Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/LFr-w9NItl8zWh0QAWXu7DCjZUg.roa
File: LFr-w9NItl8zWh0QAWXu7DCjZUg.roa (raw, json)
Hash identifier: ddwPUwXN2o8HTNm6Uup8AeFSpuubYVS+0n9fVbqLjzA=
Subject key identifier: 2C:5A:FE:C3:D3:48:B6:5F:33:5A:1D:10:01:65:EE:EC:30:A3:65:48
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 01A0B54CC87BA13AB6B00102F8BF0CEFB971
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/LFr-w9NItl8zWh0QAWXu7DCjZUg.roa
Signing time: Fri 18 Sep 2026 16:15:03 +0000
ROA not before: Fri 18 Sep 2026 16:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35200
IP address blocks: 78.157.202.0/24 maxlen: 24
2a01:a505::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4c:c8:7b:a1:3a:b6:b0:01:02:f8:bf:0c:ef:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Sep 18 16:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c5afec3d348b65f335a1d100165eeec30a36548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:7f:9a:d2:89:eb:3a:c7:95:07:a8:92:d2:
58:64:d4:d6:be:51:94:3c:a8:d0:20:a9:52:fe:f2:
68:6f:b9:17:a5:70:ed:80:40:ea:ba:ac:4b:8d:f6:
d5:69:ce:ad:d1:2e:86:75:61:cb:27:e7:cd:78:fe:
71:a8:79:07:0a:4c:8e:6b:bc:b4:63:c6:c8:da:a1:
a9:d3:ac:29:47:77:6b:e8:d8:d1:99:10:7b:c9:9e:
21:86:dc:c8:35:27:01:cf:82:aa:89:60:e3:ee:5b:
06:5c:fa:23:63:e4:fa:e7:4d:21:45:8d:fe:c1:8e:
21:0c:22:7a:1f:78:4a:3d:64:fc:a1:b9:95:67:07:
92:dc:5f:ed:69:1e:86:d8:12:9d:e1:a3:99:38:de:
ca:80:dc:a3:c9:cd:24:af:8d:b0:92:7f:ec:86:e1:
f3:11:81:65:24:dd:fb:28:e5:ad:da:20:63:3e:6d:
f9:47:8b:9f:13:ae:5e:c2:a5:b7:4b:9d:a9:4c:07:
ba:e8:ac:45:ef:45:4b:2f:f2:43:bd:bc:73:a4:b1:
dd:13:24:30:e7:7d:bf:b1:46:c4:4a:4e:eb:35:3b:
d3:68:33:75:19:b7:19:16:b0:d7:3d:9c:35:a9:05:
69:2a:d5:e0:bc:2f:ab:8d:7d:a5:89:51:cf:dd:31:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5A:FE:C3:D3:48:B6:5F:33:5A:1D:10:01:65:EE:EC:30:A3:65:48
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/LFr-w9NItl8zWh0QAWXu7DCjZUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.202.0/24
IPv6:
2a01:a505::/32
Signature Algorithm: sha256WithRSAEncryption
41:d1:c5:6c:68:26:68:95:8c:85:56:af:c0:06:3f:60:e4:1f:
32:c7:3f:82:2a:a3:4b:08:1a:12:cc:70:60:20:a8:b3:d3:ce:
59:ff:da:cd:ee:75:ac:ca:22:6a:5c:24:df:b8:60:3b:bb:8e:
db:4f:d0:ed:03:3c:5e:0a:5a:7f:e5:42:49:69:a9:39:8b:6c:
41:73:2a:48:73:dc:ad:6d:2e:b3:7b:0e:b3:09:df:95:e1:20:
af:78:aa:b7:62:0f:ba:35:5f:11:17:7f:63:36:81:dd:a1:d4:
29:0d:f8:98:42:3e:5b:87:c1:43:45:de:1c:ea:41:57:ba:fe:
81:06:63:cf:a6:5f:25:8d:5c:77:3a:16:9e:72:8c:f4:f7:02:
9b:3b:1b:7d:ed:d3:72:f7:0c:3c:34:65:2e:30:44:7d:aa:0b:
b8:1e:4c:95:f2:ac:6f:5b:04:23:e5:62:40:38:c1:33:b0:c6:
49:e5:e2:aa:ba:91:86:01:8c:7e:0e:7b:99:80:70:05:db:9c:
b4:5a:f5:ce:5b:fa:61:6f:0d:9a:05:2c:55:ef:3d:a8:f8:9c:
60:0c:0c:1d:d1:66:fc:fb:94:b7:52:a8:88:40:8b:85:d1:33:
c9:e3:e9:00:a7:af:4f:8f:7f:0c:cb:c2:47:71:fa:2f:14:d6:
2d:d3:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:33 2026 by rpki-client