Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LZFPwK5FlAKIP9xd_4q-9pHh8z8.roa
File: LZFPwK5FlAKIP9xd_4q-9pHh8z8.roa (raw, json)
Hash identifier: w9zkeFOdoHE1dls6VhhpIHfjERx9BxDhMFkzJUZRbKM=
Subject key identifier: 2D:91:4F:C0:AE:45:94:02:88:3F:DC:5D:FF:8A:BE:F6:91:E1:F3:3F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA678FDD3B3B2A139048722A058669313
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LZFPwK5FlAKIP9xd_4q-9pHh8z8.roa
Signing time: Tue 28 Jul 2026 02:06:14 +0000
ROA not before: Tue 28 Jul 2026 02:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 195.162.248.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:78:fd:d3:b3:b2:a1:39:04:87:22:a0:58:66:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 02:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d914fc0ae459402883fdc5dff8abef691e1f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:b4:5b:91:42:29:f6:34:fa:b6:e1:f4:44:
a1:3d:dc:f7:c1:31:f9:8b:50:89:27:06:45:a5:83:
e6:ca:09:29:93:36:c6:19:7e:d2:37:70:8d:02:d7:
49:d0:1f:11:c4:f5:1b:6c:2c:0a:9f:b2:cf:8e:c3:
f6:fc:a4:22:31:02:b3:08:a3:5b:41:bb:a0:41:29:
f4:c8:b3:c5:38:ab:87:6f:0f:03:02:5b:9c:13:a8:
45:19:1a:dc:f4:90:58:f7:29:6b:d0:6c:20:ec:81:
71:49:ff:df:0f:24:49:ee:b2:3c:da:c9:eb:dd:40:
4c:74:56:e0:d2:6a:33:29:d8:7c:60:c5:f6:05:bf:
a4:bb:f3:dc:93:10:19:1b:f5:18:d4:ed:f4:70:33:
a5:47:3a:69:dc:3d:fe:4a:4a:bc:98:b1:da:06:e6:
06:ea:f0:1c:e6:ca:71:d5:bc:f4:62:c1:14:ef:b1:
4e:fa:61:26:a1:bb:fc:38:0a:11:a0:a2:0e:9d:8f:
aa:b1:8b:da:76:eb:4d:c4:cf:84:d4:9e:8f:b8:fd:
22:34:36:a3:ab:07:55:97:ca:bd:ed:33:14:90:d9:
b6:35:4f:cf:aa:71:48:ca:93:23:3d:a1:ee:47:8f:
bd:45:d0:67:90:08:f7:14:37:91:2f:6d:88:93:47:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:4F:C0:AE:45:94:02:88:3F:DC:5D:FF:8A:BE:F6:91:E1:F3:3F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LZFPwK5FlAKIP9xd_4q-9pHh8z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.248.0/24
212.189.57.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:68:38:db:ff:2f:be:cd:65:77:7e:18:96:7a:77:68:59:62:
ca:2a:ca:ba:7b:25:7f:94:f7:fe:64:e4:b8:12:6b:21:b4:a2:
1b:9d:48:16:92:b4:f1:58:8d:f1:68:de:6b:4f:fb:b3:cc:52:
61:05:4a:39:3d:01:d9:f5:fa:be:26:ab:dd:5c:b0:36:f2:9e:
28:38:f2:39:0a:61:82:2a:1f:e8:38:1d:ab:11:11:dc:c0:27:
a4:c8:a3:fc:a1:ce:66:65:c7:f5:65:1c:11:b6:1b:4c:45:65:
2c:bf:f6:1a:73:0e:c8:35:ac:0d:08:e9:2f:9e:2a:3c:a3:2c:
8e:4a:7e:8f:83:f2:7e:10:40:e1:7c:be:1a:0d:5f:cf:44:d9:
5a:ea:be:6c:53:d2:a5:9c:d0:6a:eb:0e:19:93:f6:e7:c9:c7:
73:ce:98:50:3b:d4:b8:6d:e3:bc:72:61:48:68:ff:fd:74:ab:
12:89:fe:4b:fd:90:6f:f4:e6:4f:a6:1d:32:e3:7e:0b:41:cb:
cc:f8:69:38:2a:e8:1d:68:2d:a2:cd:61:89:c6:30:b7:7d:3f:
bf:c2:4a:e0:fe:c9:e9:33:89:04:22:ab:c6:02:2c:86:f3:78:
d6:9c:00:2c:5c:40:25:05:8a:ba:18:32:43:5d:da:bb:65:cd:
6f:cf:53:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:47 2026 by rpki-client