Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/LSqdZqPLeMj0WF3bOfGVjXrkKPg.roa
File: LSqdZqPLeMj0WF3bOfGVjXrkKPg.roa (raw, json)
Hash identifier: OIE4+P3PEn/I07aEV9GQuGJcuXIcFIr+O77IW6ZxCxs=
Subject key identifier: 2D:2A:9D:66:A3:CB:78:C8:F4:58:5D:DB:39:F1:95:8D:7A:E4:28:F8
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019F31AB658378755E4FCCF711D0BF39826E
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/LSqdZqPLeMj0WF3bOfGVjXrkKPg.roa
Signing time: Sun 05 Jul 2026 09:45:43 +0000
ROA not before: Sun 05 Jul 2026 09:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 185.136.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:ab:65:83:78:75:5e:4f:cc:f7:11:d0:bf:39:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 5 09:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d2a9d66a3cb78c8f4585ddb39f1958d7ae428f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:ce:ed:96:e5:9d:e0:41:7d:d8:bb:9c:b6:
07:89:bc:96:cc:c9:93:2f:22:e3:6a:f6:55:fd:ab:
b5:03:a0:11:ec:de:f3:3f:c1:66:fa:60:a3:cf:e0:
82:53:0e:39:21:59:4a:2a:00:4f:bb:c8:52:e0:b8:
77:59:c1:1a:a7:22:a1:73:26:ae:04:2f:6e:e9:59:
a8:64:79:f8:2b:be:36:5c:9f:36:85:36:82:ef:94:
40:43:fc:31:9e:0a:58:b0:c1:50:bd:26:a4:21:47:
be:1a:e7:4d:54:fe:2c:28:47:80:4c:6b:30:c3:86:
7c:31:3f:b9:d3:e5:29:a2:92:5e:ec:d5:50:9d:66:
86:26:5e:ca:9b:37:7f:93:3b:69:92:31:45:63:99:
15:c2:47:46:0a:0c:eb:70:71:bf:13:ab:7d:fd:1e:
7e:81:fd:7e:d9:56:03:61:97:7a:c4:68:c0:80:23:
4f:3b:b8:d5:e0:18:5c:78:df:62:8c:2f:02:5e:1f:
a0:0a:c9:b0:dd:61:dc:d8:79:7c:dc:26:ba:e3:da:
9f:f2:f1:32:34:ca:a0:e7:4a:1b:4e:37:24:bf:6c:
28:45:68:e2:96:04:bd:e9:cd:d2:4d:f5:4b:cb:49:
ab:a0:04:0e:eb:fd:7c:92:9f:d7:13:7c:c0:74:b1:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:9D:66:A3:CB:78:C8:F4:58:5D:DB:39:F1:95:8D:7A:E4:28:F8
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/LSqdZqPLeMj0WF3bOfGVjXrkKPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
86:88:59:4e:a9:a6:f9:89:f0:0e:0f:d1:ef:32:d3:09:a2:db:
ee:37:9c:fc:48:ef:16:d4:a1:ba:0c:bc:77:9b:85:b4:31:18:
a7:b3:e4:5e:d7:51:54:86:70:be:13:c5:ca:6f:ba:f6:cd:c4:
fa:44:78:1b:79:35:3d:91:14:3f:5f:43:fb:75:f0:4f:3e:9a:
98:29:3d:e7:9b:0a:9c:5d:3f:eb:ba:e7:d7:ce:15:8e:38:df:
0e:63:82:f9:d1:c9:3c:71:01:db:9f:09:98:8c:19:f0:d1:aa:
04:39:51:d4:01:7f:e8:cc:5e:43:52:5d:cf:ec:e4:0a:6d:21:
1e:50:0a:c3:1d:8b:7f:6d:c0:41:f7:01:4b:0e:37:11:bb:32:
b9:a6:f5:2c:0f:d6:32:71:7a:0e:a7:f6:f8:04:b2:0f:1b:4d:
20:4a:3d:47:27:ac:eb:99:52:2f:8b:ec:f2:66:f9:e5:1c:71:
21:3c:d6:f8:7f:40:42:3a:a8:07:9f:2c:5b:1a:68:98:0b:56:
3a:34:b6:6d:d1:41:5a:21:3e:9f:02:69:19:6a:74:53:3e:c5:
6b:95:85:a3:2f:23:52:a5:b5:33:9d:3b:e4:8c:37:ed:3c:1f:
fb:39:bd:f5:ad:11:86:8e:48:64:da:ef:91:50:0c:02:cc:72:
2b:91:7f:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8xq2WDeHVeT8z3EdC/OYJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjYwNzA1MDk0NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJhOWQ2NmEzY2I3OGM4ZjQ1ODVkZGIzOWYxOTU4ZDdhZTQyOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwjO7ZblneBBfdi7nLYHibyWzMmT
LyLjavZV/au1A6AR7N7zP8Fm+mCjz+CCUw45IVlKKgBPu8hS4Lh3WcEapyKhcyau
BC9u6VmoZHn4K742XJ82hTaC75RAQ/wxngpYsMFQvSakIUe+GudNVP4sKEeATGsw
w4Z8MT+50+UpopJe7NVQnWaGJl7Kmzd/kztpkjFFY5kVwkdGCgzrcHG/E6t9/R5+
gf1+2VYDYZd6xGjAgCNPO7jV4BhceN9ijC8CXh+gCsmw3WHc2Hl83Ca649qf8vEy
NMqg50obTjckv2woRWjilgS96c3STfVLy0mroAQO6/18kp/XE3zAdLGqCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0qnWajy3jI9Fhd2znxlY165Cj4MB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvTFNxZFpxUExlTWowV0YzYk9mR1ZqWHJrS1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYiQMA0G
CSqGSIb3DQEBCwUAA4IBAQCGiFlOqab5ifAOD9HvMtMJotvuN5z8SO8W1KG6DLx3
m4W0MRins+Re11FUhnC+E8XKb7r2zcT6RHgbeTU9kRQ/X0P7dfBPPpqYKT3nmwqc
XT/ruufXzhWOON8OY4L50ck8cQHbnwmYjBnw0aoEOVHUAX/ozF5DUl3P7OQKbSEe
UArDHYt/bcBB9wFLDjcRuzK5pvUsD9YycXoOp/b4BLIPG00gSj1HJ6zrmVIvi+zy
ZvnlHHEhPNb4f0BCOqgHnyxbGmiYC1Y6NLZt0UFaIT6fAmkZanRTPsVrlYWjLyNS
pbUznTvkjDftPB/7Ob31rRGGjkhk2u+RUAwCzHIrkX/T
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:45 2026 by rpki-client