Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/l2FIOzPFvXObRwUNiGKUwkx8yng.roa
File: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (raw, json)
Hash identifier: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=
Subject key identifier: 97:61:48:3B:33:C5:BD:73:9B:47:05:0D:88:62:94:C2:4C:7C:CA:78
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019E72F27B48A285112592D211638527962D
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/l2FIOzPFvXObRwUNiGKUwkx8yng.roa
Signing time: Fri 29 May 2026 08:55:54 +0000
ROA not before: Fri 29 May 2026 08:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 176.103.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:f2:7b:48:a2:85:11:25:92:d2:11:63:85:27:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 29 08:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9761483b33c5bd739b47050d886294c24c7cca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:ed:19:23:08:0a:41:f5:b2:2e:e8:0b:49:
ce:77:92:de:e8:48:fc:fd:ba:bd:20:aa:1d:ff:23:
4d:a3:24:c7:65:f1:49:95:ce:b4:cc:82:28:62:ec:
6f:09:20:d9:81:31:9e:c8:ed:ab:f4:4b:a6:f9:1b:
ed:4f:b8:f9:e1:a2:cf:a2:bf:07:90:b9:4d:df:49:
1b:db:77:e4:7e:39:8b:e6:a3:07:57:2a:64:ec:d7:
c3:55:4a:34:ac:e6:d6:8f:ca:ae:3b:98:57:fa:d6:
0b:d3:00:3a:4e:f0:a4:c3:4f:37:4d:d4:2d:a2:29:
00:90:f9:99:56:a9:d1:cc:49:4a:ee:a5:51:b2:b0:
9f:a6:8f:3b:e2:ab:e5:0a:55:71:78:c7:a5:44:f8:
9d:d9:98:37:eb:13:48:a0:24:2e:e7:0d:2d:46:a2:
e5:d5:dd:91:d4:63:20:ac:0e:24:3f:bf:54:9a:60:
0e:52:aa:3e:24:3a:c7:e3:50:d8:30:a4:99:a7:fa:
d5:51:d0:1e:70:b0:02:74:08:a7:83:52:25:75:4b:
99:5f:d4:7e:cd:4f:d7:c6:ec:2c:7f:4a:6d:5f:f1:
90:4b:4f:ff:b3:4e:47:fb:c4:10:7f:ac:30:bf:67:
45:ae:b3:6a:06:78:12:dd:c4:22:00:26:2d:2f:7e:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:48:3B:33:C5:BD:73:9B:47:05:0D:88:62:94:C2:4C:7C:CA:78
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/l2FIOzPFvXObRwUNiGKUwkx8yng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:39:db:93:c0:9d:5e:29:0a:9b:0f:16:23:a5:49:83:80:b6:
bd:df:ea:2a:52:11:df:fc:ff:d7:e6:90:e2:f3:f0:b0:dd:4c:
62:ff:6a:79:eb:81:bd:45:36:bb:72:80:e5:c6:d6:56:9f:dd:
0e:84:ce:4a:14:ff:d3:98:ab:a6:c8:d0:cf:9c:38:e6:6c:35:
e5:f7:4a:74:03:d5:42:d6:24:9d:05:7c:3e:4c:9c:80:7f:e5:
27:4d:b8:51:da:d1:35:4a:16:f4:4f:b6:38:df:6a:dc:86:07:
db:48:10:0e:60:ad:f5:88:22:c0:cf:b9:22:e5:68:1d:4e:59:
bd:a7:8d:65:3a:13:21:42:0f:fc:ff:50:68:02:c9:ea:6a:63:
83:d3:1d:59:cb:82:41:3b:1e:35:8b:e8:f3:20:a5:6f:f4:90:
84:d8:24:d8:7b:88:9c:f8:5b:d9:d7:d3:fc:7a:f3:26:88:00:
ff:bf:42:d0:9c:b6:4f:d6:7e:fb:8f:24:f3:5f:db:46:93:fd:
e2:2a:8d:02:24:04:75:4a:e9:c5:92:9a:fb:5e:c9:f7:fa:14:
f3:7a:a6:ea:9d:04:84:1d:c0:42:d4:c7:21:ff:bb:03:30:98:
04:d2:7d:c5:8f:37:3f:90:e9:e6:ab:96:4c:38:84:bc:92:2d:
b2:85:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:53 2026 by rpki-client