Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/LXXfQN2bkC9puw5dqkTeVg1dAuM.roa
File: LXXfQN2bkC9puw5dqkTeVg1dAuM.roa (raw, json)
Hash identifier: enCJ6utAPOkQVHVt862XMSScyncqVjbigRDYlmgELSQ=
Subject key identifier: 2D:75:DF:40:DD:9B:90:2F:69:BB:0E:5D:AA:44:DE:56:0D:5D:02:E3
Certificate issuer: /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial: 019F2368934BD70C7392C9653BACE80476D0
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/LXXfQN2bkC9puw5dqkTeVg1dAuM.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15436
IP address blocks: 81.88.96.0/21 maxlen: 24
193.109.117.0/24 maxlen: 24
193.109.121.0/24 maxlen: 24
193.109.125.0/24 maxlen: 24
193.201.0.0/24 maxlen: 24
193.201.1.0/24 maxlen: 24
193.201.2.0/24 maxlen: 24
193.201.3.0/24 maxlen: 24
193.201.4.0/24 maxlen: 24
193.201.5.0/24 maxlen: 24
193.201.6.0/24 maxlen: 24
193.201.7.0/24 maxlen: 24
2a02:c18::/32 maxlen: 48
2a02:c18::/48 maxlen: 48
2a02:c18:1::/48 maxlen: 48
2a02:c18:2::/48 maxlen: 48
2a02:c18:6::/48 maxlen: 48
2a02:c18:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:4b:d7:0c:73:92:c9:65:3b:ac:e8:04:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d75df40dd9b902f69bb0e5daa44de560d5d02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:42:c3:e3:2a:a5:75:78:ea:89:96:9c:09:
0e:0c:c3:3a:1d:89:e0:21:20:41:c2:c1:d8:cc:5c:
8d:58:a8:3f:a2:60:51:85:5a:ad:e8:ca:60:b1:f3:
53:c4:3f:97:05:80:90:0c:2f:36:66:46:90:24:52:
b6:e8:c0:74:55:8c:a5:77:57:d0:4a:88:13:4e:b4:
ec:55:82:4f:d3:1c:67:3f:f5:f1:41:55:d5:bc:fe:
b7:37:ad:8a:9a:e2:f6:ff:b8:6d:97:24:8f:46:39:
8b:34:6e:9f:0d:ca:5a:c8:76:32:93:de:24:a3:e1:
1b:0c:41:c9:aa:cc:81:8a:04:b6:65:36:59:25:68:
7e:d4:90:34:5d:bf:22:33:8b:fc:0c:59:26:77:ab:
64:12:df:f7:06:59:74:75:e7:94:20:72:4c:9c:71:
c5:3b:c4:0b:65:38:77:7b:9a:4c:4e:49:42:0c:be:
19:ba:ae:b9:a3:89:b5:18:ba:8d:8a:31:6b:0a:c0:
6a:b7:40:41:1c:e6:9e:21:ff:23:a8:5c:a0:37:6f:
82:a4:ae:5b:f8:0b:70:d0:f0:12:02:8e:47:6c:50:
11:75:66:a5:a4:67:17:a5:76:17:1b:c0:cd:81:77:
2b:ee:6a:d9:5c:80:7d:c6:21:3e:44:84:08:b0:d0:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:DF:40:DD:9B:90:2F:69:BB:0E:5D:AA:44:DE:56:0D:5D:02:E3
X509v3 Authority Key Identifier:
keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/LXXfQN2bkC9puw5dqkTeVg1dAuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.96.0/21
193.109.117.0/24
193.109.121.0/24
193.109.125.0/24
193.201.0.0/21
IPv6:
2a02:c18::/32
Signature Algorithm: sha256WithRSAEncryption
37:00:7d:ec:b7:17:7d:97:af:f1:4b:76:92:db:d9:f8:32:24:
06:78:ae:66:cd:e8:12:0f:8e:cc:5b:80:4f:aa:1b:47:f0:3b:
f9:73:60:80:69:8b:e9:38:e3:b2:0e:f2:46:f5:9a:60:ae:e9:
52:54:6c:68:a6:37:be:59:30:f8:11:f5:c4:65:b1:2f:61:de:
aa:b2:c1:33:4e:08:c7:d7:26:08:ea:0a:f8:e7:07:fb:04:f8:
0e:59:22:c1:8c:3c:3b:14:63:10:b6:2a:f7:ca:86:68:60:d7:
e1:f9:d3:f2:ed:d9:28:ca:70:c1:5f:2e:77:99:4a:11:ff:1e:
aa:97:80:12:c2:fc:a8:03:97:e9:40:95:05:21:02:1a:68:a3:
9a:2d:3f:a4:e6:be:46:c3:03:cc:bc:88:31:10:d8:ca:4f:08:
6c:ce:78:c0:4f:1d:da:72:b1:0a:6e:ca:2e:6b:c7:3c:27:59:
b7:a1:ac:9a:89:44:23:17:a7:9e:2e:ab:5c:ff:39:62:6b:75:
44:aa:eb:f9:a3:7c:a3:40:59:da:93:47:17:f0:70:9f:99:99:
2e:a7:96:ec:3b:e2:fb:46:4e:bd:76:3c:3b:84:20:7e:8c:83:
f6:27:7d:0f:e0:af:36:f0:77:37:ba:e7:5e:4f:b9:6e:ce:1c:
c4:af:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:42 2026 by rpki-client