Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/LbZzVT40yf25Ha7iF2B6O1RvYF4.roa
File: LbZzVT40yf25Ha7iF2B6O1RvYF4.roa (raw, json)
Hash identifier: f9AuhT5EpMpRv8pZmA+KFqXspnh60tIOSzMIN9FFIDk=
Subject key identifier: 2D:B6:73:55:3E:34:C9:FD:B9:1D:AE:E2:17:60:7A:3B:54:6F:60:5E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019EF8CC8C734572AC74DA4B3B9618521FD8
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/LbZzVT40yf25Ha7iF2B6O1RvYF4.roa
Signing time: Wed 24 Jun 2026 08:43:35 +0000
ROA not before: Wed 24 Jun 2026 08:43:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15965
IP address blocks: 78.111.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:cc:8c:73:45:72:ac:74:da:4b:3b:96:18:52:1f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jun 24 08:43:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2db673553e34c9fdb91daee217607a3b546f605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:e6:fc:81:ea:e0:01:4b:59:92:42:45:d8:
a9:48:8d:f6:ee:28:05:56:2b:69:57:11:e3:8d:8f:
32:a4:99:74:cc:e5:9e:d8:8c:6d:ce:88:b5:f6:00:
4c:53:8e:5a:a2:46:2e:29:8e:c6:81:b7:e7:32:93:
6f:6c:63:05:08:53:71:8a:9b:87:e9:1b:c8:23:9e:
c6:70:bb:91:be:ce:c7:10:75:5e:31:4f:ee:ff:39:
a4:c2:0f:d8:fd:95:21:cb:2d:5b:52:b6:8d:9a:73:
61:26:b2:38:2c:1e:11:90:9b:70:13:96:ac:bc:c0:
9c:e8:3f:99:de:f5:31:ac:b2:e1:f7:1c:69:fd:ee:
50:50:dc:41:3e:19:ec:59:92:b8:a4:f1:e6:d2:1b:
26:55:df:ee:bf:e6:dc:2d:d4:8b:26:df:aa:90:28:
a7:19:b4:3c:8f:14:24:66:cb:ae:f0:e1:98:0e:ad:
5a:81:30:54:dd:48:cb:65:dd:e1:d7:b5:22:32:ee:
e7:e7:1a:7a:e4:bd:e6:ce:91:41:2b:54:b6:7b:97:
7f:65:52:e5:2c:a9:e3:3d:ce:f7:04:86:68:54:58:
d7:dc:8c:0e:78:d2:0a:ca:77:30:8b:e2:34:71:3e:
40:93:11:a2:15:5c:c0:fe:e3:9e:e4:52:6c:17:fa:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:73:55:3E:34:C9:FD:B9:1D:AE:E2:17:60:7A:3B:54:6F:60:5E
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/LbZzVT40yf25Ha7iF2B6O1RvYF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.136.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9d:1a:91:1f:de:65:01:63:f5:63:e7:fd:be:69:3d:d3:15:
a7:3f:0c:f5:8f:b9:e1:85:41:3c:21:16:be:36:67:ad:f3:5b:
7e:3c:3f:c8:ee:29:84:7a:d5:41:f6:2b:f0:e4:59:a2:19:a8:
42:90:3b:d0:2b:6b:47:01:04:d5:4b:3b:2c:81:b6:03:c2:b4:
a1:53:89:7c:54:27:bb:18:77:c4:08:50:54:d6:0b:eb:f9:cb:
b9:43:5f:22:99:5b:7c:74:01:8e:52:aa:09:42:a7:dc:7a:74:
ee:ca:16:27:fd:a4:8e:cb:b8:5b:cd:bc:55:84:6d:f5:e0:9d:
e8:6f:5a:8a:b0:17:a4:d8:59:5b:77:4b:43:f8:8b:5d:36:86:
d7:87:a3:b1:2c:73:15:a2:3f:e8:1f:41:c9:d8:e2:25:fd:33:
f8:6c:b7:69:f6:44:92:d8:60:a7:60:cf:42:01:0f:93:58:c4:
23:ff:8a:71:d6:e1:28:84:42:0e:c1:c3:b9:98:0d:9d:6c:53:
90:cf:9d:4b:0b:fa:6c:5e:17:82:cd:20:7f:6a:75:53:f1:e6:
e5:85:de:42:c0:c4:e9:37:24:13:e6:a9:62:3f:9a:eb:af:01:
c5:40:cd:7b:23:7a:85:99:3b:a3:b5:fa:16:62:b3:84:44:2e:
08:a3:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:58 2026 by rpki-client