Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lgYuxVSlV2ae2TANr9cVVzNoxso.roa
File: lgYuxVSlV2ae2TANr9cVVzNoxso.roa (raw, json)
Hash identifier: tO+gqX64piRxokCPmWucAHemR7Lqxypp+2DfWUpXNCc=
Subject key identifier: 96:06:2E:C5:54:A5:57:66:9E:D9:30:0D:AF:D7:15:57:33:68:C6:CA
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F936BF879FF5F375251BD0FE1F9197EAF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lgYuxVSlV2ae2TANr9cVVzNoxso.roa
Signing time: Fri 24 Jul 2026 09:19:14 +0000
ROA not before: Fri 24 Jul 2026 09:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140469
IP address blocks: 201.3.124.0/24 maxlen: 24
201.3.125.0/24 maxlen: 24
201.3.126.0/24 maxlen: 24
201.3.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:6b:f8:79:ff:5f:37:52:51:bd:0f:e1:f9:19:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 24 09:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96062ec554a557669ed9300dafd715573368c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:64:bf:73:de:a3:ab:5d:5d:44:02:35:b6:
50:5b:23:4c:c6:6c:b8:68:05:55:51:ae:4c:63:2e:
60:aa:8d:bf:f1:bd:17:9a:25:5d:e4:17:e8:af:f4:
c9:28:25:3a:f2:a4:3a:37:47:db:ae:76:b3:20:c8:
ba:a7:b2:0e:5e:0c:35:3c:ff:aa:3a:4a:c1:a2:44:
a9:55:0d:2e:44:a9:c7:40:f3:bc:98:34:5a:9e:eb:
1b:ac:0e:ef:7c:57:eb:89:69:24:04:b7:5d:b8:23:
f6:e0:c8:92:ec:91:41:22:79:68:8f:00:98:06:2b:
cb:3c:a6:5f:50:be:60:cc:96:fd:0c:ab:e4:82:b1:
10:ed:5d:32:5d:18:47:15:97:d4:5c:64:89:bd:17:
20:4f:40:fc:79:53:c4:b8:b7:50:6b:83:70:26:f5:
77:5f:1a:fb:38:d1:6e:1b:f1:75:ec:ca:8b:e6:a9:
ad:5b:e5:84:47:82:42:66:de:8b:62:49:76:b2:6c:
81:ca:14:2f:a2:57:ac:9a:84:1e:44:5c:88:62:0c:
07:e9:fd:f3:01:2f:f2:9a:28:f8:ec:57:e3:30:3e:
4b:9a:f3:54:84:ff:9a:43:04:30:e9:2f:84:95:80:
e8:ca:59:80:3a:ef:65:f9:54:8e:94:d5:70:4c:54:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:2E:C5:54:A5:57:66:9E:D9:30:0D:AF:D7:15:57:33:68:C6:CA
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lgYuxVSlV2ae2TANr9cVVzNoxso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.124.0-201.3.126.255
201.3.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ab:d9:78:88:ef:30:03:42:19:22:e7:a9:f4:a4:d1:c1:98:
3b:c5:68:79:9a:79:4c:53:48:d6:27:b4:1e:e1:80:8e:81:5f:
16:e2:1a:f3:37:88:fe:cf:1c:59:b4:1a:26:ff:6a:47:df:b6:
63:44:d7:8d:20:a8:2a:82:84:7d:7f:bf:64:d1:ad:04:9c:87:
67:e3:a9:c0:f9:27:9e:6b:70:38:3a:19:20:2a:39:23:e3:54:
ad:2d:b3:bc:36:a4:bb:a0:18:e9:99:aa:a4:aa:ca:0b:5e:93:
3d:3e:02:36:8b:22:5d:12:8d:c3:af:3b:12:f0:47:ea:8c:3c:
e2:1a:7b:ec:73:5e:df:b8:dc:c8:f8:e3:1c:88:ea:43:43:90:
de:30:7a:bb:ab:7d:ad:0c:22:d0:f4:0a:b9:02:36:78:87:aa:
cb:8c:50:a1:76:ea:6f:eb:b6:df:9f:d5:59:00:98:b5:ae:73:
af:9a:ad:17:3c:94:2a:e1:1b:56:95:ed:c9:b8:80:c5:37:44:
1a:0b:c2:11:4c:5b:6c:7b:bc:85:08:51:0c:0e:28:46:20:30:
22:ef:af:cf:ca:bb:56:80:d6:db:6b:03:39:e9:1c:1c:ba:3a:
d9:e3:fa:33:22:ce:5e:d1:cc:60:c9:bf:c7:2a:d5:4e:2c:50:
7d:a8:c7:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:46:37 2026 by rpki-client