Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LfjDNE-2FngxUCITPDlTT4H22L8.roa
File: LfjDNE-2FngxUCITPDlTT4H22L8.roa (raw, json)
Hash identifier: /SWUYOUxnSP5DXZ5UJ4gO6emMUv0k7T0kcZYqU2OQA8=
Subject key identifier: 2D:F8:C3:34:4F:B6:16:78:31:50:22:13:3C:39:53:4F:81:F6:D8:BF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0ED9D8A19089C18596DCF8E6CC874B8DA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LfjDNE-2FngxUCITPDlTT4H22L8.roa
Signing time: Tue 29 Sep 2026 14:41:59 +0000
ROA not before: Tue 29 Sep 2026 14:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218821
IP address blocks: 178.219.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:9d:8a:19:08:9c:18:59:6d:cf:8e:6c:c8:74:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 29 14:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df8c3344fb61678315022133c39534f81f6d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:c4:22:0c:1b:6f:fd:c3:46:1f:77:aa:b3:
a4:72:29:e2:2c:b3:0c:2a:51:d0:ba:11:40:e7:aa:
fb:a8:70:08:24:94:a7:f8:55:9c:4d:a8:e5:67:a6:
72:aa:fc:07:9c:75:bc:34:00:39:f3:67:18:35:eb:
ae:10:16:2d:ab:c4:21:ad:dd:61:10:36:8f:81:47:
c4:b0:8a:98:85:51:14:29:ae:2c:bb:53:28:8b:2b:
9a:c8:31:10:88:0f:cc:65:ba:91:89:db:f7:b5:43:
6e:bb:df:9d:c1:16:d1:af:8e:92:4e:5a:57:2a:10:
aa:89:7e:4b:2a:ce:98:5f:dc:88:66:40:55:21:1c:
eb:ce:70:17:e8:e0:59:9a:28:e8:b4:b5:02:df:76:
23:a2:8d:36:e6:f9:71:22:fe:3e:00:b6:7a:d8:5c:
3d:e2:e1:1b:9d:26:f7:68:83:43:bc:b8:64:68:7e:
14:42:bb:62:8a:00:db:84:12:38:54:30:8a:23:ca:
a0:ae:d1:99:ff:cc:e7:c7:4c:23:b7:dc:bd:09:9e:
4f:8f:e9:19:43:d0:2f:3e:6c:d8:57:9e:67:5a:17:
5f:50:03:bc:90:56:28:27:77:c2:4b:fe:87:c7:c7:
4a:dd:a5:f2:0c:ef:10:2f:8b:88:a2:6f:ff:ae:45:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:C3:34:4F:B6:16:78:31:50:22:13:3C:39:53:4F:81:F6:D8:BF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LfjDNE-2FngxUCITPDlTT4H22L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1d:54:35:48:6b:7c:06:04:8c:39:3d:8c:bb:3c:72:ad:0f:
9e:b0:04:17:f8:37:38:07:9b:dc:0d:ac:d9:1e:0e:f9:e3:66:
e3:c5:e7:20:c6:a3:d2:d4:81:38:b1:ba:f4:a5:55:82:3b:09:
77:59:59:26:7a:a6:a8:d3:43:cf:b7:b6:0b:b8:74:da:9d:a4:
9a:34:9b:bd:64:dd:cb:ca:0d:55:58:1f:c7:c7:a2:dd:77:4d:
06:61:f4:06:49:a9:f2:12:76:2b:d9:c5:4a:71:1e:fa:5c:53:
df:0d:c9:1c:a5:a7:9c:17:04:e0:93:33:8b:50:49:8e:3b:7a:
ba:20:be:40:e8:6b:08:db:11:96:92:6d:a5:c4:42:bd:8b:e7:
4b:7f:f6:71:86:8c:b1:36:7c:a8:92:e9:7b:0b:8a:7e:7c:d3:
e9:1f:9d:97:c0:2f:4b:b6:6d:10:ed:7b:f7:a6:12:ad:23:24:
3c:ca:ba:e7:e4:38:d5:03:c6:e2:10:b6:e0:f6:88:24:05:78:
4d:e4:e5:4e:2a:b2:49:75:9a:33:d3:a5:a0:66:8b:a9:fd:a0:
96:e5:ba:d5:a2:e7:01:77:16:82:15:b1:01:61:bd:18:5a:bd:
9b:51:62:b5:eb:17:6d:48:46:56:ea:11:6f:32:01:0f:43:ca:
62:cd:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:51:29 2026 by rpki-client