Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/lgKQY1jrZyDFCiYIeiyZtygDhmg.roa
File: lgKQY1jrZyDFCiYIeiyZtygDhmg.roa (raw, json)
Hash identifier: xAal+frG5vHvILaUbwJvEDBjUYIoE/U1MQ1PZt8g8nw=
Subject key identifier: 96:02:90:63:58:EB:67:20:C5:0A:26:08:7A:2C:99:B7:28:03:86:68
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 01A0ABC0B3C3D0E0671A776FE0A5E2D52428
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/lgKQY1jrZyDFCiYIeiyZtygDhmg.roa
Signing time: Wed 16 Sep 2026 19:45:27 +0000
ROA not before: Wed 16 Sep 2026 19:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213633
IP address blocks: 107.161.154.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
2a13:d200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:c0:b3:c3:d0:e0:67:1a:77:6f:e0:a5:e2:d5:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Sep 16 19:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9602906358eb6720c50a26087a2c99b728038668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:fd:fc:0a:ae:0d:d2:04:87:29:26:f4:c0:
51:2d:2a:b7:d3:bc:f7:3f:85:8b:ab:9a:fc:9c:00:
25:01:d8:4c:5a:df:96:79:7b:86:18:d5:9e:48:43:
48:74:b5:fb:92:fb:6c:d8:70:a8:28:3f:60:84:2a:
d3:47:a0:67:59:70:63:4c:86:56:72:fd:b4:2e:5b:
d5:96:b8:60:b8:59:0e:25:56:5f:b5:68:5b:39:cc:
9f:b8:af:b6:81:5c:46:d3:59:f7:62:44:60:94:38:
3c:b7:32:79:6d:94:26:95:72:08:f7:ae:fc:05:94:
cb:f1:1d:a8:e2:6b:49:b6:96:bf:32:75:14:2c:2d:
85:95:7d:c7:ce:b6:71:91:10:22:28:8e:e5:4a:50:
33:87:55:91:d5:35:9d:06:6d:c2:ac:27:fc:a1:b7:
bb:02:23:53:00:fc:0c:83:04:a8:c3:7a:8a:97:01:
64:89:6e:8f:99:a1:ad:2c:c2:8a:56:16:03:11:56:
f1:cf:37:ad:bd:70:05:a4:af:f4:60:88:d1:0a:76:
a1:2a:3f:c5:3c:c1:a1:80:4f:4d:ea:bd:02:0a:c8:
da:19:3f:e8:90:c7:d1:09:08:9f:37:1a:f4:33:4d:
bf:7b:2e:92:61:e3:0b:4b:70:c8:a8:f3:ae:c6:ea:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:02:90:63:58:EB:67:20:C5:0A:26:08:7A:2C:99:B7:28:03:86:68
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/lgKQY1jrZyDFCiYIeiyZtygDhmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.154.0/24
199.83.103.0/24
202.181.188.0/24
IPv6:
2a13:d200::/29
Signature Algorithm: sha256WithRSAEncryption
86:ce:fc:10:93:e6:66:1f:67:c7:eb:c4:96:78:9e:24:21:8c:
fe:64:cc:42:c9:9c:a6:1f:44:d6:45:d1:95:86:69:6d:4d:b0:
03:f0:ac:87:aa:4e:17:e5:42:76:e3:58:d1:71:dc:9c:91:2f:
e6:42:47:d6:a1:73:c7:a7:16:6f:04:ac:b3:de:70:77:ca:5e:
36:9a:ee:1d:f8:19:93:22:eb:55:9d:11:eb:0f:6f:f3:d6:32:
5c:30:f8:e4:86:63:fa:40:33:1b:b4:be:ce:5c:61:b7:23:b4:
b5:aa:f6:5f:c3:47:9a:0d:db:5a:53:f9:af:b5:e2:87:ba:2b:
1b:30:a1:b5:00:f7:b5:fe:f8:1a:69:81:21:cb:11:9a:fd:5a:
92:d4:ac:80:59:b8:13:1f:3c:b9:8e:0d:09:1b:a8:a5:91:87:
11:a8:3b:a4:6f:04:df:16:02:e1:a1:89:d7:5b:fe:71:1f:91:
be:23:38:9d:aa:5b:09:ad:bf:60:c8:df:fb:40:3c:a0:d4:c0:
ab:46:9a:bd:2e:a1:ce:b4:3f:54:a8:99:91:79:72:d5:10:7a:
16:0c:af:7a:29:f5:9a:8d:a7:a1:c4:32:cd:0d:ce:0f:94:6c:
04:d5:c1:19:67:61:01:2f:99:ed:56:69:6b:ec:6c:66:17:d0:
95:ee:8c:ea
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaCrwLPD0OBnGndv4KXi1SQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MTZkYzlkYjRlNDlkZTcxYjJmZDA4MTlkYWU4NTNhZWIw
NTNiMDYwHhcNMjYwOTE2MTk0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjAyOTA2MzU4ZWI2NzIwYzUwYTI2MDg3YTJjOTliNzI4MDM4NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ/9/AquDdIEhykm9MBRLSq307z3
P4WLq5r8nAAlAdhMWt+WeXuGGNWeSENIdLX7kvts2HCoKD9ghCrTR6BnWXBjTIZW
cv20LlvVlrhguFkOJVZftWhbOcyfuK+2gVxG01n3YkRglDg8tzJ5bZQmlXII9678
BZTL8R2o4mtJtpa/MnUULC2FlX3HzrZxkRAiKI7lSlAzh1WR1TWdBm3CrCf8obe7
AiNTAPwMgwSow3qKlwFkiW6PmaGtLMKKVhYDEVbxzzetvXAFpK/0YIjRCnahKj/F
PMGhgE9N6r0CCsjaGT/okMfRCQifNxr0M02/ey6SYeMLS3DIqPOuxuqG1QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJYCkGNY62cgxQomCHosmbcoA4ZoMB8GA1UdIwQY
MBaAFOkW3J205J3nGy/QgZ2uhTrrBTsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMt
YmU4NTJmNjQ0MjAxLzEvbGdLUVkxanJaeURGQ2lZSWVpeVp0eWdEaG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMtYmU4NTJmNjQ0MjAx
LzEvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAa6GaAwQA
x1NnAwQAyrW8MA0EAgACMAcDBQMqE9IAMA0GCSqGSIb3DQEBCwUAA4IBAQCGzvwQ
k+ZmH2fH68SWeJ4kIYz+ZMxCyZymH0TWRdGVhmltTbAD8KyHqk4X5UJ241jRcdyc
kS/mQkfWoXPHpxZvBKyz3nB3yl42mu4d+BmTIutVnRHrD2/z1jJcMPjkhmP6QDMb
tL7OXGG3I7S1qvZfw0eaDdtaU/mvteKHuisbMKG1APe1/vgaaYEhyxGa/VqS1KyA
WbgTHzy5jg0JG6ilkYcRqDukbwTfFgLhoYnXW/5xH5G+IzidqlsJrb9gyN/7QDyg
1MCrRpq9LqHOtD9UqJmReXLVEHoWDK96KfWajaehxDLNDc4PlGwE1cEZZ2EBL5nt
Vmlr7GxmF9CV7ozq
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:50 2026 by rpki-client