Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/LG1ojJBrL-is7jHDUY_yDrks3fo.roa
File: LG1ojJBrL-is7jHDUY_yDrks3fo.roa (raw, json)
Hash identifier: EtYSJzsIuCwlPxFXPE10satuYqBBIprVHzKYznzYCYs=
Subject key identifier: 2C:6D:68:8C:90:6B:2F:E8:AC:EE:31:C3:51:8F:F2:0E:B9:2C:DD:FA
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A0D0B2A4B78341D1E85DC51CB8AC3E680D
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/LG1ojJBrL-is7jHDUY_yDrks3fo.roa
Signing time: Wed 23 Sep 2026 23:56:03 +0000
ROA not before: Wed 23 Sep 2026 23:56:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197382
IP address blocks: 94.141.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b2:a4:b7:83:41:d1:e8:5d:c5:1c:b8:ac:3e:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 23 23:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c6d688c906b2fe8acee31c3518ff20eb92cddfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:99:4f:09:86:7c:5d:0d:ab:49:0c:cd:53:
4e:87:90:26:77:20:51:29:fa:5e:13:6d:91:da:44:
f8:a1:9e:7e:ba:e5:57:f0:42:ee:a2:96:12:a3:20:
ca:66:20:fd:af:31:a5:b9:18:f5:8e:56:10:18:1b:
1d:bb:13:27:75:65:20:7b:8c:76:27:64:02:cf:d5:
56:fa:f2:1b:88:e5:a3:09:8c:dd:92:29:de:cb:58:
3d:87:ca:1b:8e:09:cf:e6:bf:9f:c0:8f:9b:b8:e9:
ad:a3:37:08:6e:f9:51:ad:ee:03:4c:d0:91:df:d3:
4b:ab:3e:6f:ee:1b:3c:68:5e:37:9d:f2:3d:da:ba:
17:12:60:96:b9:9d:61:2f:f4:4d:e9:99:b2:a7:d7:
4e:31:f0:68:77:2f:b5:a2:cb:2a:3f:b3:93:7d:12:
a9:30:d0:99:cc:68:f2:fa:f6:9a:0f:fc:64:16:bb:
3f:13:32:73:26:06:39:9b:ab:4f:b7:23:93:03:14:
ab:ba:51:19:6e:26:d7:c4:f5:76:4f:3f:43:5d:24:
94:14:ab:86:49:d1:60:14:1e:0f:ae:3a:8d:24:11:
67:04:24:35:f7:c2:62:64:b4:ab:13:57:11:cb:b3:
f5:a3:50:1f:d5:e9:3f:c6:93:91:63:37:20:f6:3f:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:68:8C:90:6B:2F:E8:AC:EE:31:C3:51:8F:F2:0E:B9:2C:DD:FA
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/LG1ojJBrL-is7jHDUY_yDrks3fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:53:98:d4:19:67:56:b2:97:11:5a:72:3a:aa:0f:50:8f:d3:
02:49:71:b1:73:a9:5b:2a:15:ac:e0:61:76:3e:cc:71:18:df:
af:0a:a9:1b:3a:01:49:87:44:1b:85:6c:cc:a1:ac:79:7a:17:
8e:34:42:71:2b:33:e7:30:3b:9e:30:e9:7d:e2:57:97:83:09:
58:7f:5b:c8:aa:75:22:09:82:77:50:86:88:95:f0:89:b9:4f:
c4:81:d1:f1:d3:d0:d7:44:72:07:92:eb:ac:6b:e3:5c:0b:3a:
56:2f:3e:c9:9a:c0:e7:e7:f1:34:be:10:44:be:d9:e3:00:8d:
ae:2f:4b:d2:96:ba:74:fe:62:12:47:36:d3:96:dd:81:2d:7f:
7e:61:d4:c4:7a:ed:8f:1d:51:fc:ad:28:3c:fc:94:05:51:8b:
7f:85:d2:5c:b1:de:4a:6d:fe:ef:39:4a:c7:6e:61:d2:cb:8d:
ca:d3:b5:e1:cf:ab:a8:93:1a:0f:43:be:78:06:54:a7:f8:54:
30:b5:74:28:a5:26:89:13:2c:38:1a:8c:b2:ff:f9:03:63:99:
98:ef:e9:05:c2:b3:23:a0:5f:2f:5e:18:62:50:30:9a:c4:16:
26:66:b3:d3:ee:5a:fb:6b:3b:72:28:b0:95:c3:14:4b:07:04:
66:8f:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:37:59 2026 by rpki-client