Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa
File: L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa (raw, json)
Hash identifier: vnnfABGEtbcmc5yS9HseTFPLNWl4SZGd7BuXLhUduKk=
Subject key identifier: 2F:69:15:C5:B7:DC:31:2D:A7:BF:E3:C1:2C:6D:53:84:24:90:08:93
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019F3C022DD3AA6489005FF47B1AAA4E9192
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa
Signing time: Tue 07 Jul 2026 09:56:43 +0000
ROA not before: Tue 07 Jul 2026 09:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 83.223.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:02:2d:d3:aa:64:89:00:5f:f4:7b:1a:aa:4e:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jul 7 09:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f6915c5b7dc312da7bfe3c12c6d538424900893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:21:9a:b6:46:ba:9a:0d:13:22:dd:c1:6a:
f3:7a:34:27:1a:9c:83:15:92:f7:ff:8a:59:a8:0c:
aa:a0:4e:01:5d:2c:fc:c1:ea:1c:fe:0a:3d:f0:ae:
58:c3:fa:74:90:02:e6:97:f8:55:15:3f:4f:d9:d0:
96:05:5b:5c:c5:9e:e4:e7:b3:4b:25:d8:c2:9f:73:
44:22:38:f3:0f:27:f5:a7:f8:f9:a7:93:4e:61:27:
28:85:60:3b:4b:ce:fd:e1:9f:22:ac:d6:a1:bf:92:
34:34:51:e9:90:ec:44:8b:af:f8:7b:e6:c6:66:2d:
b4:7f:fc:43:bf:a6:c4:cd:6e:b1:78:08:90:78:a8:
f6:08:0a:ad:f1:39:0b:f6:e2:9a:0e:2f:75:3e:7d:
d8:b5:b4:68:db:26:da:64:52:2e:b7:d0:92:6f:ce:
c0:b4:cd:5a:05:21:7d:c1:d6:92:13:76:d5:ee:e0:
b0:ab:9c:61:12:ea:9a:c8:e8:08:a2:9b:46:cf:df:
75:29:e9:2c:7d:e3:cd:be:17:4d:4c:f5:f6:af:22:
0a:71:c4:b9:40:b4:c2:d2:9a:3f:a9:54:1a:72:91:
df:84:82:40:34:45:41:44:8d:10:f7:5c:05:63:af:
4b:4c:3b:c8:bc:16:38:60:20:ea:05:6e:69:fb:f0:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:15:C5:B7:DC:31:2D:A7:BF:E3:C1:2C:6D:53:84:24:90:08:93
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.53.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e7:3c:c9:3f:90:14:a7:17:52:32:74:22:60:4e:1f:55:75:
27:e3:0f:63:8d:c3:b8:d2:0a:bf:a7:32:89:36:15:de:05:7f:
bc:8d:00:c4:e2:6c:b9:1c:49:f3:a5:a2:1e:bf:26:60:d9:38:
3e:16:d7:55:2b:eb:a7:3f:54:ca:2f:fc:bb:55:17:b0:46:6a:
8b:15:80:03:a1:bf:32:24:c8:73:af:e8:67:17:bc:82:ac:79:
10:4b:f2:51:d7:dd:fc:2c:2e:5e:c0:74:c2:a0:24:c7:f3:bc:
ae:cc:32:9f:c5:70:10:43:e0:65:e5:50:68:bb:4a:85:c7:96:
59:c6:66:d7:57:ae:6e:35:ba:49:c6:98:21:f6:01:89:07:b9:
2d:54:a5:96:6c:83:d6:7d:01:57:fb:f6:45:d1:34:15:d6:96:
b3:00:6d:3c:54:51:b3:c2:16:7d:e2:b6:9d:e0:db:a7:7a:b7:
80:28:c3:4e:4d:1a:89:d3:8e:39:83:78:9c:31:2e:16:65:bd:
49:50:32:27:17:d5:ad:e5:ec:d2:09:da:d6:43:bb:77:57:29:
94:c8:57:51:fa:8a:03:ce:3d:20:4f:c9:71:c7:20:d7:d0:18:
7e:df:6a:e8:d9:ad:90:d9:93:16:3c:29:23:12:d6:80:f1:fa:
37:e7:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:20 2026 by rpki-client