Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LQVM5_choprsfMptI4SaKDzNfzU.roa
File: LQVM5_choprsfMptI4SaKDzNfzU.roa (raw, json)
Hash identifier: CBeqxcrU3y7QUKZLPyhCpTdHsZuCHB7dzyETkbLaiHQ=
Subject key identifier: 2D:05:4C:E7:F7:21:A2:9A:EC:7C:CA:6D:23:84:9A:28:3C:CD:7F:35
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 01A1CDA191B2A8E30C949F6BCC6392FE3139
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LQVM5_choprsfMptI4SaKDzNfzU.roa
Signing time: Thu 12 Nov 2026 02:41:20 +0000
ROA not before: Thu 12 Nov 2026 02:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.149.128.0/20 maxlen: 20
46.174.104.0/21 maxlen: 21
109.197.16.0/24 maxlen: 24
109.197.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:a1:91:b2:a8:e3:0c:94:9f:6b:cc:63:92:fe:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Nov 12 02:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d054ce7f721a29aec7cca6d23849a283ccd7f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:9f:c7:2a:2a:50:5c:9e:de:4d:c6:bd:45:
16:dd:54:5f:97:44:a6:87:ad:3f:ac:22:f9:e9:1a:
db:8a:c4:0b:18:d2:ee:51:7d:a1:2c:80:8a:9a:b6:
ed:c1:7c:72:24:40:da:b6:76:c2:28:29:a2:13:77:
d7:90:ac:ae:f7:4a:5c:83:03:2b:c6:42:74:69:f0:
75:e7:29:2c:06:3c:3a:33:9d:98:0d:3d:9d:5b:04:
9a:29:8a:d0:ca:fb:e6:e5:8d:92:c9:23:ac:86:2c:
c6:5e:d7:f4:c1:9c:9c:87:24:57:40:c0:6c:0a:c3:
81:ca:3a:33:90:32:ae:fd:03:fb:b4:df:ad:1d:09:
9c:91:41:a2:44:7e:cd:91:49:6c:81:e9:1f:b3:6a:
cf:9f:b3:4a:23:d8:ac:ff:16:01:fc:12:41:78:fc:
b2:a0:93:4b:04:05:e4:a7:83:5f:b6:f4:c5:ce:ef:
9a:87:f3:a6:4e:a2:2d:6d:1f:99:8e:ef:c0:7d:62:
9c:5d:b4:84:4d:64:d4:a6:7b:47:19:7b:b6:33:7b:
6b:26:1b:a4:ac:bc:49:90:ba:a6:22:d0:e0:18:76:
a0:22:01:3d:79:12:ca:9b:02:3e:03:f3:6d:0d:24:
ed:4a:2f:d3:de:ec:1c:de:c5:bd:22:fa:f7:e0:36:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:4C:E7:F7:21:A2:9A:EC:7C:CA:6D:23:84:9A:28:3C:CD:7F:35
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LQVM5_choprsfMptI4SaKDzNfzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.128.0/20
46.174.104.0/21
109.197.16.0/24
109.197.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:45:61:04:23:13:80:dd:eb:5e:fe:a7:94:ab:16:5e:e3:f0:
db:36:12:fe:b9:9e:fa:07:2f:ad:21:be:da:e4:00:7d:98:69:
32:b6:cc:18:79:b8:51:75:a7:2c:f0:9c:75:bf:e8:ec:4f:14:
ed:24:e1:bf:13:e3:2e:5f:f0:7d:39:83:38:20:07:d1:76:10:
f5:33:c3:48:3a:cf:fd:09:4b:07:5e:22:26:e1:bd:82:32:7f:
29:3b:cb:1d:8e:ff:43:8b:b0:5d:9c:1b:f4:70:6c:02:4a:23:
e0:15:17:7b:4b:fd:86:c3:8c:4e:05:b8:93:9d:b6:54:1c:73:
09:bc:44:c9:95:40:99:af:7f:d6:4f:f8:a0:2a:81:7b:93:5f:
5c:13:bf:63:49:61:11:8d:e9:e1:24:58:38:bb:4c:9a:3d:c5:
d5:dd:87:89:cb:32:6f:c2:e8:1f:10:f9:d3:9b:3f:dc:7c:53:
76:8d:55:c0:f4:bd:aa:a4:a9:ed:10:e1:17:b4:9b:26:63:98:
60:b7:d1:d7:1b:e8:c6:19:52:d3:3c:f4:7c:0a:ae:f2:43:3d:
6d:02:0c:00:e2:37:24:85:04:51:a5:ab:9a:44:f5:f5:8c:e3:
45:49:5c:b9:19:c3:14:cb:51:8a:05:c5:b7:6a:a4:fb:db:1c:
de:48:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:38 2026 by rpki-client