Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/L7UW-pXnvlYkWrXuWl-BHGTptSA.roa
File: L7UW-pXnvlYkWrXuWl-BHGTptSA.roa (raw, json)
Hash identifier: 1E6LvcCv88x4DMY8tXMsH9q68BaOLR9gOeVWD7ScU5g=
Subject key identifier: 2F:B5:16:FA:95:E7:BE:56:24:5A:B5:EE:5A:5F:81:1C:64:E9:B5:20
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019E8DDC101938856B4BEC8F21E138F0D3A6
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/L7UW-pXnvlYkWrXuWl-BHGTptSA.roa
Signing time: Wed 03 Jun 2026 14:21:09 +0000
ROA not before: Wed 03 Jun 2026 14:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42521
IP address blocks: 37.230.201.0/24 maxlen: 24
94.101.96.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
2a13:b200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:dc:10:19:38:85:6b:4b:ec:8f:21:e1:38:f0:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jun 3 14:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb516fa95e7be56245ab5ee5a5f811c64e9b520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:9a:ab:c2:f6:06:f4:03:65:06:e7:04:07:
2b:e7:60:15:65:ba:b1:65:62:bb:6a:80:4f:cc:16:
50:11:0b:f7:88:62:7b:99:91:8c:64:ea:7a:2b:58:
ac:97:82:34:8a:df:89:f8:dc:7b:7a:2f:d7:4e:3a:
0f:65:e9:8f:c7:2d:26:a9:0f:a3:f1:ce:6f:77:b5:
5a:67:a1:8b:57:5f:08:73:8d:6f:13:89:f9:f0:9d:
dc:a3:5d:8e:61:2f:85:7f:6f:7b:b3:e6:52:06:15:
de:be:d7:ba:ab:73:85:16:43:2f:ca:54:2a:9a:df:
88:3c:f3:26:6f:c8:dc:46:8b:f6:b1:c4:ac:1b:0c:
ef:43:4f:03:40:39:69:4a:ee:14:f4:9b:ee:ff:64:
95:0b:8c:72:d0:e4:84:67:0a:c9:01:d5:68:0b:7f:
1d:13:2f:b9:3a:25:7f:57:a2:65:44:a1:52:2d:fb:
2f:46:27:ed:e5:7e:7b:ed:fe:2f:d8:62:89:dd:71:
d3:23:4d:b0:80:a9:7c:f2:f8:14:c4:78:4e:49:38:
87:5a:8c:25:a8:c4:a5:5b:d4:df:88:4e:82:b7:3d:
b1:dd:25:70:d1:17:3a:1d:77:03:ea:a0:71:51:ee:
61:b4:b1:60:b4:2d:d5:b8:9c:bb:50:9d:f6:b5:0a:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:16:FA:95:E7:BE:56:24:5A:B5:EE:5A:5F:81:1C:64:E9:B5:20
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/L7UW-pXnvlYkWrXuWl-BHGTptSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
94.101.96.0/24
212.86.99.0/24
IPv6:
2a13:b200::/29
Signature Algorithm: sha256WithRSAEncryption
56:02:23:f9:6a:6a:44:ca:a4:59:d7:7c:c1:8e:0c:b9:b1:42:
3d:82:f6:6f:29:5b:36:84:03:d0:91:35:3d:fe:3b:74:9f:ef:
de:2d:5f:71:7c:bc:26:e2:21:18:9f:c3:4a:e7:ef:07:0e:d2:
fe:4b:ed:32:63:c9:8e:2c:93:c6:f3:e5:ec:94:63:66:03:85:
29:67:13:c0:85:00:e2:fb:86:89:10:a6:54:6e:f3:25:df:4e:
42:2d:a9:5b:53:3c:8a:50:20:a6:b6:16:a3:30:81:52:23:6a:
f8:7c:7c:e2:34:1a:f0:d0:88:17:1c:0c:bf:85:d5:7e:cb:58:
37:bc:f2:d4:80:6f:b7:24:f8:d5:31:e3:6a:89:be:bd:27:13:
ed:d0:45:bf:8a:08:03:b1:4c:a7:2a:f7:5b:2e:82:9b:85:2c:
42:c8:0f:b3:40:de:fe:49:06:9f:71:78:1a:56:8b:8b:b6:9a:
40:54:8d:11:44:67:e0:bb:6e:b3:40:44:ac:af:1e:b9:70:c6:
68:79:7c:be:21:64:8d:3f:f5:34:4c:d2:e9:6f:0d:86:8a:b2:
5f:f8:b0:de:f1:1e:e5:e8:e7:de:9a:cc:96:b8:bf:2f:fa:12:
4a:8d:0e:7b:c7:ad:99:2e:c4:a6:f6:eb:54:4a:a8:b8:a6:c2:
02:95:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:19 2026 by rpki-client