Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LJNur03sUKnbPnV1MjitqzQnvsA.roa
File: LJNur03sUKnbPnV1MjitqzQnvsA.roa (raw, json)
Hash identifier: fw5nbSWZMSrwMoC5TaM14i9GvjdrAdbKU82glYgbbZs=
Subject key identifier: 2C:93:6E:AF:4D:EC:50:A9:DB:3E:75:75:32:38:AD:AB:34:27:BE:C0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EADC46CAF71E650D5F464C19521CFCFF0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LJNur03sUKnbPnV1MjitqzQnvsA.roa
Signing time: Tue 09 Jun 2026 19:03:11 +0000
ROA not before: Tue 09 Jun 2026 19:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198588
IP address blocks: 189.73.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:c4:6c:af:71:e6:50:d5:f4:64:c1:95:21:cf:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 19:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c936eaf4dec50a9db3e75753238adab3427bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:25:c3:d3:01:ba:4e:e7:57:76:63:0d:89:
7b:45:01:17:74:55:39:cf:13:58:da:1a:30:72:c7:
6e:07:29:aa:a2:55:57:2b:b9:e0:94:80:ce:48:f3:
00:d2:8b:11:57:b8:46:59:24:2f:1f:83:dc:6a:c5:
aa:15:79:ac:5e:5b:a6:26:5e:c7:1a:02:5d:57:54:
ff:cc:33:14:9a:8d:a9:78:27:4e:3a:21:4f:73:73:
87:08:85:28:dd:55:56:27:90:b0:05:5a:87:ef:3f:
f8:df:2c:34:ad:91:37:b6:ae:1a:f9:61:a8:de:31:
dd:5b:6d:91:4e:40:4e:1c:ce:5b:70:f3:d7:e2:7a:
d6:fe:86:dd:40:8d:ac:3c:cf:5c:62:9b:da:5e:38:
6e:98:87:d9:ab:44:b6:0b:97:89:d7:ac:03:04:56:
78:b5:45:59:02:64:84:1c:af:56:50:c5:a1:a3:b9:
30:fa:d3:9a:1b:06:98:df:f0:b8:3a:0b:8b:c0:d2:
31:89:a2:01:77:13:33:ad:a0:dd:a2:55:2a:7f:1e:
d7:a9:e4:12:e8:29:5c:5b:94:fa:e4:cf:56:71:20:
c3:06:d1:1a:65:fb:66:e9:28:a1:0e:5e:98:bc:3a:
ce:f1:fb:90:36:3d:d7:fd:b2:04:5e:8a:4d:63:d2:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:6E:AF:4D:EC:50:A9:DB:3E:75:75:32:38:AD:AB:34:27:BE:C0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LJNur03sUKnbPnV1MjitqzQnvsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.16.0/24
191.44.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:69:51:6d:4a:8e:4a:1d:32:f2:45:02:f8:63:25:16:31:91:
76:60:28:99:9d:c6:ee:5c:67:48:46:01:77:d2:66:27:69:3d:
09:90:60:9f:50:93:41:85:3f:66:37:be:94:c2:58:53:4b:34:
1b:d7:2d:4d:66:6e:69:e2:0e:2c:76:51:d4:38:b8:02:09:8c:
64:a7:9d:09:88:b7:66:b1:2c:6c:c0:97:8c:a7:6b:79:bf:d7:
21:1f:34:c4:0a:a4:94:a6:8b:8d:4e:6c:ad:75:48:60:e4:ea:
3e:03:e8:f7:60:47:af:56:92:af:1e:6a:ea:9c:9c:07:d7:69:
69:b3:63:80:d8:a9:bc:e6:97:14:6b:70:a6:67:9f:a4:cf:4b:
26:cd:3e:f6:ad:d1:7b:ac:4a:46:5a:79:b9:83:98:01:7f:1d:
6a:fc:b1:63:a8:82:ec:41:2f:3b:68:f1:9e:6f:35:90:b1:ca:
06:53:91:dd:37:cc:ab:f1:a4:2b:6f:07:64:da:d5:3b:f5:21:
33:73:a3:97:28:c3:34:be:dd:e1:56:ce:c6:56:bb:fb:fb:2e:
b6:d6:f8:5d:49:8c:ec:52:f5:92:78:d7:e1:90:b2:cc:70:b9:
ac:b5:c0:ad:1b:c9:b4:ee:e6:e5:3e:05:16:77:4b:40:44:7d:
fb:c4:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:03 2026 by rpki-client