Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/LRCN_-7uwUM2pBkT4o2DH-IyjrU.roa
File: LRCN_-7uwUM2pBkT4o2DH-IyjrU.roa (raw, json)
Hash identifier: PsTBlSgl8a7/GAGEnt9PWNbACVgPS8spL8p43cb6BnQ=
Subject key identifier: 2D:10:8D:FF:EE:EE:C1:43:36:A4:19:13:E2:8D:83:1F:E2:32:8E:B5
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 019B7EA4E31B8BA78C56735B4078A95797F4
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/LRCN_-7uwUM2pBkT4o2DH-IyjrU.roa
Signing time: Fri 02 Jan 2026 12:18:13 +0000
ROA not before: Fri 02 Jan 2026 12:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43416
IP address blocks: 193.46.66.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:e3:1b:8b:a7:8c:56:73:5b:40:78:a9:57:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Jan 2 12:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d108dffeeeec14336a41913e28d831fe2328eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:9d:64:12:11:b3:3d:27:67:6b:96:bb:34:
59:97:3c:ff:c1:be:66:48:fc:34:51:46:e5:8c:a9:
95:92:81:1a:fa:d4:45:e2:f7:88:07:cf:d7:16:ff:
fe:50:d6:13:72:7b:3c:5a:76:67:65:36:be:d6:89:
ba:d0:48:5d:a0:db:4b:9e:0a:2e:9c:a2:b4:91:d1:
1c:1c:e9:57:ae:5b:41:12:1e:b6:ef:52:2b:df:74:
e3:79:35:3d:44:f8:d4:b6:fe:72:22:9f:3a:c6:7e:
bf:6e:40:c2:3b:5b:a7:31:7d:7d:a5:9b:38:5e:b2:
12:a8:9e:06:21:1d:6c:58:06:db:5e:59:ab:6a:3d:
9d:ec:ce:a9:ae:26:9b:ec:37:69:92:8b:b9:87:16:
de:32:c7:f5:27:65:c3:7f:6f:47:af:fe:7a:23:9b:
6f:56:0a:13:2d:00:20:2c:b6:de:02:f6:68:75:53:
a6:79:64:94:a8:f4:5f:27:c0:21:d5:8c:57:5e:87:
df:89:ac:88:84:cb:3a:37:be:06:db:6c:b2:13:14:
ae:33:65:b3:09:56:87:00:87:84:8d:55:6e:1e:cd:
d8:17:c1:bc:c2:5a:61:6e:38:32:58:d0:6e:e5:4a:
ab:88:4f:e7:51:ad:93:a9:d2:53:c9:c8:7e:2b:d0:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:8D:FF:EE:EE:C1:43:36:A4:19:13:E2:8D:83:1F:E2:32:8E:B5
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/LRCN_-7uwUM2pBkT4o2DH-IyjrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5b:d9:9a:7e:09:05:82:c0:3a:d8:b2:fd:8d:8d:28:f5:f2:
59:7d:7d:1d:5e:51:eb:12:29:4b:bd:7d:56:8f:05:e2:97:e1:
97:ae:60:c7:8a:85:fa:ea:97:e9:a8:94:af:25:e7:d4:64:57:
26:18:89:1b:92:65:b2:d5:87:4d:78:ab:03:4e:55:b7:be:7e:
c4:ff:1a:09:6b:3e:3f:e9:34:50:5f:45:e2:e6:3e:f6:ab:85:
b4:74:8b:c8:3a:7a:8a:4d:c6:29:c7:08:15:f7:78:57:99:71:
55:94:27:5e:f0:f4:f5:44:43:e9:05:f3:71:2b:3e:59:ca:1d:
4b:b0:00:79:01:8e:57:80:20:c5:74:d7:f7:27:a1:51:8a:cb:
c4:07:69:27:4a:93:99:a4:af:9a:6d:ec:48:6e:37:92:d4:4f:
dc:05:27:a8:d8:b4:f0:c8:ab:66:cb:b4:96:10:bc:6b:e5:45:
7a:eb:54:34:a2:71:92:9e:d3:d3:09:40:a0:ab:8c:a8:94:2f:
34:1a:02:fa:df:97:3f:19:48:c6:56:17:14:1d:03:18:ba:06:
5a:8a:8a:70:22:16:7a:3a:ff:40:e8:a8:3b:11:d1:57:b2:56:
a9:54:9f:f2:cc:70:8e:1b:01:f8:3a:eb:f2:47:db:60:8e:24:
4c:a1:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:26:20 2026 by rpki-client