Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/L1KLoii7mllBm2dQe2-Gj8PsyDI.roa
File: L1KLoii7mllBm2dQe2-Gj8PsyDI.roa (raw, json)
Hash identifier: zs3GHCL4mut8DK7aF4W8FvASTk6ZHfaiz6+KBdL52cY=
Subject key identifier: 2F:52:8B:A2:28:BB:9A:59:41:9B:67:50:7B:6F:86:8F:C3:EC:C8:32
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019E97D60D09623E3C74BFC9208D8DD48AE3
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/L1KLoii7mllBm2dQe2-Gj8PsyDI.roa
Signing time: Fri 05 Jun 2026 12:50:48 +0000
ROA not before: Fri 05 Jun 2026 12:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16004
IP address blocks: 45.129.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:d6:0d:09:62:3e:3c:74:bf:c9:20:8d:8d:d4:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jun 5 12:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f528ba228bb9a59419b67507b6f868fc3ecc832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:79:b8:b7:49:4c:e1:e1:df:15:13:27:9c:
91:41:34:c5:ff:4d:b4:9c:00:e1:1d:db:cb:2b:7e:
d4:c0:ec:c4:7a:a8:54:1c:ca:7d:35:c1:12:7d:41:
b4:bc:af:2d:da:be:3a:8a:59:e8:12:b1:c8:b1:a6:
04:35:64:f8:d2:7c:2e:28:42:ed:c8:17:75:4d:18:
2e:3a:a0:fb:c9:d7:17:51:52:c0:8d:4c:6e:3d:1c:
b4:dc:c8:8f:3a:ea:d3:94:ea:3f:d5:e4:c6:24:07:
6d:47:4c:d5:1d:14:99:66:48:10:3c:a4:1c:e9:65:
b1:c6:8c:57:41:bd:fd:ca:47:8e:fc:c5:3d:d1:e0:
f0:97:13:23:3f:76:17:f7:a2:c1:c8:f1:5c:a2:cb:
9b:24:9c:4c:2e:51:22:a8:91:a1:04:23:30:ce:0b:
dd:07:82:dc:64:8a:9b:89:67:98:62:5d:c2:5f:db:
d8:87:2a:b1:be:fa:05:ec:3d:82:80:5b:d0:08:6c:
5a:50:0f:79:56:04:a0:3a:22:d6:c2:35:d6:7c:82:
d4:90:b0:85:aa:8e:a9:11:46:2f:68:e7:fa:ab:35:
6e:59:6f:38:14:1a:eb:f7:f2:30:e8:d0:19:fa:71:
77:00:bf:7e:ea:9b:05:20:ea:bb:b5:4a:7c:76:ce:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:8B:A2:28:BB:9A:59:41:9B:67:50:7B:6F:86:8F:C3:EC:C8:32
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/L1KLoii7mllBm2dQe2-Gj8PsyDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:ad:34:99:9c:34:1d:34:37:d4:e5:83:88:e3:af:a6:ef:7c:
bd:ca:8b:af:e0:dd:c1:6d:9e:b2:d7:b2:e9:8d:73:95:21:32:
0e:3b:ed:c0:14:2f:32:50:75:7d:b5:3b:cb:c9:9b:38:4d:a6:
62:ac:57:b6:0e:66:12:69:c9:6b:ea:97:e3:52:0c:8a:b0:07:
08:88:0d:71:1a:3d:a8:66:d2:0d:d0:c0:02:fc:3b:b5:fe:ef:
f6:9e:fd:93:22:47:d0:e1:65:08:35:04:ba:63:aa:73:6e:37:
64:03:6c:73:c7:51:c5:27:2d:76:8c:22:57:95:e5:6d:fe:2a:
03:e3:06:cc:08:4e:a9:70:f7:f7:05:48:44:1a:ef:d5:12:f5:
5d:f6:2f:63:28:6a:fb:de:9d:23:bc:ac:ad:92:85:0c:89:48:
ab:d2:90:84:6b:c2:68:a4:85:37:29:f8:26:36:af:67:ee:2b:
de:16:67:43:44:81:4d:4f:2c:38:af:c9:c3:ea:ae:f0:cb:56:
bb:b8:15:38:49:61:a1:a5:d6:52:f9:08:bb:79:60:19:3c:23:
cf:cb:78:0f:8a:af:c3:08:70:c0:db:e3:8c:1f:6f:8d:3c:4a:
0f:02:8d:e8:62:7d:15:ec:ed:f4:ab:41:5f:18:c9:94:11:12:
bc:5b:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:48 2026 by rpki-client