Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/LLW6KMEjDdWJNHccooMhS8WkJBo.roa
File: LLW6KMEjDdWJNHccooMhS8WkJBo.roa (raw, json)
Hash identifier: 4wPZvW7aabauk/AVllnR9557p3pfAAJeEY/OlA5nxV8=
Subject key identifier: 2C:B5:BA:28:C1:23:0D:D5:89:34:77:1C:A2:83:21:4B:C5:A4:24:1A
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 019F23682E42C1DAE61BD8E1EBE22CA6C71E
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/LLW6KMEjDdWJNHccooMhS8WkJBo.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29668
IP address blocks: 185.62.76.0/22 maxlen: 22
2a01:90::/40 maxlen: 40
2a01:90:200::/40 maxlen: 40
2a01:90:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2e:42:c1:da:e6:1b:d8:e1:eb:e2:2c:a6:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb5ba28c1230dd58934771ca283214bc5a4241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:cf:0f:d2:b4:92:06:7a:ff:43:0e:47:d4:
0b:7d:02:d8:5b:d4:2c:dc:ee:aa:8b:d8:30:3d:13:
77:0b:2c:d5:b9:ca:97:fa:eb:e3:4d:5b:2a:58:9a:
7e:c0:26:69:bb:0e:1e:ff:f6:7d:28:a5:f6:fa:aa:
71:0f:76:dc:94:6e:fc:14:a8:9d:01:c1:d9:2d:1f:
61:a1:1a:4e:78:d2:9d:aa:42:b7:47:fa:f1:e9:b4:
da:42:72:e9:8b:a9:1d:21:84:09:be:30:7e:ad:48:
56:d6:f3:31:64:78:ba:5d:7f:e3:1f:80:7a:77:4a:
e6:6f:a6:f9:e1:f2:64:2e:2e:9c:8a:e9:39:cd:ff:
4b:49:a1:74:d6:d6:cf:08:62:c4:cc:6c:dd:1b:45:
94:f9:30:ba:49:1f:ae:88:5b:1b:ef:3f:7e:bb:17:
c4:bc:c7:38:1d:03:97:14:5f:31:28:66:8d:30:d8:
a2:06:1c:af:c8:c9:3d:25:6f:51:fe:5e:0c:c3:ec:
ad:b2:da:42:46:f6:41:8c:1c:e4:44:eb:8d:0f:2e:
db:9f:39:34:c7:6e:4b:42:45:f7:fc:e4:c6:8b:7b:
3f:98:df:c1:b2:49:49:1a:c3:c7:cc:34:4f:3e:5e:
4a:93:05:4c:46:37:74:f5:1e:76:c1:f4:02:e7:0c:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:BA:28:C1:23:0D:D5:89:34:77:1C:A2:83:21:4B:C5:A4:24:1A
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/LLW6KMEjDdWJNHccooMhS8WkJBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.76.0/22
IPv6:
2a01:90::/40
2a01:90:200::/40
2a01:90:400::/48
Signature Algorithm: sha256WithRSAEncryption
4a:45:a0:dc:8a:e1:0e:3f:cd:a9:bf:10:2c:80:f3:24:ff:08:
04:d8:4c:41:e3:49:b5:db:45:46:28:e2:80:a6:22:41:1f:22:
db:3e:82:e3:22:0c:f7:d5:e4:bd:6f:9f:00:71:3c:e1:7c:4e:
af:6d:7b:d0:8d:77:c8:f5:33:9d:98:68:89:fb:a8:b4:5d:41:
09:db:da:5c:3a:f5:2d:b7:89:1d:bb:38:5d:c9:d8:57:6d:41:
44:06:bc:c2:4e:fb:99:3c:75:d8:45:46:13:39:0b:cf:74:17:
5f:e7:06:24:09:80:54:96:3c:b5:e3:16:a2:cf:c7:2d:1c:5d:
00:2a:33:1c:f5:96:59:7a:39:ea:39:84:cd:41:50:79:1f:0b:
8c:ee:81:f3:22:d7:d4:97:57:4e:ab:01:08:34:e6:a8:81:c9:
4d:e5:b0:55:46:89:df:d2:68:a0:03:8f:ae:e2:79:26:7a:bd:
e8:58:34:fd:64:b6:59:73:5a:64:39:0d:7e:6d:76:25:91:b8:
1e:5c:56:d4:a8:d4:54:6a:26:e2:d9:a7:3d:aa:fe:84:a6:59:
82:53:24:3c:8c:7f:2d:26:26:3b:30:af:fc:a7:f8:62:c1:03:
fd:37:10:4e:fb:0b:2c:c0:3a:9e:24:94:39:b8:93:a3:2f:d7:
83:69:47:6c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ8jaC5CwdrmG9jh6+IspsceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGQ5MDE1MjUzZDc3YjdiOGFiNzliYmJlYmIzZWZjYjc0
MmMyZjEwHhcNMjYwNzAyMTUxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2I1YmEyOGMxMjMwZGQ1ODkzNDc3MWNhMjgzMjE0YmM1YTQyNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/PD9K0kgZ6/0MOR9QLfQLYW9Qs
3O6qi9gwPRN3CyzVucqX+uvjTVsqWJp+wCZpuw4e//Z9KKX2+qpxD3bclG78FKid
AcHZLR9hoRpOeNKdqkK3R/rx6bTaQnLpi6kdIYQJvjB+rUhW1vMxZHi6XX/jH4B6
d0rmb6b54fJkLi6ciuk5zf9LSaF01tbPCGLEzGzdG0WU+TC6SR+uiFsb7z9+uxfE
vMc4HQOXFF8xKGaNMNiiBhyvyMk9JW9R/l4Mw+ytstpCRvZBjBzkROuNDy7bnzk0
x25LQkX3/OTGi3s/mN/BsklJGsPHzDRPPl5KkwVMRjd09R52wfQC5wzPXQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCy1uijBIw3ViTR3HKKDIUvFpCQaMB8GA1UdIwQY
MBaAFL9NkBUlPXe3uKt5u767Pvy3QsLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt
YmZkZWMwYzExMmUzLzEvTExXNktNRWpEZFdKTkhjY29vTWhTOFdrSkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz
LzEvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQCuT5MMB8E
AgACMBkDBgAqAQCQAAMGACoBAJACAwcAKgEAkAQAMA0GCSqGSIb3DQEBCwUAA4IB
AQBKRaDciuEOP82pvxAsgPMk/wgE2ExB40m120VGKOKApiJBHyLbPoLjIgz31eS9
b58AcTzhfE6vbXvQjXfI9TOdmGiJ+6i0XUEJ29pcOvUtt4kduzhdydhXbUFEBrzC
TvuZPHXYRUYTOQvPdBdf5wYkCYBUljy14xaiz8ctHF0AKjMc9ZZZejnqOYTNQVB5
HwuM7oHzItfUl1dOqwEINOaogclN5bBVRonf0migA4+u4nkmer3oWDT9ZLZZc1pk
OQ1+bXYlkbgeXFbUqNRUaibi2ac9qv6EplmCUyQ8jH8tJiY7MK/8p/hiwQP9NxBO
+wsswDqeJJQ5uJOjL9eDaUds
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:34 2026 by rpki-client