Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lwR4CDLvnTUuVyA34wT6tah5mv0.roa
File: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (raw, json)
Hash identifier: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=
Subject key identifier: 97:04:78:08:32:EF:9D:35:2E:57:20:37:E3:04:FA:B5:A8:79:9A:FD
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019FA71F9B5B920EDDDD40C4ACE4CEB3DB10
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lwR4CDLvnTUuVyA34wT6tah5mv0.roa
Signing time: Tue 28 Jul 2026 05:08:14 +0000
ROA not before: Tue 28 Jul 2026 05:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 189.24.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:1f:9b:5b:92:0e:dd:dd:40:c4:ac:e4:ce:b3:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jul 28 05:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9704780832ef9d352e572037e304fab5a8799afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:3e:d3:49:62:1b:52:08:c4:9e:90:80:81:
3e:6d:1b:3d:9f:22:93:b2:f2:8b:e3:f1:21:86:82:
7a:b5:32:0c:6c:0a:5e:28:db:cd:0f:8a:83:39:c5:
c7:6f:7b:2c:f2:dc:eb:e1:33:de:2c:f3:55:7f:d3:
c5:ff:f6:0a:37:ca:9a:16:57:bb:36:76:15:db:2d:
21:34:de:7e:ca:66:ed:88:7c:54:5c:a3:f0:45:0e:
f0:36:72:c8:9e:89:d5:6b:3b:68:ff:e8:77:04:19:
a7:20:4c:03:4d:09:a3:40:aa:ce:a9:54:8c:f2:15:
02:f1:eb:e1:03:cb:d6:05:d3:d7:05:dd:f7:51:d2:
de:a0:cb:13:0a:da:22:80:56:0f:15:1f:54:bd:ed:
8c:fe:5a:f0:23:c9:9c:28:75:d2:be:a1:f7:a2:8b:
fd:5a:b5:d7:bc:3f:63:c5:c4:23:56:4d:a1:d7:b7:
e2:1a:7d:d6:9f:ec:98:ad:1c:4b:6d:91:ec:ec:a5:
a7:b3:35:07:b8:60:9d:24:e7:58:a2:d7:00:9a:e0:
91:21:87:21:5c:21:0d:92:86:05:4a:94:30:eb:b8:
2c:b5:0a:36:6b:07:a3:b9:39:52:fa:54:e3:a9:66:
63:83:f4:fd:c8:8f:16:6a:f5:09:e6:77:81:4d:6d:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:78:08:32:EF:9D:35:2E:57:20:37:E3:04:FA:B5:A8:79:9A:FD
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lwR4CDLvnTUuVyA34wT6tah5mv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.24.98.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e6:ad:21:52:60:59:e6:2e:d2:b2:04:cc:18:17:2c:74:1c:
75:37:44:8b:05:af:b0:c4:e1:48:17:d9:17:3c:32:f2:76:87:
ef:8f:9b:12:79:8f:c9:c0:00:31:c9:05:39:f2:5c:16:8a:37:
da:57:4f:72:ae:a2:4f:ee:3d:d3:59:99:2d:10:fc:00:77:06:
7c:36:0c:40:66:e3:4d:1a:0a:fb:20:8a:0b:b0:a9:89:f9:47:
1a:5d:0d:8e:1e:a9:d0:bd:85:85:20:8d:10:26:8a:84:8b:26:
d5:41:7d:f4:5c:ff:d1:50:81:80:d1:e5:5c:22:a3:bd:5f:ca:
f1:3b:a5:ae:73:e7:36:a9:b4:ab:ef:f3:fb:55:09:60:d1:ec:
21:e3:61:55:32:ba:90:56:dc:7c:4a:c9:c5:cf:d5:13:30:e9:
21:62:8d:31:27:7a:69:46:67:95:0b:8e:06:a7:4e:05:10:74:
86:76:26:11:c1:df:c4:69:23:53:04:53:d1:fa:71:aa:09:a4:
f1:5b:2c:d6:f1:35:c2:26:55:e6:b2:d1:98:b1:59:59:17:2f:
08:61:67:dc:ad:d6:ae:f3:b7:77:35:f3:d6:92:ec:56:06:41:
c6:b8:16:6b:3b:eb:bd:bc:52:71:62:6d:c3:5f:69:e5:10:54:
e3:bc:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:37:34 2026 by rpki-client