Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/LFDAvqd5xb9FRRe2yM-W79ogPLY.roa
File: LFDAvqd5xb9FRRe2yM-W79ogPLY.roa (raw, json)
Hash identifier: kgpiAD7VzIWymrLBR33coCOY8GXE7q973+jeIW77I1A=
Subject key identifier: 2C:50:C0:BE:A7:79:C5:BF:45:45:17:B6:C8:CF:96:EF:DA:20:3C:B6
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019E94C4DCEBA134DAFA984AEBC5CBF7B519
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/LFDAvqd5xb9FRRe2yM-W79ogPLY.roa
Signing time: Thu 04 Jun 2026 22:33:09 +0000
ROA not before: Thu 04 Jun 2026 22:33:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34872
IP address blocks: 176.126.127.0/24 maxlen: 24
185.20.7.0/24 maxlen: 24
2a13:3d00:fff5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:c4:dc:eb:a1:34:da:fa:98:4a:eb:c5:cb:f7:b5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jun 4 22:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c50c0bea779c5bf454517b6c8cf96efda203cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:f9:ec:bc:bb:83:23:da:95:39:f8:79:bb:
cf:3c:a6:dc:11:1e:72:a4:45:44:bd:12:b1:77:50:
5a:ba:98:5b:42:14:8d:20:b7:40:f7:29:bc:f7:fa:
fa:53:ec:89:cb:8e:77:68:9d:19:d9:81:82:13:fe:
42:49:1e:76:47:47:16:08:be:fe:c7:cb:b5:0b:fb:
9f:cf:f4:29:5d:09:64:b0:34:87:61:c4:18:c7:5e:
3d:b1:d4:34:bf:3e:7b:d6:97:f0:58:2c:1c:06:38:
fa:cf:56:b6:c6:42:e2:0a:cf:6c:2a:0c:36:b2:e4:
05:d8:73:ea:c0:da:7b:ca:88:27:b5:23:b0:5d:d6:
ff:0c:4f:80:e1:84:c7:86:cd:7a:11:70:68:cc:a3:
c1:78:86:d3:3d:40:c5:71:b0:13:b5:11:61:9b:9e:
8a:19:98:c9:2d:0b:b2:53:c8:66:fb:12:c5:9a:b7:
a8:06:73:4e:00:b4:63:fa:f3:a8:fc:a5:df:aa:b3:
19:0b:ae:2d:85:15:86:6d:1e:ed:52:16:61:a6:ed:
7b:6a:32:e2:de:b1:f4:6a:54:80:7a:cd:e8:95:b1:
a1:5b:fe:67:57:4c:07:a9:2e:4d:2b:33:5c:df:5e:
62:51:8a:6b:d1:b5:09:d2:68:db:d8:2b:59:0d:8e:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:C0:BE:A7:79:C5:BF:45:45:17:B6:C8:CF:96:EF:DA:20:3C:B6
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/LFDAvqd5xb9FRRe2yM-W79ogPLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
185.20.7.0/24
IPv6:
2a13:3d00:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0c:ff:58:c5:ff:92:88:a4:f0:ac:b5:6f:92:ac:9b:74:20:
67:71:f0:9e:16:52:83:ac:25:0f:32:de:b4:18:68:76:06:00:
77:86:d9:eb:b9:06:59:c5:29:a1:94:a0:e6:61:fd:6b:99:de:
81:29:1c:6b:4a:22:57:fd:f9:d6:8a:d7:ac:ef:f4:31:52:7c:
6f:5f:72:da:90:b5:b4:4f:e6:bb:32:5f:a1:2e:90:39:d2:85:
51:f6:f9:49:09:3b:58:09:64:0c:cf:bf:45:44:c8:ea:48:04:
80:10:0b:0a:9e:6d:1a:d4:db:e4:f8:b0:91:98:97:58:72:45:
f3:5d:58:52:e3:ae:d2:f5:cd:8d:e8:14:8e:e1:11:40:ea:c7:
30:7e:3a:e4:68:4f:ed:e8:00:f3:a8:c9:d9:f2:6c:a5:68:18:
4a:09:b8:2c:5e:b3:37:3d:90:c7:44:6b:b1:08:67:18:41:d1:
c3:94:a5:64:34:4d:39:5c:50:f9:50:34:39:26:66:2f:2c:39:
6b:f6:b1:a4:07:46:f2:3e:54:8b:56:d3:91:3c:4d:4c:37:90:
e4:71:a8:aa:c0:d1:9f:8b:6d:20:37:41:2e:d4:55:64:de:19:
58:91:9e:95:9c:8e:29:4d:22:c4:6d:ec:a5:c0:87:53:4a:aa:
8b:38:15:30
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ6UxNzroTTa+phK68XL97UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1
NzA4YTIwHhcNMjYwNjA0MjIzMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzUwYzBiZWE3NzljNWJmNDU0NTE3YjZjOGNmOTZlZmRhMjAzY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrP57Ly7gyPalTn4ebvPPKbcER5y
pEVEvRKxd1BauphbQhSNILdA9ym89/r6U+yJy453aJ0Z2YGCE/5CSR52R0cWCL7+
x8u1C/ufz/QpXQlksDSHYcQYx149sdQ0vz571pfwWCwcBjj6z1a2xkLiCs9sKgw2
suQF2HPqwNp7yogntSOwXdb/DE+A4YTHhs16EXBozKPBeIbTPUDFcbATtRFhm56K
GZjJLQuyU8hm+xLFmreoBnNOALRj+vOo/KXfqrMZC64thRWGbR7tUhZhpu17ajLi
3rH0alSAes3olbGhW/5nV0wHqS5NKzNc315iUYpr0bUJ0mjb2CtZDY6ubwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCxQwL6necW/RUUXtsjPlu/aIDy2MB8GA1UdIwQY
MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt
MWFlYjZhNGU0NWFkLzEvTEZEQXZxZDV4YjlGUlJlMnlNLVc3OW9nUExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk
LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAsH5/AwQA
uRQHMA8EAgACMAkDBwAqEz0A//UwDQYJKoZIhvcNAQELBQADggEBAF0M/1jF/5KI
pPCstW+SrJt0IGdx8J4WUoOsJQ8y3rQYaHYGAHeG2eu5BlnFKaGUoOZh/WuZ3oEp
HGtKIlf9+daK16zv9DFSfG9fctqQtbRP5rsyX6EukDnShVH2+UkJO1gJZAzPv0VE
yOpIBIAQCwqebRrU2+T4sJGYl1hyRfNdWFLjrtL1zY3oFI7hEUDqxzB+OuRoT+3o
APOoydnybKVoGEoJuCxeszc9kMdEa7EIZxhB0cOUpWQ0TTlcUPlQNDkmZi8sOWv2
saQHRvI+VItW05E8TUw3kORxqKrA0Z+LbSA3QS7UVWTeGViRnpWcjilNIsRt7KXA
h1NKqos4FTA=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:00 2026 by rpki-client