Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/LSO-QOUPfTvpfYqHqssifWh280M.roa
File: LSO-QOUPfTvpfYqHqssifWh280M.roa (raw, json)
Hash identifier: XvmDiwKThG2Ug/B5byI0VC8SfnhIoWAypV6Cpcv32NY=
Subject key identifier: 2D:23:BE:40:E5:0F:7D:3B:E9:7D:8A:87:AA:CB:22:7D:68:76:F3:43
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019EF6663B5A31AED70AA32E4D71213AF2F7
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/LSO-QOUPfTvpfYqHqssifWh280M.roa
Signing time: Tue 23 Jun 2026 21:32:35 +0000
ROA not before: Tue 23 Jun 2026 21:32:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203826
IP address blocks: 195.123.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:66:3b:5a:31:ae:d7:0a:a3:2e:4d:71:21:3a:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jun 23 21:32:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d23be40e50f7d3be97d8a87aacb227d6876f343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:bb:63:76:84:79:2d:ac:d8:f7:1f:e8:9b:
01:a2:ad:76:69:09:a7:f5:29:d9:9e:5a:89:30:29:
2f:c3:7c:af:44:61:47:94:54:04:90:bb:2f:ad:76:
1e:87:89:10:8d:b0:33:c9:56:5b:f2:2e:10:11:b9:
59:92:b8:ce:ba:ce:22:50:57:04:a8:69:9e:d3:4b:
ad:7e:05:c5:4d:84:a2:da:48:9a:02:5c:a7:db:35:
51:4e:7b:2c:2a:e8:c7:30:e4:e3:db:9c:cd:f8:c9:
4a:e3:75:4a:6c:9c:c8:29:66:f9:23:78:ff:94:1d:
6d:5c:5a:88:18:22:7b:6b:d6:f7:e2:3a:64:b6:9d:
5c:d0:2a:f7:f1:3d:69:a4:08:3d:ce:4f:90:f8:ba:
f9:d7:b5:d9:41:84:bf:27:d0:72:13:6b:a9:66:82:
3f:8f:58:82:22:e1:a4:b7:5c:98:81:43:1e:b7:6d:
b8:e8:19:81:64:b4:99:d7:75:c0:54:88:75:a1:54:
3b:e9:48:53:dd:8c:c3:d8:b4:88:91:c4:a0:f9:5a:
b5:c2:af:2f:2e:a1:ee:74:c9:77:6b:61:9c:63:10:
77:91:7e:51:ba:a8:90:5b:f9:69:24:9c:96:69:84:
80:4d:bc:6e:c8:95:8d:ef:44:a0:30:5e:0a:02:3c:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:BE:40:E5:0F:7D:3B:E9:7D:8A:87:AA:CB:22:7D:68:76:F3:43
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/LSO-QOUPfTvpfYqHqssifWh280M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:86:99:d6:a1:4a:34:b3:f3:2c:04:ea:70:b0:8c:5f:51:de:
c1:da:8c:85:95:72:38:80:52:4d:23:74:bc:a4:17:9b:8f:0e:
cc:d6:62:92:c1:1c:46:64:6f:8f:15:71:f5:af:af:6b:51:12:
d2:57:e4:37:a4:ac:59:51:47:18:e4:ac:3d:bc:ec:18:21:2c:
a4:0a:fa:94:8c:7c:5d:86:16:df:bd:e4:f5:96:00:fa:39:bb:
e2:3d:18:f0:ab:3c:35:fe:48:5b:50:82:7c:b1:e7:6f:e2:a3:
7b:43:73:05:15:90:9a:75:50:a4:d3:81:f4:be:e0:eb:4a:b7:
fe:c0:36:2d:ed:71:15:33:8a:7c:98:8a:3f:d6:8a:cc:7d:a7:
57:c8:a2:b6:a4:b8:26:cc:1a:53:29:fa:00:2f:91:18:b7:07:
c9:4c:a5:bf:7e:b5:7d:d3:bb:f7:92:7c:4f:88:49:69:eb:54:
2c:00:39:76:1c:3f:d1:3a:81:27:e1:63:93:c0:ea:62:c5:c5:
8b:8b:41:8d:86:eb:36:4d:c0:54:3f:05:e4:f1:27:9c:38:d2:
6a:d2:59:30:bc:73:e7:0e:3f:69:22:58:d3:ad:1c:15:63:ff:
1b:fd:b7:3d:17:92:55:a2:bc:38:f8:bc:96:04:4f:0c:14:e3:
37:79:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:15 2026 by rpki-client