Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/LPa8zPLpV8cXLL0nCvftZJmqBOc.roa
File: LPa8zPLpV8cXLL0nCvftZJmqBOc.roa (raw, json)
Hash identifier: LXKc34IWPeXHGhj7ZOiZu7C5VwcYcKy1yZjCEZ9N19Q=
Subject key identifier: 2C:F6:BC:CC:F2:E9:57:C7:17:2C:BD:27:0A:F7:ED:64:99:AA:04:E7
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 019F2368738F0DE6C9EB019DE0E2F35FE7D4
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/LPa8zPLpV8cXLL0nCvftZJmqBOc.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59441
IP address blocks: 185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:73:8f:0d:e6:c9:eb:01:9d:e0:e2:f3:5f:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf6bcccf2e957c7172cbd270af7ed6499aa04e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:d7:b7:4c:e9:4a:d1:96:68:8e:21:8b:6f:
e7:71:5d:42:42:a6:13:b5:f6:dd:15:61:5f:8f:f6:
70:63:1b:cd:0c:fd:2f:68:d1:b8:f4:b1:0c:04:fd:
4f:56:a3:41:d3:ac:2b:dc:79:4c:7d:10:22:2b:0e:
89:a3:82:ca:fe:90:15:3a:ac:7f:73:ca:29:e7:21:
44:d4:35:17:fe:b4:dd:1f:e4:09:ac:c5:9f:c0:cc:
21:2e:ca:33:21:d8:b1:a7:b9:99:ea:1b:28:db:71:
cc:ef:48:10:1f:24:38:61:5d:c6:54:5b:3b:1f:83:
6c:94:1a:89:13:89:7f:74:00:ba:a5:9f:c7:6a:84:
2f:76:9f:d6:88:26:19:af:95:d6:86:64:12:39:e8:
23:de:17:27:58:72:5a:02:ad:43:7c:b6:87:10:d0:
b7:1f:83:80:1f:3b:af:a1:0b:09:e2:6e:af:d4:cb:
b2:50:cd:49:be:11:74:c1:30:80:2f:d5:ab:35:f1:
2f:47:41:78:da:96:ca:37:e8:4f:da:58:a4:c8:4e:
9e:43:36:e0:b2:71:b8:a3:84:d7:de:3b:cb:5c:6e:
82:bf:c7:10:af:a2:58:57:b7:e1:f3:34:d9:05:96:
31:66:90:e6:ec:49:a4:44:ae:66:a9:cb:18:90:83:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:BC:CC:F2:E9:57:C7:17:2C:BD:27:0A:F7:ED:64:99:AA:04:E7
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/LPa8zPLpV8cXLL0nCvftZJmqBOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.41.0-185.165.43.255
Signature Algorithm: sha256WithRSAEncryption
21:03:ea:28:4c:8d:73:7d:cf:0a:00:88:cc:28:7b:cd:e2:4d:
59:22:cb:50:90:7a:20:8a:ec:2d:3b:f8:8a:f7:91:f7:be:e2:
ef:61:9a:37:08:c6:69:3b:98:79:98:e5:bb:43:09:39:7b:cd:
64:17:a3:31:6c:73:e0:48:a6:8f:5f:d4:5d:ad:a8:e1:b6:54:
12:38:0e:1d:12:1a:a0:ce:a1:2f:ab:07:9f:89:cb:3e:25:57:
b3:25:07:5f:e9:30:0e:84:f3:56:a9:ae:70:07:e8:ba:e0:ba:
95:2b:6e:c8:94:17:19:58:47:60:58:93:c5:42:88:8c:cc:eb:
bf:3e:c2:96:3e:ea:e2:a7:84:c3:45:a5:43:07:98:34:a1:8d:
2a:bd:93:d5:1e:5a:ee:55:84:b9:0a:35:d9:66:39:00:f5:e4:
f0:93:1e:b7:b6:a2:c6:e2:61:95:93:54:47:17:40:21:eb:b3:
7a:5c:7e:cc:18:39:98:66:aa:1e:e8:c0:b2:2b:01:67:fd:16:
7a:19:2e:55:94:1a:a1:7a:44:b7:82:43:08:6d:41:b2:bc:df:
ad:4f:be:3c:98:b1:32:86:98:54:77:05:ad:ee:53:d8:9c:89:
db:fe:db:15:7b:24:04:18:c5:af:02:e2:ae:f3:8a:1e:0a:8f:
d0:c9:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:59 2026 by rpki-client