Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lqcfo_BzzTNB2_fsbw_bmvDf6ZU.roa
File: lqcfo_BzzTNB2_fsbw_bmvDf6ZU.roa (raw, json)
Hash identifier: xLpI/QLYey2bEy1xO8ck4NMIkVdlhfoxrgH6yolRQLQ=
Subject key identifier: 96:A7:1F:A3:F0:73:CD:33:41:DB:F7:EC:6F:0F:DB:9A:F0:DF:E9:95
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1B2AEA4A66459F34E86E1EFD686D0694
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lqcfo_BzzTNB2_fsbw_bmvDf6ZU.roa
Signing time: Wed 01 Jul 2026 00:53:45 +0000
ROA not before: Wed 01 Jul 2026 00:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:2a:ea:4a:66:45:9f:34:e8:6e:1e:fd:68:6d:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 00:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96a71fa3f073cd3341dbf7ec6f0fdb9af0dfe995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:5b:f3:50:50:ff:37:be:be:01:e2:bb:65:
b4:82:f4:b2:bf:e4:ef:5a:91:62:c8:11:b4:36:bb:
a0:16:ff:af:3c:03:32:5d:e3:79:04:1f:33:97:5a:
41:fe:d6:61:6f:70:4a:39:69:d7:24:f5:35:d3:f2:
bc:cf:f8:f5:be:8d:b6:ec:10:04:b8:62:9e:d2:b8:
9a:34:b2:71:65:d1:8d:e0:03:1e:7f:6e:83:21:7d:
7c:d9:95:6f:9a:50:31:d0:20:ff:e7:ed:70:d3:33:
85:aa:1e:27:06:03:29:a6:8f:c1:17:4e:5e:c0:64:
44:53:8d:bf:f3:09:26:4c:c6:1d:79:12:12:09:1b:
f1:6c:5e:c0:66:67:5b:a8:65:30:a6:8d:00:62:19:
78:0b:29:7f:4a:38:d3:a1:f1:8e:c6:c1:57:0c:e0:
bc:24:3f:5f:81:97:34:fd:45:f1:49:3f:68:5e:85:
d6:6a:03:3b:f0:46:7e:4a:4c:16:cb:a7:7b:a7:8f:
29:9b:27:77:91:ac:eb:46:42:a7:5c:09:c3:ed:52:
57:c9:47:65:5f:78:80:2a:9c:76:ce:62:a9:c4:ca:
a9:e9:ce:bf:9d:03:f3:62:67:c5:1d:9b:3e:4b:3d:
d4:3f:54:a4:b0:02:a1:b5:ba:76:9b:f1:20:2d:fc:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:1F:A3:F0:73:CD:33:41:DB:F7:EC:6F:0F:DB:9A:F0:DF:E9:95
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lqcfo_BzzTNB2_fsbw_bmvDf6ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
Signature Algorithm: sha256WithRSAEncryption
03:39:e3:62:5a:9c:43:89:5e:70:b6:a3:e9:0c:0e:89:4c:75:
b0:eb:4d:20:7f:f0:54:d6:00:9c:60:f5:0a:f2:4e:36:b2:76:
77:14:30:92:44:50:b3:d4:ce:aa:c9:71:57:f1:11:dc:a6:c6:
ea:37:24:7f:73:61:44:59:86:2b:5d:64:97:10:5f:13:72:20:
70:55:b7:99:f0:df:cf:3d:27:10:f8:c8:1f:28:bb:a3:42:ff:
79:cc:5b:e1:13:44:d9:fb:41:2f:ab:72:dc:25:d5:29:0c:98:
cd:0d:d5:f2:5e:69:af:64:39:d2:f1:a4:53:83:2c:26:bb:e7:
10:aa:03:01:27:e4:5f:f4:8f:4f:20:59:50:8d:bd:4d:a1:18:
4b:8d:fd:4a:1b:8c:20:82:16:ad:29:9f:8e:cc:8c:23:88:f1:
c6:46:07:b4:c7:07:84:bc:44:e4:48:5b:c6:84:a2:c1:d5:12:
00:41:cc:37:37:3c:d2:93:84:99:a6:39:b6:12:5b:e8:3b:50:
a5:cb:a8:8f:aa:e3:3d:74:e6:33:7e:6e:e2:40:65:4d:65:0c:
e7:5d:6e:2b:d3:7e:40:56:3b:eb:bc:48:ad:32:d6:90:a3:2d:
94:da:75:19:90:c7:c3:0f:cb:d9:19:35:8d:4f:3e:e3:bc:5e:
e4:9d:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:28 2026 by rpki-client