Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/1LHEn3caqRdFx-FrVpJMaU0UBGw.roa
File: 1LHEn3caqRdFx-FrVpJMaU0UBGw.roa (raw, json)
Hash identifier: JGFRK1aYZGR9nC1KAUCC1g5sne7T9Z9BLwNpceN88z4=
Subject key identifier: D4:B1:C4:9F:77:1A:A9:17:45:C7:E1:6B:56:92:4C:69:4D:14:04:6C
Certificate issuer: /CN=00641b7b07721d62066039d185f063b59dd1c538
Certificate serial: 019F236869F0AD0E3725DD961077ED86B3A6
Authority key identifier: 00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/1LHEn3caqRdFx-FrVpJMaU0UBGw.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215399
IP address blocks: 194.62.45.0/24 maxlen: 24
2001:67c:e18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:f0:ad:0e:37:25:dd:96:10:77:ed:86:b3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00641b7b07721d62066039d185f063b59dd1c538
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b1c49f771aa91745c7e16b56924c694d14046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:db:90:3b:38:df:e8:b8:d9:00:40:ab:b1:
41:f4:39:32:8e:8c:83:35:3d:c1:14:f8:67:06:79:
e0:ab:63:ba:bf:fe:07:0e:25:05:45:92:77:db:8a:
a8:a9:f7:b5:ef:46:20:93:c7:da:d3:68:91:22:0d:
5c:f5:49:20:72:d9:32:34:2b:14:40:43:62:16:b4:
27:25:c3:9b:47:74:61:94:db:09:a4:39:1c:df:61:
64:df:bb:f1:25:f0:74:6e:e1:a3:94:1e:56:6b:ac:
d5:c9:40:b4:a1:42:78:aa:c1:a9:96:d5:40:22:dc:
c8:a2:2c:10:83:52:f9:f4:55:56:db:b4:6e:96:63:
cf:2b:d8:13:63:66:1a:cd:c0:8a:a1:e1:ac:39:a3:
72:f5:07:45:e5:e4:9b:f6:5a:a6:c6:95:fe:f4:d3:
52:20:c9:a5:bc:8a:8d:d8:06:64:10:c5:b5:2e:c6:
e7:a8:54:68:93:34:ab:75:96:21:35:9c:fd:31:39:
3d:03:37:fb:14:c2:ff:13:60:a4:31:c6:d1:8f:01:
d8:36:00:01:70:b2:c7:a9:ba:c3:d3:53:88:30:2d:
26:74:a2:60:37:38:48:df:1d:ca:6d:cd:52:e6:79:
5d:1e:4a:ad:c7:b5:e9:5e:e3:ff:ba:55:bb:25:45:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:C4:9F:77:1A:A9:17:45:C7:E1:6B:56:92:4C:69:4D:14:04:6C
X509v3 Authority Key Identifier:
keyid:00:64:1B:7B:07:72:1D:62:06:60:39:D1:85:F0:63:B5:9D:D1:C5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQbewdyHWIGYDnRhfBjtZ3RxTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/1LHEn3caqRdFx-FrVpJMaU0UBGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/AGQbewdyHWIGYDnRhfBjtZ3RxTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.45.0/24
IPv6:
2001:67c:e18::/48
Signature Algorithm: sha256WithRSAEncryption
15:06:20:02:33:b7:5f:f9:83:4b:1f:86:ee:39:df:07:73:63:
98:c3:8e:8e:f4:77:80:23:87:c7:9b:86:53:1b:c2:36:9c:3b:
62:d2:a8:a5:bc:29:ad:52:5c:6c:78:a9:cf:3b:24:1b:65:16:
fa:04:97:c3:1e:72:30:fb:61:ca:ad:5d:d8:a3:a4:6f:2c:15:
c4:f1:52:a6:42:0f:ab:85:12:6b:fa:19:04:78:61:eb:1f:04:
57:a0:89:95:94:51:9a:d8:e7:bb:f9:0d:67:96:c8:0a:66:83:
0b:5b:fd:39:92:87:bf:b8:74:a0:7b:e1:ea:4b:53:12:08:51:
db:3f:73:24:83:b2:78:ed:da:ae:bc:cb:d9:2c:52:ff:69:c0:
5a:71:eb:6e:80:4a:f5:07:fd:66:ac:3e:4f:0a:c9:cd:a2:e6:
7c:08:a1:6e:d7:1f:ec:92:25:c7:16:41:87:ab:eb:ae:7f:f4:
28:d4:33:09:d5:42:bb:43:c4:96:a8:34:2b:26:01:c7:1c:90:
a7:ed:c9:c7:16:6a:72:4f:b1:a8:9d:4c:f7:f6:43:d9:41:a8:
11:5e:d7:9d:2e:8e:b3:42:6d:2f:19:ba:9d:b2:7d:10:57:ee:
87:04:99:1e:28:f2:ef:bf:73:f0:0b:76:45:31:12:65:c5:65:
6c:3c:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:42 2026 by rpki-client