Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lkqdEp6LwoeInW4-nbYEOMBruSw.roa
File: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (raw, json)
Hash identifier: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=
Subject key identifier: 96:4A:9D:12:9E:8B:C2:87:88:9D:6E:3E:9D:B6:04:38:C0:6B:B9:2C
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019F83B34FA750B3C063EE98B1F40C466EEB
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lkqdEp6LwoeInW4-nbYEOMBruSw.roa
Signing time: Tue 21 Jul 2026 08:03:14 +0000
ROA not before: Tue 21 Jul 2026 08:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b3:4f:a7:50:b3:c0:63:ee:98:b1:f4:0c:46:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jul 21 08:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=964a9d129e8bc287889d6e3e9db60438c06bb92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:ef:6c:f5:79:b7:7b:a8:83:ca:06:95:6d:
5b:62:49:e0:01:2d:7a:c3:fb:86:98:06:f0:fb:1e:
c9:3c:30:7f:19:aa:b5:d1:0b:5a:f9:42:c1:13:d2:
f1:ff:4e:76:bd:3f:f0:d4:49:32:66:9c:c1:ae:ac:
b8:af:d1:52:71:f6:c5:f5:c2:70:2d:fa:7b:09:ed:
26:f1:fe:1b:3c:64:a0:66:d0:11:b0:2d:1a:6e:76:
b6:cf:d0:a3:40:9d:87:02:a6:96:90:9a:51:8e:bb:
af:e4:6a:5d:ed:7f:fc:90:42:6b:4a:77:db:09:3f:
6a:1e:20:6f:0d:89:c7:fb:87:b9:72:9d:a5:eb:10:
dd:1b:3b:8f:30:1d:12:bb:32:83:5f:c0:48:2f:38:
9e:19:ec:38:ae:d9:b6:2f:11:bd:70:de:61:09:8c:
1c:c1:c2:8c:d3:0d:59:37:68:6c:80:ab:5a:cc:4d:
c8:ee:5d:38:7f:4f:93:be:cb:a9:2f:b8:53:6a:5a:
9e:99:9c:05:78:9b:21:ba:f0:8e:21:76:40:54:dc:
ae:55:23:53:84:15:40:31:45:89:3a:05:ce:c2:7e:
ca:2c:8e:a7:74:10:f4:b1:23:96:8c:08:51:c9:70:
be:7f:c0:aa:55:17:d7:b8:f1:ab:ba:bc:df:c3:d4:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:9D:12:9E:8B:C2:87:88:9D:6E:3E:9D:B6:04:38:C0:6B:B9:2C
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lkqdEp6LwoeInW4-nbYEOMBruSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3a:39:dd:5e:c0:51:49:8e:bf:0e:d8:79:f6:c6:b6:70:0c:
b7:ee:d2:1e:e5:17:39:73:6d:01:a1:17:9c:03:c4:ac:d0:f2:
6d:c6:20:17:ab:33:b6:a9:8b:14:16:26:19:39:2f:1c:3b:9c:
2a:70:09:5e:f7:3f:6c:9c:dd:3c:a6:f9:31:70:f8:46:ca:24:
47:17:8e:d5:2a:2f:b0:34:21:d8:06:c5:25:fe:7b:11:bb:46:
a2:c3:31:74:8b:b5:c5:2f:80:14:07:fc:3c:45:87:28:55:22:
7f:f4:b0:4b:96:63:66:fb:0e:a1:38:56:3a:c2:7f:ee:16:d5:
dd:42:46:6d:4c:8a:7a:ea:e3:95:d9:c2:64:35:74:bf:bb:6d:
22:63:c8:39:ab:97:ac:b6:da:04:e6:08:29:38:80:a5:ef:65:
50:df:e4:1a:6a:aa:86:80:db:ca:e4:9a:7f:d8:8e:32:0d:c2:
1f:80:10:30:7b:14:40:c8:5c:91:bf:b9:f6:a5:e5:d0:54:ba:
6e:8b:52:47:1f:8a:f3:42:de:ba:54:fa:b4:b7:10:fe:e7:b0:
83:8c:b5:ba:32:14:d0:f5:d4:5d:cc:0f:da:89:aa:64:72:9e:
b5:77:9c:d0:74:a0:4e:1b:da:26:d2:4b:59:09:f0:fa:6c:61:
a3:50:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:15 2026 by rpki-client