Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dLIeazVHUcmP4BLaYqLL1c5TzZg.roa
File: dLIeazVHUcmP4BLaYqLL1c5TzZg.roa (raw, json)
Hash identifier: Ei+AsctIw1vhhDd/FhIn2DoYuIToloUwsL/E+n9e4a8=
Subject key identifier: 74:B2:1E:6B:35:47:51:C9:8F:E0:12:DA:62:A2:CB:D5:CE:53:CD:98
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FAA48EF3F49554D73BFFB694452FF4539
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dLIeazVHUcmP4BLaYqLL1c5TzZg.roa
Signing time: Tue 28 Jul 2026 19:52:14 +0000
ROA not before: Tue 28 Jul 2026 19:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 5.181.20.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:48:ef:3f:49:55:4d:73:bf:fb:69:44:52:ff:45:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 28 19:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b21e6b354751c98fe012da62a2cbd5ce53cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:dd:d4:bc:7a:eb:fc:29:64:d9:27:7c:29:
4d:cb:c7:61:78:ad:8a:aa:8b:d3:86:0b:5e:8e:ac:
ca:0c:7a:50:ad:e0:de:73:bc:03:8a:96:8b:20:93:
a7:5b:a0:b1:f2:30:d0:d0:fb:7a:93:ec:4a:16:70:
6a:3a:a8:ae:68:65:62:fd:b0:58:30:c4:35:45:b0:
7c:4f:43:a9:03:78:b2:cb:31:9f:d4:0e:b7:0a:02:
1a:5d:f6:f2:f7:a5:23:5a:6a:ce:0a:90:8c:71:75:
a5:31:67:2d:b9:bd:fc:7e:3a:a3:c3:13:36:ce:06:
2d:fc:34:b7:f7:57:34:e5:c3:ea:55:24:70:99:13:
60:51:6f:db:9b:30:97:24:18:ba:cc:f9:51:25:48:
b4:43:f0:4e:06:55:55:67:9f:30:71:46:c8:99:cf:
a3:22:e9:58:70:2b:9d:ae:16:e1:4f:cb:ad:ce:2e:
ae:8a:3b:85:e9:51:bb:ce:17:6f:4a:61:ae:fc:63:
d0:94:61:4f:32:f2:96:07:3a:2a:5f:c6:7e:01:5f:
71:eb:a2:7c:1c:00:58:31:46:34:d3:44:90:dd:a7:
17:78:f1:b8:51:41:ba:ff:c2:49:4f:5a:9c:b6:ed:
80:c3:66:1b:b8:ec:00:d7:7e:e8:54:60:9c:7b:34:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:1E:6B:35:47:51:C9:8F:E0:12:DA:62:A2:CB:D5:CE:53:CD:98
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dLIeazVHUcmP4BLaYqLL1c5TzZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/24
146.19.106.0/24
185.74.222.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f6:4b:e8:fc:2e:32:d9:3f:e9:8b:8d:05:aa:e9:15:e1:3c:
2b:b3:6d:90:8c:c9:00:1d:d8:ec:12:af:04:68:1e:eb:41:d7:
89:07:71:c8:8d:89:d0:04:e1:35:d3:e1:ea:9c:9b:41:11:f2:
0b:f8:c7:96:bc:79:72:e5:b4:d7:d6:36:4a:9e:4d:8a:65:47:
77:c2:dd:c9:00:0e:de:3d:ce:95:1c:f2:4d:bf:7f:cc:81:d7:
87:5c:cc:df:3c:e9:c5:52:a7:c8:21:79:58:ed:8b:88:eb:b0:
78:60:7b:0b:6c:0e:82:21:72:ce:ea:8f:06:52:81:c7:58:8f:
1d:09:c7:a9:46:60:72:7b:de:2d:c4:04:1f:5f:6b:d6:38:eb:
a4:0d:8a:9e:69:a3:1b:ca:6d:5b:e7:1e:3f:2b:fd:3f:3f:65:
9b:ab:d1:ec:e1:53:3e:55:18:4c:46:38:31:b2:8f:24:1b:df:
e3:20:9c:be:52:ce:86:61:ba:d4:a9:09:4b:67:a2:3f:76:fc:
db:77:ef:64:04:ea:04:87:6f:e8:c2:2b:7e:2b:a4:f9:1e:1c:
08:bb:a6:e5:94:88:16:94:5d:62:d5:84:e7:99:0d:f1:a0:e8:
bb:bd:5e:37:e6:c1:73:19:5b:2d:07:1f:7a:99:b2:d0:fb:28:
b1:17:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:04 2026 by rpki-client