Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa
File: LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa (raw, json)
Hash identifier: gKgqt+xB14y4tjX9J2jVn1Ajs6kkgwnL+2zmYJeQx68=
Subject key identifier: 2D:A7:2E:54:BA:5B:3B:73:23:B3:C6:D4:7C:0E:0B:FA:63:25:51:B5
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019F7FB85347D8140D85D2F06CFA20FE72EB
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa
Signing time: Mon 20 Jul 2026 13:30:14 +0000
ROA not before: Mon 20 Jul 2026 13:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210064
IP address blocks: 91.198.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:b8:53:47:d8:14:0d:85:d2:f0:6c:fa:20:fe:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jul 20 13:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2da72e54ba5b3b7323b3c6d47c0e0bfa632551b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:c7:f8:1d:52:3d:e5:f2:8c:77:14:96:10:
0f:5e:10:02:09:49:c0:69:04:f3:5f:a0:f5:70:4f:
0b:d7:4b:f4:3e:27:b8:a4:f8:22:d8:6d:6c:2a:2c:
49:cb:9f:48:6d:bf:30:99:35:4d:08:37:04:66:26:
fc:34:a3:0f:94:6b:24:c6:26:78:a2:64:5b:23:f1:
32:21:4c:4f:d3:ac:d9:da:7e:a9:fe:3e:38:02:3d:
17:fc:4c:d9:89:5e:79:e7:97:66:ba:54:af:f9:b0:
9f:13:42:6c:c6:6f:85:7f:df:e0:3b:ef:3e:05:a8:
70:a9:a5:f6:67:63:3a:e7:45:3b:6f:0f:62:25:58:
86:77:d8:eb:d2:f4:7a:8f:fe:d0:58:97:3c:a2:eb:
ca:2f:56:a4:e0:b7:b8:90:fe:48:dd:9b:9d:3c:ea:
46:77:c3:3b:5f:50:6d:dd:3a:ed:f7:cc:22:d0:7a:
6c:c8:09:81:f6:33:b6:63:f1:b2:b4:d8:b3:9b:a4:
61:d6:f6:f2:4a:f3:c9:18:a5:bf:5f:8e:53:ab:30:
da:8e:28:e0:a5:b6:52:ad:3d:ea:34:01:54:cb:92:
9f:88:3f:f5:e3:e4:5e:be:06:6c:a9:13:79:c5:e4:
8c:cb:03:5a:8e:a5:e2:5c:fc:30:c8:c4:85:e8:72:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:2E:54:BA:5B:3B:73:23:B3:C6:D4:7C:0E:0B:FA:63:25:51:B5
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/LacuVLpbO3Mjs8bUfA4L-mMlUbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:97:2a:48:88:4b:71:25:ae:91:ce:5d:07:19:76:28:05:ba:
a7:68:5f:88:78:17:f7:f6:e5:49:07:f9:b5:b4:b0:62:49:7d:
45:58:93:cc:b5:7e:ca:a1:5e:56:80:53:5d:cd:af:c4:75:47:
b3:0c:d4:d1:7e:3d:89:60:2c:9d:8f:a0:14:98:5c:0c:10:5a:
82:9c:e8:4f:c1:1c:42:84:67:71:d9:16:68:dd:c7:ed:96:c9:
46:22:c1:16:bf:e8:3a:e4:1c:2f:9b:25:46:77:8a:bc:33:d6:
07:d4:49:49:b0:6a:22:6a:1a:2d:67:40:23:3d:86:ff:88:a4:
c3:86:c6:cd:3a:b0:a3:ee:b1:5c:80:db:c4:f6:70:05:c8:a0:
83:fa:e7:83:e5:b5:29:fd:3c:d7:6a:db:a9:be:6a:32:47:c4:
d0:9f:7a:cb:08:d6:c9:c1:d8:f4:3f:ed:78:c1:04:25:e9:3a:
49:c8:3e:39:7d:03:ff:de:3f:c3:bd:20:44:67:0e:6d:79:54:
a0:de:cb:7a:ee:41:6f:0b:c0:ed:bd:d8:a5:54:d8:e7:53:58:
a3:e1:d1:e4:95:2d:30:9d:a1:8f:ef:ac:a6:b5:61:40:c3:6d:
6d:7c:53:ea:24:15:4f:4c:10:58:9d:cf:67:ee:fa:26:b3:8c:
75:e9:96:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9/uFNH2BQNhdLwbPog/nLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2
MDVlMGUwHhcNMjYwNzIwMTMzMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGE3MmU1NGJhNWIzYjczMjNiM2M2ZDQ3YzBlMGJmYTYzMjU1MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBjH+B1SPeXyjHcUlhAPXhACCUnA
aQTzX6D1cE8L10v0Pie4pPgi2G1sKixJy59Ibb8wmTVNCDcEZib8NKMPlGskxiZ4
omRbI/EyIUxP06zZ2n6p/j44Aj0X/EzZiV5555dmulSv+bCfE0Jsxm+Ff9/gO+8+
BahwqaX2Z2M650U7bw9iJViGd9jr0vR6j/7QWJc8ouvKL1ak4Le4kP5I3ZudPOpG
d8M7X1Bt3Trt98wi0HpsyAmB9jO2Y/GytNizm6Rh1vbySvPJGKW/X45TqzDajijg
pbZSrT3qNAFUy5KfiD/14+RevgZsqRN5xeSMywNajqXiXPwwyMSF6HK19wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2nLlS6WztzI7PG1HwOC/pjJVG1MB8GA1UdIwQY
MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt
ZGZmM2JjZWU2YjY2LzEvTGFjdVZMcGJPM01qczhiVWZBNEwtbU1sVWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2
LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZuMA0G
CSqGSIb3DQEBCwUAA4IBAQBqlypIiEtxJa6Rzl0HGXYoBbqnaF+IeBf39uVJB/m1
tLBiSX1FWJPMtX7KoV5WgFNdza/EdUezDNTRfj2JYCydj6AUmFwMEFqCnOhPwRxC
hGdx2RZo3cftlslGIsEWv+g65BwvmyVGd4q8M9YH1ElJsGoiahotZ0AjPYb/iKTD
hsbNOrCj7rFcgNvE9nAFyKCD+ueD5bUp/TzXatupvmoyR8TQn3rLCNbJwdj0P+14
wQQl6TpJyD45fQP/3j/DvSBEZw5teVSg3st67kFvC8DtvdilVNjnU1ij4dHklS0w
naGP76ymtWFAw21tfFPqJBVPTBBYnc9n7voms4x16ZYF
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:55 2026 by rpki-client