Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lsaTIun8KtVMrdtdwvbKoRWh_78.roa
File: lsaTIun8KtVMrdtdwvbKoRWh_78.roa (raw, json)
Hash identifier: 9aephi1E+NIB4UuAEzxVam9f6IihMqF8P3NbHHG2wJk=
Subject key identifier: 96:C6:93:22:E9:FC:2A:D5:4C:AD:DB:5D:C2:F6:CA:A1:15:A1:FF:BF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019ED3FEE0A3362A215C8C18BD1C2F13EAE0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lsaTIun8KtVMrdtdwvbKoRWh_78.roa
Signing time: Wed 17 Jun 2026 05:12:36 +0000
ROA not before: Wed 17 Jun 2026 05:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 185.142.30.0/24 maxlen: 24
185.142.31.0/24 maxlen: 24
202.71.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:fe:e0:a3:36:2a:21:5c:8c:18:bd:1c:2f:13:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 17 05:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c69322e9fc2ad54caddb5dc2f6caa115a1ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:da:78:89:38:e9:1d:0f:99:cd:79:60:b0:
84:b6:6b:80:f2:41:8c:29:9f:44:92:d8:b7:db:c4:
9c:59:af:3b:b3:90:9b:aa:95:fe:ba:2e:72:1a:cb:
f2:ee:1e:a2:81:89:67:d5:59:ca:4c:43:b6:ac:b1:
75:e4:5a:6a:78:cf:6f:99:ad:49:43:fc:d1:e0:72:
eb:ed:02:79:88:3c:ed:f6:28:d8:a6:9a:70:86:9e:
98:e5:6b:59:9f:2f:b4:39:61:7f:e0:f9:0b:66:ff:
d6:bf:16:72:00:21:cc:9c:b3:ac:b6:2d:e7:39:20:
5e:6f:d9:07:77:1b:07:fd:d5:55:59:19:83:7d:fb:
2d:fb:b1:a3:34:04:c0:e1:77:97:7a:91:a1:f3:9b:
8e:55:3b:8c:5b:0e:f6:2d:01:2f:b7:1c:3c:69:39:
30:80:bd:d9:bf:76:0c:ff:2f:ad:f7:07:02:5c:5d:
4d:4b:59:1c:7e:7d:f4:8e:f4:0b:1a:a3:bb:a3:70:
9f:95:e9:a7:44:b2:de:f0:39:74:de:03:44:35:0d:
25:32:14:91:e0:d7:1f:e3:39:40:50:ff:af:19:0a:
83:7c:88:6f:17:31:4d:af:ba:4c:e5:c9:2b:d4:91:
58:c9:0b:1f:d4:a1:86:f0:b9:b6:b3:0c:2d:83:2c:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:93:22:E9:FC:2A:D5:4C:AD:DB:5D:C2:F6:CA:A1:15:A1:FF:BF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lsaTIun8KtVMrdtdwvbKoRWh_78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.30.0/23
202.71.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e0:2e:ec:a3:8c:dc:46:b6:e0:01:64:38:ca:d6:39:a6:dd:
ab:1d:80:26:2d:cc:ed:47:7b:8e:a2:35:bf:78:9e:f0:31:88:
3c:a7:39:de:d1:42:71:69:9e:0e:9e:8c:66:d9:bc:4e:73:cb:
c1:d3:0b:01:a3:36:f4:71:9b:b3:67:b2:9d:59:e5:f6:43:dc:
f3:86:04:cc:26:b2:ea:21:8f:3f:10:8e:fe:4b:90:36:64:6b:
9b:e7:92:af:aa:6b:3c:03:dc:92:75:7d:fc:4d:d1:2e:c0:91:
9f:02:45:cf:c5:fc:8c:44:7a:36:d9:4b:fb:1d:8b:ac:de:c4:
33:42:f0:b3:04:20:b0:d0:10:bd:c4:2e:e6:a0:f7:64:cc:23:
05:d4:d5:59:74:6e:3b:9d:a5:a7:82:cc:04:6a:1e:38:d9:71:
38:8f:dd:48:3e:b6:c4:d3:2c:9b:6a:ac:8c:7c:db:01:f9:a3:
1f:91:4c:65:6c:71:ef:80:4c:34:83:a9:d9:dc:62:91:97:b2:
a0:a7:cd:da:68:b7:32:5d:8c:c7:e5:5e:7d:24:6a:6d:24:38:
f5:56:ce:db:d6:fd:ac:b2:ee:20:6c:93:a2:03:d1:ef:1d:24:
f8:4b:70:91:7f:90:48:f6:39:0f:a0:f7:e0:75:89:59:64:8a:
fe:06:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:50 2026 by rpki-client