Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa
File: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (raw, json)
Hash identifier: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=
Subject key identifier: 96:07:08:D2:9E:32:FB:7C:9D:D0:4A:F6:2D:CA:BD:1B:83:43:89:93
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F5E4F8FBFBE1F1F6516F9F9E6C63
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 23
176.53.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:e4:f8:fb:fb:e1:f1:f6:51:6f:9f:9e:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=960708d29e32fb7c9dd04af62dcabd1b83438993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:b9:c6:b8:cf:7b:60:fd:f9:52:99:56:14:
92:dc:fb:22:16:a4:55:b1:d4:13:93:6e:c0:b9:5a:
8e:39:1b:4b:bf:64:39:25:4e:83:2f:c3:82:f5:69:
c6:7f:17:74:cf:42:d1:44:98:b7:92:84:f0:dd:23:
6b:6e:cb:5e:49:98:92:19:f0:8b:27:97:dc:40:05:
e1:75:f3:27:19:6a:00:63:c8:bf:5e:c9:38:9a:f8:
12:6a:eb:75:f8:3b:34:c8:64:da:31:77:4d:17:c0:
68:43:79:47:5a:b9:cc:f7:54:9c:59:75:e3:c0:fc:
20:cf:d9:ca:eb:e4:18:0c:e5:c6:a4:28:ad:d0:22:
18:f7:47:e3:66:d5:b3:87:91:2e:48:66:58:0d:da:
e3:70:d7:e2:cf:c2:f0:c3:71:5f:02:b3:e9:06:68:
c0:7b:62:8c:93:94:96:16:97:6f:0d:60:ad:c1:53:
55:24:7f:0b:5e:c4:cf:6c:53:4a:91:81:16:64:f5:
58:38:a4:5d:f4:62:31:bd:ad:73:58:ab:56:b5:d8:
ec:b7:90:a6:c4:65:27:cf:b3:00:4d:ec:80:bc:63:
95:4f:eb:65:b9:a8:79:f3:16:16:17:2a:02:e0:5d:
f7:d7:06:7e:91:81:94:ef:26:f4:a7:72:43:4a:31:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:08:D2:9E:32:FB:7C:9D:D0:4A:F6:2D:CA:BD:1B:83:43:89:93
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:6a:d9:67:d5:fd:9d:2e:ea:35:75:02:23:6e:c5:e0:58:ae:
a6:76:9b:4b:0c:96:72:f0:4f:4a:71:a4:8f:89:84:34:c8:17:
eb:b9:de:7c:82:79:2d:3a:df:3b:76:aa:e2:8d:a8:38:ae:ed:
57:25:2f:00:63:3a:89:9c:c5:57:15:85:7f:b9:47:2e:bb:77:
7d:25:9f:2a:a5:c7:41:6c:ac:48:ba:64:90:c1:2c:80:b0:7b:
00:24:dd:4d:56:da:27:8a:a2:25:b6:83:fc:29:fa:2f:d8:19:
c2:72:6c:29:d3:3f:29:79:4c:e3:db:6b:21:10:ca:6c:9d:df:
59:24:46:f0:a1:4a:34:e9:74:b1:54:75:f6:2f:65:43:8b:8f:
47:11:89:1a:a4:7b:3e:05:2e:99:55:88:6a:e4:74:61:b2:6f:
c6:5a:6d:55:2b:f5:f9:26:21:fc:d8:de:2e:5d:3a:02:5d:a6:
45:7c:ac:34:18:e7:33:be:2f:d5:54:7c:f2:12:ba:d5:03:71:
d4:24:72:00:03:b1:c1:62:57:2f:56:84:ff:79:1c:41:3b:d5:
7a:cb:89:39:f7:59:92:25:7b:7b:b7:e3:5a:c9:30:5c:4d:60:
be:04:a3:cc:36:4b:a4:1c:5f:de:43:ba:75:ea:09:db:c7:58:
fb:9b:86:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:55 2026 by rpki-client