Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa
File: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (raw, json)
Hash identifier: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=
Subject key identifier: 95:49:43:F6:06:D8:B3:23:8B:AF:7A:F4:B3:75:1A:6B:82:95:BA:95
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236909C3586B8D360885E27FDFDFC272
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15935
IP address blocks: 185.188.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:c3:58:6b:8d:36:08:85:e2:7f:df:df:c2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=954943f606d8b3238baf7af4b3751a6b8295ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:c2:23:55:b8:8f:38:3c:80:78:41:1f:a5:
01:7e:95:48:7e:50:2c:a8:11:c4:e0:9b:af:5b:bf:
db:8e:f8:8f:07:39:56:7e:1c:82:3a:d4:72:93:1b:
f6:dd:b9:2a:82:ee:2a:f6:9a:52:49:5b:9c:9f:bd:
18:84:65:90:e4:25:df:59:cb:b6:13:46:55:60:3f:
87:b1:96:ee:7f:ca:0c:71:30:79:f3:9d:18:e7:d8:
b6:f1:ea:10:ac:26:e6:07:a1:36:6e:b7:da:d8:d4:
84:ce:9f:ed:61:e1:1e:b1:3f:df:6f:02:fb:9b:c9:
05:cf:0b:a1:96:c1:57:a7:b4:4c:99:b0:9d:f9:d4:
7c:2c:2c:57:d4:aa:05:bf:73:1e:76:13:b1:4e:1e:
da:34:aa:bf:53:8e:e4:ad:2e:28:71:19:d5:9f:ae:
f1:d2:bb:12:5e:5e:55:66:b7:2f:9d:29:09:46:0d:
ef:8e:0c:7c:6c:ca:07:a7:a2:fa:1e:43:d0:48:54:
72:34:c9:a5:4c:e0:06:66:9c:45:5d:be:c7:a2:79:
2b:3e:c6:e1:fc:1c:60:d3:22:2e:a6:e8:e4:d9:53:
5f:17:2c:7e:5b:18:72:6f:3b:b2:3d:93:95:f4:3f:
a1:23:c3:ff:90:24:47:ae:b6:3d:30:74:64:cd:0d:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:43:F6:06:D8:B3:23:8B:AF:7A:F4:B3:75:1A:6B:82:95:BA:95
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ee:89:e2:b7:bd:06:34:52:47:d3:2c:c0:d5:13:c5:86:c6:
9d:1b:d5:f3:8b:d4:10:67:22:e9:52:aa:84:31:23:ed:c8:2c:
97:0f:c6:d4:96:64:e4:4b:b7:9c:a2:42:c4:46:0f:d3:6f:8a:
f7:11:76:4d:0e:84:17:87:e0:f5:e1:08:4e:04:d6:72:a1:6b:
24:37:8f:e8:38:7c:43:69:66:c8:e5:f8:55:e0:e3:5a:d0:04:
0c:c5:f0:f7:a1:68:59:2f:03:7c:39:f0:ce:f2:18:4a:c2:6a:
f8:78:fc:c0:f4:e0:5c:a1:62:dd:62:f9:f7:0a:e5:98:33:3f:
18:53:9f:fb:a2:8f:53:64:57:dd:5f:ba:0a:6a:16:20:31:09:
08:20:08:da:af:8f:1d:f9:b3:d6:0c:01:11:d0:5c:ea:4e:a3:
e6:49:24:63:d4:63:70:1c:73:60:f0:36:d9:68:f3:4d:db:cb:
4d:da:54:e8:02:f7:45:ae:67:66:09:ab:09:b1:ed:b4:91:30:
f7:f8:d8:ae:f1:9e:65:37:ae:29:4c:37:f6:82:99:e8:10:4d:
ba:00:39:85:43:fc:8e:8d:3a:ed:37:77:81:0e:75:11:52:8e:
df:fa:f2:6b:a3:b6:87:e7:d2:32:8f:b5:bc:5d:59:4b:04:4b:
02:bf:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:13 2026 by rpki-client