Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ldz175_ioHvDggj0yjpEpRRrFl8.roa
File: ldz175_ioHvDggj0yjpEpRRrFl8.roa (raw, json)
Hash identifier: ZMJACSGFEElctMIWYPsj+vgkd5v2pF7zQE9V1sKvYyk=
Subject key identifier: 95:DC:F5:EF:9F:E2:A0:7B:C3:82:08:F4:CA:3A:44:A5:14:6B:16:5F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A00FE430123345EA61E3C62652E5CC608A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ldz175_ioHvDggj0yjpEpRRrFl8.roa
Signing time: Mon 17 Aug 2026 13:23:27 +0000
ROA not before: Mon 17 Aug 2026 13:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218942
IP address blocks: 2a03:5840:15c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:e4:30:12:33:45:ea:61:e3:c6:26:52:e5:cc:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 17 13:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95dcf5ef9fe2a07bc38208f4ca3a44a5146b165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:37:27:4d:96:cc:c8:b4:0a:97:2f:b3:cd:
48:e8:80:72:7b:cf:10:47:77:09:f4:87:01:00:1a:
c2:17:c9:59:30:b6:63:43:c8:e2:9d:99:90:48:03:
73:a0:d1:84:59:7e:9a:3f:d1:66:ff:f4:78:02:1f:
04:5a:a0:64:c5:3c:4e:af:77:76:6a:14:2a:23:c6:
e5:4e:8d:b7:32:e5:98:eb:d5:f2:aa:1d:86:94:8d:
50:e3:9e:e1:b9:cf:02:2f:e1:09:a9:6b:c0:a5:c8:
07:e2:16:77:b5:e8:8d:e5:d7:43:00:ae:f7:da:c8:
ae:98:cc:69:f0:9b:dc:50:cc:5c:d5:f2:4f:31:10:
cd:a3:a1:cd:c8:7e:dd:13:55:f4:d0:7a:84:96:9b:
d4:ac:b8:cc:1c:21:b0:99:a5:06:79:cd:bf:44:ec:
7a:5d:31:22:6b:58:1d:c5:d2:9a:2e:e8:78:ec:6b:
a8:23:6e:b9:25:0e:67:90:c7:3a:b2:4b:90:41:7f:
e5:03:be:67:c8:03:72:13:9a:8e:b4:48:43:70:cd:
90:51:c5:69:c6:53:05:c9:60:eb:b0:5c:09:bc:7a:
5d:17:b0:84:16:84:a5:65:34:49:73:65:ac:67:7e:
c3:7d:40:32:58:7a:1f:cd:4f:fb:4a:de:fa:cf:7e:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DC:F5:EF:9F:E2:A0:7B:C3:82:08:F4:CA:3A:44:A5:14:6B:16:5F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ldz175_ioHvDggj0yjpEpRRrFl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:67:b2:f1:53:cd:2f:90:32:3f:be:ba:fe:33:2a:7e:32:96:
72:bd:0f:ce:83:29:41:83:3b:49:18:62:3b:49:3f:58:ae:1c:
88:b4:63:69:0f:65:cb:40:1a:7c:28:d8:ae:87:1b:df:17:d3:
74:33:33:27:a5:d5:7f:5a:cb:54:a3:a8:57:28:9e:5b:20:2b:
69:be:c9:7a:f7:bd:55:86:67:81:31:24:61:51:07:38:b7:f3:
df:fe:79:4a:ac:9c:9c:b7:4e:b9:d8:2f:5b:f0:b2:0c:df:d9:
c6:2c:63:a1:e5:e8:a0:3e:1f:c2:c8:73:d2:ee:a1:10:c5:e3:
36:30:43:f9:0a:7f:4b:83:92:21:69:39:57:32:f1:28:92:ec:
1d:f4:1f:10:d7:f7:a1:78:42:cc:60:37:11:ff:42:ac:6b:59:
df:38:42:4e:8b:aa:9b:71:d6:f1:99:76:22:ed:d3:60:a9:ef:
58:d7:35:4f:72:1f:a1:55:17:d3:38:d4:f9:87:e7:8b:1c:85:
e1:a8:50:5b:8d:7a:d0:0e:1b:8c:91:9a:cc:72:bc:44:30:91:
aa:20:1b:94:38:a9:75:77:79:7e:90:87:00:2f:11:07:c4:09:
3d:ee:a7:89:fd:80:b8:44:c3:55:cf:d1:59:2f:80:ab:99:72:
fe:3c:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:48 2026 by rpki-client