Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/LgfZj6Djxc6AiqgBZPYClS3Fqlc.roa
File: LgfZj6Djxc6AiqgBZPYClS3Fqlc.roa (raw, json)
Hash identifier: E155P9uzJ9p4wxJjD3C11grXmJUR4s5LkvgqbItNoB4=
Subject key identifier: 2E:07:D9:8F:A0:E3:C5:CE:80:8A:A8:01:64:F6:02:95:2D:C5:AA:57
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 01A0B454F1D3F670BAE739A946B64223211C
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/LgfZj6Djxc6AiqgBZPYClS3Fqlc.roa
Signing time: Fri 18 Sep 2026 11:44:20 +0000
ROA not before: Fri 18 Sep 2026 11:44:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 185.128.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:54:f1:d3:f6:70:ba:e7:39:a9:46:b6:42:23:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Sep 18 11:44:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e07d98fa0e3c5ce808aa80164f602952dc5aa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:a1:89:3f:5d:a4:d0:74:ff:09:dc:dc:61:
60:e6:e2:7a:d8:87:d2:4b:f8:c4:91:36:55:ef:c7:
ae:52:32:52:a2:24:6a:c0:a2:b3:21:e2:04:01:f6:
f6:26:90:e0:d4:cb:86:17:16:ae:e5:8c:5c:34:fc:
48:db:27:39:cc:b9:fa:c0:82:90:d8:c5:a7:91:7d:
ff:8f:29:03:0c:dc:70:a1:e6:7b:3b:d3:61:7f:d8:
9e:be:54:f4:4c:92:86:96:04:e5:58:b8:b3:79:ae:
f5:8f:2a:0a:90:a5:0e:c2:c9:ae:a9:1f:8c:55:b9:
6d:87:f8:76:41:53:12:09:a1:ff:38:ac:40:2b:cb:
cc:a7:e4:aa:35:50:9f:6a:ce:d6:b6:88:4c:21:33:
d1:86:71:1d:07:a7:31:0a:a5:08:a7:50:ec:d4:31:
e8:89:e0:59:90:f6:d2:da:dd:4e:17:11:e8:a0:c5:
93:f8:51:c0:0e:24:ab:15:46:4a:b4:37:61:a7:69:
5f:7e:11:ef:ef:db:9a:f4:af:f3:5f:44:3d:14:bd:
16:85:8c:db:fd:a1:cb:d0:8a:53:36:64:b6:7d:4a:
5e:1b:f7:ea:23:4a:b1:39:c6:7e:d7:36:0b:68:8e:
4f:2d:8f:17:e7:44:34:d1:ed:ba:92:7d:cf:6b:e0:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:D9:8F:A0:E3:C5:CE:80:8A:A8:01:64:F6:02:95:2D:C5:AA:57
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/LgfZj6Djxc6AiqgBZPYClS3Fqlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e7:a5:82:fa:37:1e:a4:2a:5e:a4:38:13:99:35:0d:ea:f9:
cb:61:e6:b6:b3:db:f3:68:ce:e9:4f:63:b2:c9:05:96:10:a5:
d5:a0:f3:fb:c3:d7:3e:f6:11:c3:31:ee:34:15:7f:c2:3e:47:
89:f3:a8:2f:95:ac:3b:98:95:22:54:34:f2:78:07:11:9a:28:
37:da:2c:5b:88:ab:04:bc:7a:b4:be:39:ae:ab:4f:84:b8:bf:
19:b5:1d:77:c9:b3:81:b9:30:ff:b8:b5:b0:23:68:06:9d:17:
3d:ad:b3:6a:55:a3:64:08:95:5f:b5:04:e2:b0:d4:22:77:2a:
e8:f5:af:7f:9b:79:ee:97:e4:58:5c:fc:d1:91:58:d8:91:db:
bd:9f:03:fc:9a:30:94:40:28:54:25:01:26:f7:11:d6:ad:c0:
89:9e:dd:c0:33:7b:01:19:36:a6:21:c2:c1:a6:40:6e:d1:fc:
f3:13:71:55:c3:e7:36:9a:af:7b:fa:97:11:50:06:fb:7d:1c:
be:ef:1e:9a:ac:93:05:98:f9:5a:34:13:6c:58:94:58:50:77:
ca:2e:e9:75:94:ae:52:7e:ec:b2:1d:1b:4a:68:70:70:56:7f:
68:9b:af:c1:7d:40:d3:fb:69:6f:d0:ee:70:01:25:a2:d7:e3:
f6:9b:30:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0VPHT9nC65zmpRrZCIyEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh
YTg1MjIwHhcNMjYwOTE4MTE0NDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTA3ZDk4ZmEwZTNjNWNlODA4YWE4MDE2NGY2MDI5NTJkYzVhYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjyhiT9dpNB0/wnc3GFg5uJ62IfS
S/jEkTZV78euUjJSoiRqwKKzIeIEAfb2JpDg1MuGFxau5YxcNPxI2yc5zLn6wIKQ
2MWnkX3/jykDDNxwoeZ7O9Nhf9ievlT0TJKGlgTlWLizea71jyoKkKUOwsmuqR+M
Vblth/h2QVMSCaH/OKxAK8vMp+SqNVCfas7WtohMITPRhnEdB6cxCqUIp1Ds1DHo
ieBZkPbS2t1OFxHooMWT+FHADiSrFUZKtDdhp2lffhHv79ua9K/zX0Q9FL0WhYzb
/aHL0IpTNmS2fUpeG/fqI0qxOcZ+1zYLaI5PLY8X50Q00e26kn3Pa+AoUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4H2Y+g48XOgIqoAWT2ApUtxapXMB8GA1UdIwQY
MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt
NzBhMWFmNTFkZmJlLzEvTGdmWmo2RGp4YzZBaXFnQlpQWUNsUzNGcWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl
LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYCHMA0G
CSqGSIb3DQEBCwUAA4IBAQCa56WC+jcepCpepDgTmTUN6vnLYea2s9vzaM7pT2Oy
yQWWEKXVoPP7w9c+9hHDMe40FX/CPkeJ86gvlaw7mJUiVDTyeAcRmig32ixbiKsE
vHq0vjmuq0+EuL8ZtR13ybOBuTD/uLWwI2gGnRc9rbNqVaNkCJVftQTisNQidyro
9a9/m3nul+RYXPzRkVjYkdu9nwP8mjCUQChUJQEm9xHWrcCJnt3AM3sBGTamIcLB
pkBu0fzzE3FVw+c2mq97+pcRUAb7fRy+7x6arJMFmPlaNBNsWJRYUHfKLul1lK5S
fuyyHRtKaHBwVn9om6/BfUDT+2lv0O5wASWi1+P2mzD0
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:42 2026 by rpki-client