Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/LgIlB017gkGvi3tfQvji-1KlnBI.roa
File: LgIlB017gkGvi3tfQvji-1KlnBI.roa (raw, json)
Hash identifier: FuA/PfPjj6SPGH44kDoH28D+Il0HM5oBcMZDYQ5B0Y4=
Subject key identifier: 2E:02:25:07:4D:7B:82:41:AF:8B:7B:5F:42:F8:E2:FB:52:A5:9C:12
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0AA92933A185ED3426093C0DB0191ED9F
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/LgIlB017gkGvi3tfQvji-1KlnBI.roa
Signing time: Wed 16 Sep 2026 14:15:27 +0000
ROA not before: Wed 16 Sep 2026 14:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 189.74.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:92:93:3a:18:5e:d3:42:60:93:c0:db:01:91:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 16 14:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0225074d7b8241af8b7b5f42f8e2fb52a59c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:3e:65:09:9e:44:40:40:0e:d3:20:2c:4c:
9b:0e:f6:af:aa:0e:9e:fb:cd:c2:81:e2:ab:3b:73:
87:17:64:91:e3:19:8b:91:69:82:9e:32:5e:57:23:
fe:03:bf:eb:e8:23:e2:1b:b4:89:68:60:9f:36:30:
51:ea:ee:12:24:9c:f3:7b:9a:11:4e:d8:16:f8:04:
9c:4e:d7:a9:76:f8:73:9c:0c:23:03:8d:19:78:9f:
f5:ae:f6:31:b3:77:78:b8:86:1e:65:93:fc:8e:48:
f1:67:f5:45:74:aa:74:a2:0e:bd:23:43:3f:22:ac:
12:02:90:50:65:26:d1:4e:a2:52:8a:09:b6:20:6c:
d6:5d:fe:f8:0d:d5:50:cb:17:a3:95:b5:0c:49:5a:
29:10:aa:d1:32:29:49:7b:f8:2e:a9:43:3f:68:d7:
0e:8a:81:44:bf:c3:9a:1a:d8:ee:3e:6b:fc:9c:17:
01:9e:b6:69:4d:b5:f6:01:74:8e:47:56:27:2b:05:
03:d4:bf:88:03:1b:70:b8:2e:1e:de:ac:21:11:b6:
77:49:ba:34:a5:a2:0d:02:1d:d5:f7:8c:7f:57:1c:
55:2a:f1:7a:92:28:a1:20:c9:df:a6:06:05:e9:79:
8e:bc:bd:29:ca:c2:aa:98:a5:2c:e2:56:47:6f:60:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:25:07:4D:7B:82:41:AF:8B:7B:5F:42:F8:E2:FB:52:A5:9C:12
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/LgIlB017gkGvi3tfQvji-1KlnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:72:95:f9:6d:8b:0b:20:08:8f:88:d0:c2:8c:ea:e4:46:e9:
c8:6e:79:c0:76:6b:36:f8:d1:aa:93:bb:44:d7:32:e9:e6:a1:
6e:d5:8d:5f:ef:23:98:5e:68:54:70:06:65:40:55:50:62:49:
c7:bb:60:e1:ab:60:09:80:e4:35:79:4a:04:26:9d:f5:46:6b:
45:7b:86:59:72:f0:95:40:1c:86:9a:57:8e:10:97:e3:13:23:
78:cd:20:82:95:8c:28:e7:24:0b:b6:f9:10:5c:5a:fc:ba:a4:
78:6f:1d:65:4c:ce:8f:8a:8f:a0:3b:d5:b3:8e:64:e6:0f:50:
00:5c:ea:98:02:0c:6e:21:e3:5b:10:ad:b2:a7:04:1d:06:e3:
89:58:97:2c:2a:cf:60:55:1d:68:80:b0:d7:0b:c2:37:90:4c:
08:1a:2d:fd:11:8e:8b:b4:0f:ca:f7:8c:c2:bd:ea:73:aa:ce:
36:f9:61:6f:7d:a9:4c:20:bd:98:27:40:ad:45:b4:50:72:7b:
98:a3:23:05:cb:c8:e4:6e:6c:df:50:cb:6c:20:14:0b:34:6f:
1c:51:3d:7e:84:a0:98:e7:9d:34:20:1f:0c:51:05:4e:48:0a:
5f:91:6f:e8:7b:c6:ee:d7:af:3c:04:d6:89:25:34:99:ad:20:
91:39:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:20 2026 by rpki-client