Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa
File: Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa (raw, json)
Hash identifier: 1v/i1kZJAPaWeakpaEAlVLItC/+EuwO/djTFONOVHBc=
Subject key identifier: 2E:E9:37:18:3D:7A:66:E6:B1:94:1A:03:29:D1:7D:EA:7E:17:DC:39
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019F9E812FCECA4B1747E4E6F8312E238C28
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa
Signing time: Sun 26 Jul 2026 12:58:14 +0000
ROA not before: Sun 26 Jul 2026 12:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.16.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:81:2f:ce:ca:4b:17:47:e4:e6:f8:31:2e:23:8c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Jul 26 12:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee937183d7a66e6b1941a0329d17dea7e17dc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:0a:22:d5:0c:26:56:1d:c9:fb:34:08:32:
55:67:6e:23:59:a8:15:3e:dd:59:75:99:d8:14:28:
b4:9b:b7:08:06:21:30:43:35:79:b8:0d:74:51:f9:
7f:b9:eb:21:d8:65:39:9e:98:e8:b1:2b:33:84:3b:
92:3e:8d:2b:a6:34:6b:38:79:9a:83:9c:d8:d1:8d:
fa:ef:b9:fe:d0:cf:e0:fb:6b:61:b2:87:76:63:2b:
9e:c0:84:a6:eb:50:2d:8c:92:f5:f6:ee:4b:bb:4f:
ce:67:0f:9e:53:f7:50:a1:6c:4d:73:05:a6:1c:24:
d7:c7:0d:22:01:68:83:22:e6:3e:7a:b5:49:d7:ad:
1d:65:df:ab:bd:73:d6:87:cb:9a:2c:f2:de:0a:d3:
ae:e5:69:cb:d9:a1:cf:ec:82:5c:b7:cd:b3:03:a9:
79:d4:ea:cd:8f:47:41:19:e7:ef:38:13:e9:3a:a8:
95:bb:44:5c:00:16:9d:6e:96:87:39:18:11:3e:13:
99:36:76:66:2d:51:f6:e1:c0:92:25:11:fc:44:7a:
f7:52:99:b7:cb:c7:77:c4:bd:5c:16:79:70:cb:5c:
29:1d:10:6c:bc:0f:b5:ad:0a:09:1a:43:ef:d0:2a:
6e:9e:7f:91:f6:79:ad:a1:a9:5a:7b:c9:07:a1:57:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:37:18:3D:7A:66:E6:B1:94:1A:03:29:D1:7D:EA:7E:17:DC:39
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.99.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4a:fb:8d:9e:a2:a6:2a:35:7a:47:47:68:84:52:8f:49:c1:
99:99:85:3d:28:8f:58:d5:13:05:aa:2a:0c:0a:4f:f9:3a:21:
6f:e6:e8:d5:2b:7e:8e:06:02:a5:aa:a1:9c:ea:22:af:f1:c5:
23:97:29:36:c5:77:f0:47:fd:af:0c:af:b4:9f:ab:f5:b5:2d:
93:88:ff:ef:f7:7f:9b:84:1a:11:c5:ab:fb:4f:cf:8d:0a:8a:
e4:75:0a:07:f8:76:6f:1e:fb:0a:5c:75:e8:fa:ba:b8:c4:eb:
00:19:99:19:61:a4:c1:ce:b7:70:72:1a:c5:13:80:c4:e8:b7:
9c:26:92:f4:3d:68:93:f0:70:7d:c7:49:e2:18:45:1f:6e:be:
c6:c5:ee:64:15:f0:64:c6:71:17:15:cb:4b:f9:3a:64:32:be:
99:1d:3e:b9:f2:54:6e:33:7d:71:e5:41:cc:de:2f:3c:2d:4a:
95:d9:8a:5b:56:5c:1c:f2:84:f8:5f:44:d1:db:5c:57:b7:36:
c7:56:a9:e7:24:36:fe:5c:7e:3d:c0:45:29:ee:6b:46:87:1c:
43:5a:db:71:ac:41:47:d4:36:ca:97:12:90:49:4d:8f:5d:8d:
8a:bf:95:47:0a:50:53:bb:79:86:9f:a5:59:9e:6c:e0:28:52:
ce:56:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:16 2026 by rpki-client