Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/L2SGUtmn8iVoAZusJiJO0lWPz-c.roa
File: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (raw, json)
Hash identifier: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=
Subject key identifier: 2F:64:86:52:D9:A7:F2:25:68:01:9B:AC:26:22:4E:D2:55:8F:CF:E7
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019D4E408A91DECD0F4FD2F3D2B4419DC568
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/L2SGUtmn8iVoAZusJiJO0lWPz-c.roa
Signing time: Thu 02 Apr 2026 12:52:25 +0000
ROA not before: Thu 02 Apr 2026 12:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214673
IP address blocks: 62.129.138.0/24 maxlen: 24
92.62.118.0/24 maxlen: 24
178.251.232.0/24 maxlen: 24
193.143.69.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
2a11:4880::/32 maxlen: 32
2a11:4881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:40:8a:91:de:cd:0f:4f:d2:f3:d2:b4:41:9d:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Apr 2 12:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f648652d9a7f22568019bac26224ed2558fcfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:9d:68:d3:03:f6:cb:de:03:9f:b9:bf:94:
64:d1:11:40:48:97:0a:d6:21:2f:fe:05:09:84:9f:
d4:65:4d:70:ee:db:9b:a4:fd:65:cc:d0:88:b4:ae:
92:8b:22:03:52:ac:79:8f:5c:a3:46:fc:81:8f:ae:
18:a6:57:d8:5b:99:46:de:a4:3f:28:48:73:99:ee:
d1:d8:5b:5c:20:f0:1d:5f:01:a1:aa:15:68:34:b2:
ea:26:39:a6:b8:2e:2f:71:7c:bf:d9:54:78:dc:8f:
ab:fc:eb:32:10:4a:fb:49:b2:27:04:2d:6b:af:8c:
2e:33:6d:0d:23:0c:1d:b0:d1:6f:23:c1:a4:fc:d3:
8f:3d:5a:ad:97:e6:55:24:22:a2:99:b0:33:b9:f1:
fe:e7:90:ac:3b:37:26:15:f1:14:79:94:93:47:7c:
de:1e:93:d5:f0:d0:ad:a7:01:39:fe:9d:95:22:11:
6b:21:c8:8e:16:f4:f2:9f:67:4a:bc:40:bd:22:04:
c8:d7:7d:6b:82:c9:de:8d:43:60:31:51:ac:29:1b:
d5:84:f2:b4:58:99:29:81:70:db:41:c0:01:2a:2d:
c9:56:ac:89:df:9f:09:bc:9d:7d:e1:b3:b9:38:99:
05:cc:e3:4c:5e:40:2b:2c:fb:d1:68:e4:da:3d:12:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:86:52:D9:A7:F2:25:68:01:9B:AC:26:22:4E:D2:55:8F:CF:E7
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/L2SGUtmn8iVoAZusJiJO0lWPz-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.138.0/24
92.62.118.0/24
178.251.232.0/24
193.143.69.0/24
217.180.14.0/24
IPv6:
2a11:4880::/31
Signature Algorithm: sha256WithRSAEncryption
5c:cc:82:aa:b1:4d:a5:63:b7:a0:e5:e2:5d:49:29:27:c4:ae:
b7:5c:2d:8b:3a:cf:45:6e:61:be:57:bc:f7:68:c3:2c:1e:cc:
d7:65:7c:da:4f:21:6e:19:6d:33:39:64:0f:87:24:14:85:2e:
2c:d8:1b:c3:b4:c1:dd:e2:2b:d8:28:38:4e:a5:e2:f0:ce:50:
7f:be:4b:2b:06:d7:52:58:ed:9a:6c:1b:1e:ae:64:0f:d9:7b:
2c:1f:a5:73:23:22:6d:58:a8:40:f9:07:f4:ed:f4:7b:c3:a4:
41:1f:d8:57:3a:7d:64:01:e5:dc:7a:b5:af:8d:04:90:d6:71:
57:95:ee:ed:09:a2:33:1f:b7:06:f2:58:4a:d9:a3:c8:16:8e:
9e:f5:b3:eb:73:44:91:b5:9b:af:9a:ed:8a:24:d5:2d:ac:0d:
21:f1:fc:db:b6:8b:97:97:e9:e5:7b:e1:cb:6a:2b:db:68:c1:
22:66:1a:61:02:ff:fa:30:4c:a1:be:c4:48:7e:ac:99:de:7c:
64:fc:a9:b1:74:34:2f:a7:be:eb:d9:f4:35:8e:9e:cc:7d:d9:
b7:56:fb:56:50:f1:b7:a2:6c:ad:78:98:3b:f1:30:5d:cc:12:
65:5c:44:32:f3:6b:38:75:5e:b7:a8:ab:68:c3:88:1b:f9:ab:
53:e9:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:55:29 2026 by rpki-client