Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa
File: LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa (raw, json)
Hash identifier: yZPGI5ixH94elKMLKB+a0mwkSyNRngSslFaHqUJEz/g=
Subject key identifier: 2C:8F:7F:D9:39:59:E1:0B:B1:46:42:F6:D9:0B:CF:F1:23:8A:28:49
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0C86D15A1B15AA6B951BC086CC644DC96
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa
Signing time: Tue 22 Sep 2026 09:23:07 +0000
ROA not before: Tue 22 Sep 2026 09:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11426
IP address blocks: 142.228.34.0/24 maxlen: 24
198.34.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:6d:15:a1:b1:5a:a6:b9:51:bc:08:6c:c6:44:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 22 09:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c8f7fd93959e10bb14642f6d90bcff1238a2849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:8b:58:44:ef:f1:68:7a:ca:38:c8:c2:fc:
1a:60:c9:4b:7d:32:83:97:0f:25:65:83:0b:da:c7:
f2:dd:e7:be:d4:f2:58:6e:07:83:e9:9a:11:b0:0b:
9e:ed:29:ad:98:4f:ca:0e:29:a2:c8:fb:57:cd:11:
8b:0c:67:10:91:fa:96:37:79:5b:c1:48:5d:a9:7b:
3f:95:ff:7a:33:95:c3:90:ed:c6:b7:0c:71:2e:62:
01:dd:6c:7e:65:7f:da:e9:4d:51:4a:24:b9:7a:46:
70:76:94:7b:1e:cd:cc:c3:87:71:68:e0:d9:d7:fc:
0e:e0:d0:16:97:15:b3:6e:08:da:f9:2f:1f:9a:85:
29:8c:03:79:95:d8:37:eb:e4:7b:08:9b:4b:91:2d:
24:6e:17:c3:3f:ca:d6:f0:b2:78:da:41:84:25:e9:
4c:d5:a5:37:cf:fd:34:3b:9d:07:17:6f:7d:87:a8:
2b:4c:61:a2:c6:bd:8a:5a:bc:74:c7:27:49:59:f8:
09:72:d6:f1:63:7b:d8:5e:fd:4b:fe:a1:21:21:3f:
15:da:c2:d0:cb:38:14:eb:77:b6:fc:a0:4f:a7:0c:
77:11:e4:5e:c8:b2:f8:57:5b:99:03:24:73:cb:6c:
cb:17:23:43:21:b0:fc:74:0c:de:6b:ce:18:4e:7b:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8F:7F:D9:39:59:E1:0B:B1:46:42:F6:D9:0B:CF:F1:23:8A:28:49
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.34.0/24
198.34.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:cb:cf:a7:4b:69:86:08:a2:dc:d6:4e:eb:c8:34:01:5a:d3:
6d:ff:3a:2a:da:81:ad:40:7a:c9:f1:ca:cf:76:98:04:f2:84:
7d:c8:35:07:b8:10:51:5f:a8:bb:48:7e:67:24:6f:38:bc:41:
05:dd:4d:96:6d:c5:da:d9:b6:93:41:48:eb:96:9e:fb:d3:3b:
8a:db:cd:d7:d4:75:5f:49:33:29:1e:37:70:ae:e9:d1:a3:80:
21:37:83:76:bd:ca:a8:2f:54:1d:26:ba:24:aa:d7:39:06:a5:
ca:d8:11:dd:31:95:56:f8:a7:f2:62:06:ca:f5:22:59:98:cb:
c4:d4:60:b2:37:df:c6:35:37:cd:cc:59:db:31:b1:6a:d1:e6:
73:22:e4:41:fe:4d:bf:8d:4b:ca:bf:c1:77:dd:a8:28:cf:e5:
1b:b5:38:65:1d:dc:f9:41:5b:75:89:dd:5a:64:7f:18:56:65:
dc:b8:f1:94:bd:3a:8b:a8:28:3b:c3:07:e8:f5:c0:8a:d3:18:
dd:99:a1:05:cd:af:20:97:91:e6:6c:46:73:32:3c:4a:4a:c9:
06:f2:61:29:35:4c:8c:61:1e:30:83:a7:74:84:b0:76:fa:62:
08:3b:fc:48:98:b2:0b:24:51:f1:c9:26:df:68:39:8d:40:41:
43:2a:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:03 2026 by rpki-client