Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/LfV4fDZ2pOExjAsPPxOZBrsSeoA.roa
File: LfV4fDZ2pOExjAsPPxOZBrsSeoA.roa (raw, json)
Hash identifier: dVmuhj8OH/jWLXxuFuZoRFi787J7Pq2XBiRrCKplb9s=
Subject key identifier: 2D:F5:78:7C:36:76:A4:E1:31:8C:0B:0F:3F:13:99:06:BB:12:7A:80
Certificate issuer: /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial: 019F17A78C9854A29563F8092880A5F05360
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/LfV4fDZ2pOExjAsPPxOZBrsSeoA.roa
Signing time: Tue 30 Jun 2026 08:31:24 +0000
ROA not before: Tue 30 Jun 2026 08:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197545
IP address blocks: 95.36.128.0/18 maxlen: 19
2a0c:bbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:a7:8c:98:54:a2:95:63:f8:09:28:80:a5:f0:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Validity
Not Before: Jun 30 08:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df5787c3676a4e1318c0b0f3f139906bb127a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:21:7f:1c:0e:e4:ac:35:10:c9:a6:de:a3:
31:50:ef:f7:60:fd:4d:d8:60:03:e9:38:b4:6a:03:
2f:de:b4:b3:64:29:0d:49:1d:35:f4:36:8e:c9:c1:
27:be:c5:5f:a9:55:9e:09:2a:b5:2e:3c:5e:e6:91:
13:ba:75:ff:10:ec:74:82:ec:7c:a9:c8:52:0f:ee:
88:7b:40:23:55:37:cf:ee:af:24:40:45:72:f8:08:
a4:86:9e:f7:29:fa:8c:db:06:fe:e1:60:49:da:5e:
1c:d7:28:01:f9:f9:80:de:3a:eb:f4:30:22:da:be:
b4:ef:0d:cd:ee:32:12:7a:a9:a5:ac:9c:6c:7a:fe:
9e:01:11:e4:4f:9e:c3:2e:f5:33:61:cb:cd:68:55:
aa:3b:d6:d5:42:4b:c7:c4:ba:c5:7e:0f:6b:4f:68:
2c:32:5c:b3:eb:43:ac:b7:90:48:0d:5d:92:4e:be:
ed:f0:07:53:df:26:30:0e:97:04:27:b5:f4:c2:ae:
dc:34:4d:7e:b9:2e:3d:42:0b:94:64:e6:10:f4:7b:
a0:7d:43:b6:0d:26:b0:e9:00:49:88:dd:f7:c4:e0:
1a:07:bf:49:95:9b:18:21:11:2a:60:a7:ba:ab:51:
4a:7e:b1:03:5e:0c:67:e7:a6:62:98:c8:c6:95:2e:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:78:7C:36:76:A4:E1:31:8C:0B:0F:3F:13:99:06:BB:12:7A:80
X509v3 Authority Key Identifier:
keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/LfV4fDZ2pOExjAsPPxOZBrsSeoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.128.0/18
IPv6:
2a0c:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:48:07:7d:1f:aa:72:9c:03:ce:91:e0:1d:07:24:04:a1:86:
b5:54:0e:24:f5:41:86:f9:57:1c:44:d4:15:b1:14:1c:58:7e:
1f:85:5d:92:1f:55:96:d9:85:68:09:9b:53:ad:f4:f8:a7:84:
dd:da:ad:81:e3:26:ed:a1:0a:97:c8:a8:58:bb:fa:eb:0d:d4:
07:3d:0d:bc:c5:1a:a9:7e:e2:b6:e6:28:38:5f:e1:4d:84:fd:
40:5f:65:c1:d6:73:4a:a7:53:0e:ea:27:37:a8:11:8c:ed:e9:
4d:ce:b1:63:f3:c6:bb:61:ca:6e:3b:86:66:2b:99:4c:d3:ae:
96:03:7a:0e:1d:04:20:12:09:ca:5c:1c:c1:e2:e4:38:15:a5:
16:4a:44:df:eb:56:c8:d5:cf:85:25:f8:6f:1e:f0:f9:f6:ed:
67:49:30:bc:fa:84:46:d2:31:be:da:43:57:bd:45:d4:ab:8a:
3d:e3:e7:e0:d6:5b:35:72:e2:4b:4c:39:df:a7:9f:ba:7e:50:
95:15:5c:00:b4:de:be:9b:a5:6d:3c:76:51:b5:ef:fa:3c:18:
3d:9b:fa:4d:40:2b:8a:36:57:dc:03:f1:9e:02:66:b0:00:84:
74:97:41:c1:de:6d:11:70:cb:67:f4:5e:d3:18:18:fd:97:e5:
96:4e:f3:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8Xp4yYVKKVY/gJKICl8FNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzY1ZmViM2UyODZjOGRiYWE5YjFkNjI2ODJlNDRmYmU4
MDA3MjIwHhcNMjYwNjMwMDgzMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGY1Nzg3YzM2NzZhNGUxMzE4YzBiMGYzZjEzOTkwNmJiMTI3YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3UhfxwO5Kw1EMmm3qMxUO/3YP1N
2GAD6Ti0agMv3rSzZCkNSR019DaOycEnvsVfqVWeCSq1Ljxe5pETunX/EOx0gux8
qchSD+6Ie0AjVTfP7q8kQEVy+Aikhp73KfqM2wb+4WBJ2l4c1ygB+fmA3jrr9DAi
2r607w3N7jISeqmlrJxsev6eARHkT57DLvUzYcvNaFWqO9bVQkvHxLrFfg9rT2gs
Mlyz60Ost5BIDV2STr7t8AdT3yYwDpcEJ7X0wq7cNE1+uS49QguUZOYQ9HugfUO2
DSaw6QBJiN33xOAaB79JlZsYIREqYKe6q1FKfrEDXgxn56ZimMjGlS6/nwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFC31eHw2dqThMYwLDz8TmQa7EnqAMB8GA1UdIwQY
MBaAFFp2X+s+KGyNuqmx1iaC5E++gAciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTIt
NGU3Y2UxMDI4ZDE0LzEvTGZWNGZEWjJwT0V4akFzUFB4T1pCcnNTZW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTItNGU3Y2UxMDI4ZDE0
LzEvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGXySAMA0E
AgACMAcDBQAqDLvAMA0GCSqGSIb3DQEBCwUAA4IBAQAuSAd9H6pynAPOkeAdByQE
oYa1VA4k9UGG+VccRNQVsRQcWH4fhV2SH1WW2YVoCZtTrfT4p4Td2q2B4ybtoQqX
yKhYu/rrDdQHPQ28xRqpfuK25ig4X+FNhP1AX2XB1nNKp1MO6ic3qBGM7elNzrFj
88a7YcpuO4ZmK5lM066WA3oOHQQgEgnKXBzB4uQ4FaUWSkTf61bI1c+FJfhvHvD5
9u1nSTC8+oRG0jG+2kNXvUXUq4o94+fg1ls1cuJLTDnfp5+6flCVFVwAtN6+m6Vt
PHZRte/6PBg9m/pNQCuKNlfcA/GeAmawAIR0l0HB3m0RcMtn9F7TGBj9l+WWTvMv
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:58 2026 by rpki-client