Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/LfFU-gdcjLCwmbDmdPRR30H0kig.roa
File: LfFU-gdcjLCwmbDmdPRR30H0kig.roa (raw, json)
Hash identifier: KK1N4xMNWWCky9zphnODa8Hx1Rj0d72BxLMUkg+5+RE=
Subject key identifier: 2D:F1:54:FA:07:5C:8C:B0:B0:99:B0:E6:74:F4:51:DF:41:F4:92:28
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019FA520C15A6E47B2AB4C4452983D9C14D2
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/LfFU-gdcjLCwmbDmdPRR30H0kig.roa
Signing time: Mon 27 Jul 2026 19:50:15 +0000
ROA not before: Mon 27 Jul 2026 19:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206286
IP address blocks: 94.158.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:20:c1:5a:6e:47:b2:ab:4c:44:52:98:3d:9c:14:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jul 27 19:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df154fa075c8cb0b099b0e674f451df41f49228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:da:f5:b1:e5:7b:8a:ba:8f:84:8c:2c:da:
76:2e:07:01:d3:7e:b7:1e:5e:13:82:af:f3:3c:44:
7f:bb:95:2c:16:1b:2b:05:c6:d8:05:b8:d6:ab:fd:
42:39:99:66:b9:2e:6c:25:74:1c:5f:4b:ef:e2:71:
30:d1:49:04:90:b0:64:59:45:09:95:55:5a:b1:8e:
94:92:ae:d5:27:ed:09:77:08:45:d5:f9:ab:b3:11:
c5:9f:07:8b:94:c3:d0:66:e8:6f:ce:c1:4a:cd:b3:
4d:25:7e:4c:6f:fa:88:64:4f:97:33:18:0d:a6:21:
2a:29:1c:ec:37:35:6e:42:1c:94:ec:0b:dd:67:ed:
5b:df:6d:ce:2d:68:1e:30:ae:e3:d6:8d:62:c7:e1:
9e:96:bf:31:14:0b:03:eb:73:ae:3f:9c:69:4f:54:
72:38:5a:77:c0:0d:ed:78:46:e0:83:2f:3d:80:92:
d7:af:5a:a7:aa:a5:25:ec:05:22:75:f6:f2:3a:de:
a9:cb:57:60:ab:08:89:bf:55:25:4c:6c:3a:34:22:
82:27:08:0e:61:08:26:45:9a:7d:4b:b7:ab:39:5a:
7e:63:47:09:28:75:59:7d:2b:64:3a:ed:e0:20:05:
58:21:b3:2a:b9:c4:d7:4d:80:89:89:4f:04:28:37:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:54:FA:07:5C:8C:B0:B0:99:B0:E6:74:F4:51:DF:41:F4:92:28
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/LfFU-gdcjLCwmbDmdPRR30H0kig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.187.0/24
Signature Algorithm: sha256WithRSAEncryption
10:bf:51:3f:39:44:f1:6e:04:2f:77:b5:0e:5b:af:bc:81:c6:
c2:12:b3:62:09:1b:53:be:83:36:4d:d7:35:b7:30:46:52:a5:
46:7f:26:9a:2d:7b:1f:99:58:c7:3b:2a:64:7d:ce:67:05:7c:
82:b7:2a:74:52:a1:81:02:69:e1:c0:73:3a:4f:a0:fd:9a:83:
9f:98:89:20:7f:6b:b0:4f:87:fe:ff:5a:1a:f0:59:f3:47:a9:
e4:8f:46:39:da:1e:8a:e8:fe:97:93:18:36:4e:d3:24:22:03:
d6:ef:93:b4:81:5a:bf:29:6a:aa:46:13:f3:17:df:32:7b:4d:
73:e1:18:57:07:46:59:e6:ae:d6:b1:7c:11:7c:42:30:b4:2a:
58:c6:b5:03:3d:f9:68:46:01:2e:90:78:24:f5:d3:23:e2:01:
f4:af:14:df:b0:c2:a0:b9:cd:f7:66:6a:ca:2e:5e:11:89:c0:
c7:7c:00:22:3c:f7:a9:97:94:6b:a1:5f:3e:99:00:99:7c:02:
54:06:3f:a2:b8:38:c2:14:15:8b:50:25:fe:83:c0:0d:cd:63:
74:77:91:e4:03:09:51:6c:bb:70:b1:ed:ab:04:4c:36:3a:d8:
7f:45:7e:b6:78:52:0a:92:f4:02:47:51:89:7d:71:14:0c:bb:
ba:68:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:01:24 2026 by rpki-client