Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lBRSab6KPCS0HTsnbYgrhBCMcDw.roa
File: lBRSab6KPCS0HTsnbYgrhBCMcDw.roa (raw, json)
Hash identifier: Xv0TPHadiShXa1nbiDoNDlpuU89ATTa5leZL0l8VsgA=
Subject key identifier: 94:14:52:69:BE:8A:3C:24:B4:1D:3B:27:6D:88:2B:84:10:8C:70:3C
Certificate issuer: /CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Certificate serial: 019F23682E179B6ACE1EDF13363661CBAB96
Authority key identifier: DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lBRSab6KPCS0HTsnbYgrhBCMcDw.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149522
IP address blocks: 192.94.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2e:17:9b:6a:ce:1e:df:13:36:36:61:cb:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94145269be8a3c24b41d3b276d882b84108c703c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:03:09:09:ea:14:96:24:af:97:6d:d8:5e:
e3:80:dd:e4:b9:c5:2a:fd:f8:fc:33:1f:1c:32:10:
11:9e:60:a9:b1:9a:19:bc:db:b5:4a:74:3e:cb:ab:
4d:a1:b5:1f:0f:15:fe:8f:cd:29:20:69:36:49:85:
72:b3:aa:48:9d:02:0b:04:3b:7e:57:a8:a0:ee:62:
18:d0:04:a7:eb:a6:74:dd:cd:ca:08:13:59:42:05:
1c:a2:76:05:55:50:93:39:df:d8:e3:63:bf:6b:87:
e0:9b:cc:78:5a:30:c2:c8:7f:5f:2c:e6:2b:82:ac:
03:34:18:1a:3d:29:c5:8d:e1:ba:94:03:8c:57:5c:
0f:16:a5:e5:b1:a8:8b:9d:ee:57:fd:a2:73:1c:f6:
bb:4e:41:5b:69:a5:11:0b:5a:11:c3:8c:4b:89:74:
43:c9:6c:98:e0:29:79:ae:39:c8:d1:bb:e3:2c:46:
a0:36:61:de:a2:58:98:4a:82:66:fd:19:63:e3:de:
e2:93:00:a7:1f:69:c2:bf:65:e5:53:b0:53:29:24:
b0:f6:69:89:23:54:02:05:58:22:37:e3:dc:e5:2e:
e4:d7:1f:9c:f6:8f:c9:25:06:9c:82:be:4b:1e:4f:
33:62:9b:5a:05:6e:0e:81:21:ed:21:54:f3:e8:06:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:52:69:BE:8A:3C:24:B4:1D:3B:27:6D:88:2B:84:10:8C:70:3C
X509v3 Authority Key Identifier:
keyid:DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lBRSab6KPCS0HTsnbYgrhBCMcDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b0:76:b6:d2:12:47:b8:20:6e:b7:d4:04:8d:e8:fd:da:98:
ff:ce:73:8e:3f:0c:7f:49:6d:76:63:b9:ff:3c:f4:19:c2:39:
a9:46:c9:87:56:29:ec:a4:6c:30:1e:0a:10:21:c3:5a:04:7a:
0e:b9:a7:ee:0d:32:55:a8:35:e2:6a:3b:a7:3d:14:42:f8:45:
a9:0e:48:7c:11:88:7b:ea:66:1f:35:30:76:5d:fa:27:58:44:
88:e1:3d:7f:99:ec:df:4c:d3:93:9e:43:42:60:61:68:dc:f0:
1c:3b:31:be:0d:88:96:fb:62:ee:ab:b4:36:01:fb:1f:69:c4:
26:89:ee:0d:be:91:9c:2d:ff:9c:f8:4d:72:4e:7a:3b:f5:37:
10:e5:f7:9b:cd:4f:dc:5f:0c:f7:df:8f:7c:ea:b9:ea:b4:a7:
b3:73:b6:eb:81:d0:51:fd:c2:fc:6d:e6:64:98:11:ad:5b:2a:
34:25:15:34:c5:8b:56:9b:ff:a0:71:e6:05:66:50:0e:ee:21:
6d:8b:d5:9a:db:18:3a:05:08:45:84:1d:d0:a7:ec:8c:0c:a9:
a1:d4:de:22:8b:c6:0f:b7:f0:62:0d:c0:19:04:7a:c1:12:e6:
bc:60:4b:f2:2e:2b:91:10:40:a0:7b:f9:5f:9d:fa:18:6b:23:
fa:ab:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:34 2026 by rpki-client