Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/luf1YTB9xStV-pMcK9RhrzVtwoI.roa
File: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (raw, json)
Hash identifier: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=
Subject key identifier: 96:E7:F5:61:30:7D:C5:2B:55:FA:93:1C:2B:D4:61:AF:35:6D:C2:82
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019F889157B97F2DC90760C9F89FCB1E9A53
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/luf1YTB9xStV-pMcK9RhrzVtwoI.roa
Signing time: Wed 22 Jul 2026 06:44:14 +0000
ROA not before: Wed 22 Jul 2026 06:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35819
IP address blocks: 185.3.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:91:57:b9:7f:2d:c9:07:60:c9:f8:9f:cb:1e:9a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Jul 22 06:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96e7f561307dc52b55fa931c2bd461af356dc282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:2a:17:49:03:f0:ea:c5:64:a5:03:77:0f:
02:a1:14:4b:84:3a:ff:dc:82:12:8c:fe:85:9f:1e:
76:ad:89:2d:ed:a1:3b:04:01:c1:62:9c:fd:0a:54:
72:97:c3:e8:57:ea:0d:9b:d6:5c:6b:80:1a:bc:2a:
82:02:ff:5b:d3:04:ef:57:eb:94:2c:ca:7b:30:d3:
10:d9:41:48:84:e9:79:ff:5e:78:05:5b:58:79:65:
48:d5:46:70:24:99:16:36:76:c7:58:f6:8e:ed:13:
0e:ce:03:f5:53:ad:67:f9:66:a3:05:cb:b6:88:50:
9a:2c:b0:42:a7:3c:d9:65:0c:97:8f:40:c8:c1:9a:
1f:73:53:41:f9:ad:b6:d7:21:f8:24:07:e5:5d:b4:
11:8d:be:e8:59:74:85:68:a6:45:97:1e:62:7a:b8:
31:2d:40:60:bb:ad:ea:19:3a:e6:ae:61:4e:92:d0:
a6:1e:f3:07:99:d5:97:33:c4:c8:24:08:84:c4:0f:
ef:fe:66:be:89:c9:af:7a:c5:5f:b8:dd:5e:b2:45:
05:d6:bd:a5:2e:47:51:6d:b5:5d:0a:23:95:04:f2:
1f:db:32:12:8f:53:bf:17:74:e5:e3:64:c2:7e:14:
0b:8e:8c:7f:63:fa:eb:2b:84:39:c0:4e:f5:db:27:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:F5:61:30:7D:C5:2B:55:FA:93:1C:2B:D4:61:AF:35:6D:C2:82
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/luf1YTB9xStV-pMcK9RhrzVtwoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.123.0/24
Signature Algorithm: sha256WithRSAEncryption
af:79:b2:c9:ce:81:a8:8f:58:ed:9e:9c:f7:32:0c:73:1a:fa:
22:ff:97:90:17:46:e7:e7:8c:b0:d2:99:c1:c2:93:4a:8e:a8:
14:70:6e:f6:48:95:be:36:b2:2c:18:21:a5:b5:98:0e:dd:de:
ea:e2:5d:32:e2:65:ee:0f:09:ad:1f:f2:eb:0b:67:ba:17:d7:
34:ba:15:50:19:50:06:10:f8:53:58:24:48:22:41:21:1b:c9:
04:aa:eb:72:23:c6:f5:8b:d1:94:e4:1e:5a:17:71:67:4d:e8:
12:da:f7:9b:62:97:f8:25:c4:c9:7e:fd:30:f2:48:96:4b:59:
44:fd:68:ee:72:ff:09:88:ea:3c:d2:e9:49:30:0a:15:b1:59:
e5:e5:1e:a5:d9:3f:ad:c2:e4:4f:82:53:e3:9c:82:91:73:d3:
30:5d:75:6d:83:0f:84:8e:91:3e:27:1b:28:8b:a4:69:7d:c0:
87:2a:87:f5:c7:1a:c1:72:7f:a2:d3:e6:81:c7:33:01:5a:73:
d1:1f:fd:2f:5e:29:f2:c8:b5:1d:6a:40:4d:2a:3b:f2:92:d8:
6b:6d:45:95:1c:df:36:72:1d:ce:39:c1:e8:a2:6f:41:df:9b:
3f:10:7b:f1:0b:b6:34:2c:d1:20:74:5b:1d:a6:ed:cc:3f:6d:
03:d8:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:57 2026 by rpki-client