Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa
File: lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa (raw, json)
Hash identifier: 3krPNydBrnfH95dkgxU42zpY/EBgzcVqcHPdZ1SpwQs=
Subject key identifier: 94:AA:6C:68:C8:56:67:47:D5:EB:59:0F:A8:A6:58:C7:5B:55:0A:36
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A8D7EFA0FB832850512EE87C7BAF
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3313
IP address blocks: 194.20.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:d7:ef:a0:fb:83:28:50:51:2e:e8:7c:7b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94aa6c68c8566747d5eb590fa8a658c75b550a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:ea:43:77:39:5a:89:58:7a:b2:0e:53:81:
2f:f1:77:f2:d9:12:7b:8b:36:c4:52:e6:2f:aa:d2:
a4:d5:1f:62:d4:2e:53:b7:40:52:49:02:7b:e9:10:
13:70:7a:c4:7c:05:72:d1:47:13:f4:c2:41:2f:c5:
b5:e6:36:ff:63:c8:13:78:2e:52:c4:84:ca:7b:68:
b1:f8:c0:bd:4b:4f:cc:83:31:40:7c:55:23:8c:3c:
90:3f:fc:33:5c:a5:0e:c1:40:aa:32:82:63:2f:4e:
af:bc:28:26:ba:80:1d:17:81:82:d6:34:3c:9e:c4:
d6:3a:35:68:66:b6:2d:0f:b4:87:47:84:9d:6e:56:
31:9a:05:e2:f8:15:8f:70:1c:17:fa:53:a4:ea:10:
49:c7:4f:01:23:72:df:23:15:f2:34:7e:0d:80:11:
1b:9f:0c:b1:52:18:c8:73:1e:99:ee:6a:6e:f2:fb:
9d:0e:61:b3:4f:bd:2e:9b:54:66:2f:31:bf:74:b4:
41:9b:f5:93:6c:1a:5b:b7:aa:3b:3f:90:8e:44:fb:
ba:63:b7:7a:cf:c9:aa:58:c3:75:d2:f3:d5:d3:76:
40:6b:c6:92:d3:af:53:75:74:01:af:b4:9a:41:95:
31:52:b8:7c:34:25:61:3f:2d:82:fa:23:c0:c0:f2:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:6C:68:C8:56:67:47:D5:EB:59:0F:A8:A6:58:C7:5B:55:0A:36
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:36:05:66:95:d3:0d:81:f5:f3:93:dd:ac:f9:00:47:c9:da:
06:68:1a:26:9c:2e:bd:c8:d2:63:28:b4:05:80:0d:a5:50:b1:
fb:55:26:9f:f5:7d:36:1a:80:6b:82:66:94:99:ba:4a:02:64:
29:b1:a0:4f:8c:db:c9:ef:1b:08:ce:96:30:cb:0a:ba:b8:a0:
2a:08:70:25:73:0d:dc:2e:02:ea:00:fe:90:6a:99:c4:24:ae:
84:a1:49:06:63:c8:f5:07:da:9f:b8:d2:40:33:ab:03:1e:de:
1f:e9:fa:56:b2:1a:31:97:8e:14:35:e5:44:cf:7f:fc:23:af:
10:40:9c:5a:a1:eb:97:d4:49:b1:49:12:03:2c:8b:0a:9d:ff:
88:84:7d:78:ec:8e:a2:99:df:fb:30:30:d3:7a:43:26:6a:e5:
31:67:98:f1:59:04:76:60:0e:7c:6c:81:26:bf:58:bc:2c:c8:
2c:a9:59:ad:e8:51:8b:3e:92:8e:cd:d5:01:68:14:e6:11:f6:
14:03:26:94:cd:0e:15:27:c9:17:59:a5:65:ff:8f:58:af:42:
9f:b6:fd:21:06:9a:33:2d:59:83:1c:05:67:32:eb:90:08:aa:
03:5b:a9:0e:83:41:b9:7c:3f:9f:6c:31:bb:83:ab:c3:88:cb:
e5:a0:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:40 2026 by rpki-client