Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/lL17tuBDoLvw-pd1vpQwvUHTCM8.roa
File: lL17tuBDoLvw-pd1vpQwvUHTCM8.roa (raw, json)
Hash identifier: minPejjWJuMMJn1mp0vvXo5sojqAMoVldEghqvBYb48=
Subject key identifier: 94:BD:7B:B6:E0:43:A0:BB:F0:FA:97:75:BE:94:30:BD:41:D3:08:CF
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019E11437F4CB512DA97F4A0AC68D6CD450B
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/lL17tuBDoLvw-pd1vpQwvUHTCM8.roa
Signing time: Sun 10 May 2026 09:41:36 +0000
ROA not before: Sun 10 May 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44510
IP address blocks: 79.99.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:43:7f:4c:b5:12:da:97:f4:a0:ac:68:d6:cd:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: May 10 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94bd7bb6e043a0bbf0fa9775be9430bd41d308cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:7a:67:74:1e:f8:7b:36:e8:e1:c7:53:fc:
9b:39:c6:33:1b:82:79:89:57:0b:cc:39:48:07:ee:
82:57:18:e6:1a:e2:da:9f:2e:8d:05:c4:fc:30:7f:
75:3a:19:f0:d7:e6:a2:c7:94:51:1d:90:d1:45:81:
14:55:5d:26:bf:fd:73:ad:08:b7:86:dd:67:c5:4f:
1e:58:e1:e1:c1:f5:36:db:ea:34:1e:52:17:96:c7:
6c:15:dc:6d:50:d7:2a:2f:18:b8:51:ff:c0:c2:d3:
44:18:a6:78:b5:8a:3a:bc:ce:a9:36:3d:42:91:6c:
0a:96:12:88:ea:e9:9b:84:d8:60:d4:13:49:4f:57:
5e:6f:8f:52:51:30:e9:b1:60:b2:54:0b:b5:6c:fb:
3e:90:80:41:fa:e2:cf:ae:1d:c9:2a:80:92:f1:60:
c1:2e:17:a4:3a:f3:72:e8:a5:78:fb:b6:0e:dc:c4:
a3:ca:55:05:12:12:e2:df:80:0a:55:6b:3a:c8:77:
2c:b9:db:5b:cc:0b:e9:65:29:af:a3:66:86:7f:e9:
ed:ef:96:a3:ed:83:be:3a:b5:9f:25:d3:2c:b7:63:
65:57:8a:d6:97:e9:e1:12:01:2a:2f:ee:1b:14:12:
80:d2:6e:39:7e:94:1e:6b:8b:17:46:64:f0:1c:6c:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:7B:B6:E0:43:A0:BB:F0:FA:97:75:BE:94:30:BD:41:D3:08:CF
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/lL17tuBDoLvw-pd1vpQwvUHTCM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:37:0a:df:0f:38:5a:dd:6f:79:5b:0c:2e:93:c0:ed:5d:d3:
78:df:c0:06:37:a7:b7:a8:96:62:82:d1:35:98:33:ca:73:94:
e4:2b:88:4a:ad:4d:22:e7:02:03:ac:99:50:c3:ff:42:43:77:
f1:25:6a:3f:60:45:cd:31:a6:7c:15:c9:88:8e:d6:eb:7a:a6:
6c:de:4b:1b:ae:b3:c9:e6:05:90:96:ea:93:b0:3a:3b:21:c5:
80:f3:a7:c3:21:88:86:65:71:38:65:a4:d0:3b:25:bd:7d:cf:
d3:97:f6:63:1b:d4:af:20:a0:34:ff:7c:16:82:64:75:e4:ba:
80:a7:81:d9:0e:41:b2:dc:45:0a:1e:cc:97:4b:1f:1e:59:b6:
62:f7:94:a7:f3:04:0c:2a:e5:4b:60:2d:eb:26:41:f4:7a:4d:
ff:d0:40:9c:26:b3:af:fe:e5:22:07:67:2f:72:89:de:19:9c:
a5:be:66:51:ba:0a:34:c0:76:d8:61:f9:1b:27:e2:31:6a:10:
d4:5c:e6:81:1e:e2:ca:84:60:57:3e:39:99:05:92:c8:05:61:
48:fc:c1:d5:11:32:f0:95:ab:d2:b4:f0:46:24:d6:7a:b8:0a:
5e:c0:26:d4:f7:2f:24:00:48:45:40:f3:2f:2a:f6:98:1a:34:
7e:22:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:14 2026 by rpki-client