:2f:a1:df:69:
87:02:e3:c4:9c:50:6f:fa:bd:04:26:90:e2:d1:15:41:73:5e:
3a:02:bf:20:cd:e0:a2:fb:cd:ae:ad:93:0f:e1:1c:c7:e6:61:
c1:66:1d:8d:2f:5e:e5:c1:d3:ff:10:3b:44:f3:a6:ea:b1:a7:
80:93:bb:c9:a8:c6:a6:8b:13:6f:e8:1b:34:a2:e4:6e:dd:35:
46:02:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:17 2026 by rpki-client