Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa
File: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (raw, json)
Hash identifier: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=
Subject key identifier: 96:57:42:B1:0D:61:81:30:83:72:B1:56:05:65:34:4B:97:82:D6:71
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019F2368AFBE04127F14036CF2B9BEE69ACE
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214431
IP address blocks: 88.135.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:af:be:04:12:7f:14:03:6c:f2:b9:be:e6:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=965742b10d6181308372b1560565344b9782d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:c7:ab:8b:09:ee:23:58:98:0d:75:dc:f5:
03:3e:3e:d1:93:05:2a:6d:8d:3a:b7:09:92:09:2e:
fd:53:d7:2b:05:1a:64:4d:f8:81:78:a0:31:84:23:
0d:7f:06:05:b7:17:f5:b0:3b:2c:c1:ea:73:74:00:
be:2e:2d:2e:03:8c:fd:e4:6f:61:b5:bd:7d:67:08:
2d:de:8c:69:02:65:c6:77:69:ad:12:00:46:a7:1d:
a8:96:45:db:b8:f3:b0:b4:26:3b:7a:a1:0b:20:ed:
51:8e:f0:45:db:3e:29:aa:9a:9d:60:2b:0d:cb:06:
b6:ae:bd:28:c5:2e:99:ba:6f:52:d5:d8:b0:42:5f:
9c:02:d4:24:c1:da:ba:c8:91:f7:29:d9:14:8d:50:
d6:cc:12:21:8b:aa:df:17:64:c9:da:7f:d8:c0:d4:
d8:14:3f:82:69:ac:54:9c:f0:55:b6:ff:e6:a5:53:
35:08:85:3b:54:05:92:dc:ef:33:fb:71:8d:2c:b1:
fa:76:8f:fe:97:35:ac:d7:55:45:c6:c4:a7:8b:89:
99:c0:7d:c1:fc:42:22:f0:e6:c4:b6:aa:57:e8:83:
36:86:80:df:b8:28:b5:7a:b5:f1:a1:c9:90:fe:37:
4d:ff:60:55:d2:24:15:e7:49:c0:8c:09:1a:1b:57:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:57:42:B1:0D:61:81:30:83:72:B1:56:05:65:34:4B:97:82:D6:71
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8f:1c:42:fd:72:b1:7a:91:e0:df:e5:c9:5c:a4:e3:73:b9:
bd:e2:a2:15:ca:b7:8d:89:f2:cc:4d:ec:89:e6:cb:f4:f4:24:
6c:8f:1e:29:09:73:81:2b:04:52:d2:23:da:1d:1c:06:c7:4a:
71:d9:d7:e8:04:10:2b:cb:8c:38:56:72:1b:7a:b6:dc:d6:2b:
5f:8a:2b:d1:e6:57:e9:b8:00:30:a1:ae:6c:eb:c4:74:06:48:
29:6b:f3:bd:3a:bc:24:06:94:71:38:86:1d:55:2c:e2:06:c4:
79:36:46:f3:9a:97:ac:fb:a2:96:76:0a:c4:e3:ee:5c:30:8e:
b7:ea:c8:09:8c:4d:9d:70:88:3c:16:0a:0a:5c:1b:2d:bd:6e:
1c:14:b1:4c:51:49:ba:8f:01:24:29:bb:17:9d:68:b8:74:07:
7e:fb:47:72:c8:23:d1:5f:28:89:1b:05:1c:a1:7f:f3:79:46:
11:4a:94:12:53:b7:e9:ad:57:6b:7c:e9:4f:05:7a:8c:b2:9f:
56:60:58:c9:97:2e:54:9a:dd:41:72:56:60:9e:5d:f6:f5:93:
d2:69:f6:d9:aa:b9:89:27:92:24:8b:2b:f6:e3:2a:82:53:41:
b5:97:cf:dc:be:55:72:02:f5:ad:51:2a:2c:d0:1c:ee:e8:05:
01:19:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:07 2026 by rpki-client