Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmQGPxJIZr2nCrO4XefrEK_t1I4.roa
File: LmQGPxJIZr2nCrO4XefrEK_t1I4.roa (raw, json)
Hash identifier: k8DFwZ1yTKg98cIPZPuGxkFNWfdMiBcSsmhrXzHMSfg=
Subject key identifier: 2E:64:06:3F:12:48:66:BD:A7:0A:B3:B8:5D:E7:EB:10:AF:ED:D4:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E20843C5BA4829185A51D97D31E1CF193
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmQGPxJIZr2nCrO4XefrEK_t1I4.roa
Signing time: Wed 13 May 2026 08:46:37 +0000
ROA not before: Wed 13 May 2026 08:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:84:3c:5b:a4:82:91:85:a5:1d:97:d3:1e:1c:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 13 08:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e64063f124866bda70ab3b85de7eb10afedd48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:86:e8:67:76:84:99:ad:9e:eb:0c:d8:88:
32:39:36:33:4a:ae:dd:77:5a:7f:68:96:e2:b7:94:
bc:be:d8:d0:33:c6:2b:0f:19:0b:77:f0:4c:1e:2a:
39:fb:f2:6e:68:2a:c6:31:9f:ae:74:fe:f6:ab:4f:
63:ce:eb:df:16:79:b3:d5:91:13:ab:01:6c:85:ce:
48:71:47:75:6a:25:ab:ac:90:f0:24:4b:93:7c:5c:
30:4f:01:ad:6e:f7:23:0d:a1:63:b4:29:b2:e8:63:
fc:de:6a:62:e6:98:8f:f1:7c:4d:05:8c:e9:14:35:
37:30:5c:50:46:67:17:e0:82:38:cf:2b:24:13:c2:
6c:73:da:01:cf:0b:3f:8d:22:d6:dd:39:04:ab:a4:
c7:5a:26:b2:c6:1a:c2:4c:5c:e5:b7:da:a7:c0:a9:
b0:68:b4:41:d1:f1:c7:29:87:0c:78:62:ad:46:91:
47:b1:2f:b5:b5:12:25:5b:6a:f3:62:9a:79:1a:50:
b0:7f:09:99:a8:90:24:d4:0c:e7:a2:67:43:00:fc:
38:36:6e:89:6f:d4:70:0f:c3:79:c5:ea:67:e5:b4:
c2:c2:ad:8b:33:f9:21:3c:81:28:ff:16:9a:3a:18:
66:05:e0:87:7c:ce:3c:ba:93:8c:a6:9d:6d:50:98:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:06:3F:12:48:66:BD:A7:0A:B3:B8:5D:E7:EB:10:AF:ED:D4:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmQGPxJIZr2nCrO4XefrEK_t1I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
92.249.50.0/24
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7b:85:92:3f:7a:8e:b3:31:44:6a:2c:c6:cb:c7:e1:93:ca:
fd:bf:5b:c9:59:0a:84:67:19:16:a1:d8:40:f4:68:ed:c2:d8:
52:fb:99:84:7f:e0:96:69:a0:ad:f0:63:f3:89:87:c6:21:b7:
8d:ba:a9:75:3b:1d:fc:d1:09:71:75:8c:e6:d6:f4:60:b8:92:
d2:dd:e6:97:bf:80:d4:bd:44:14:78:4d:64:ee:cc:db:3d:93:
f2:fc:c8:4d:18:d4:f4:c8:5d:80:67:07:0b:35:ed:6e:3d:03:
00:2d:f8:7f:a7:e0:91:9a:d0:45:72:c6:c9:74:5f:40:dd:99:
f7:9c:23:c7:cb:4d:57:8c:bb:ac:d8:3a:52:dc:a1:7f:60:0e:
a5:f7:de:ba:51:f1:07:e8:4c:95:0b:c9:33:75:e0:4b:1b:9c:
b6:2f:4a:d4:48:24:7d:df:42:72:b9:ad:29:e2:dc:12:d7:f7:
19:73:84:94:d4:64:cd:09:ee:c8:85:da:77:ad:af:7f:00:68:
a0:33:5b:d9:a3:04:e8:07:84:e2:a5:46:75:49:1b:46:bb:12:
ed:dc:0d:50:28:4f:2d:03:ae:dc:f7:23:10:09:db:b9:8a:05:
0e:ec:40:ac:eb:f0:5b:0c:9e:11:9a:24:8f:12:3b:3c:5b:f6:
63:82:a6:fc
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZ4ghDxbpIKRhaUdl9MeHPGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTEzMDg0NjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTY0MDYzZjEyNDg2NmJkYTcwYWIzYjg1ZGU3ZWIxMGFmZWRkNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDiG6Gd2hJmtnusM2IgyOTYzSq7d
d1p/aJbit5S8vtjQM8YrDxkLd/BMHio5+/JuaCrGMZ+udP72q09jzuvfFnmz1ZET
qwFshc5IcUd1aiWrrJDwJEuTfFwwTwGtbvcjDaFjtCmy6GP83mpi5piP8XxNBYzp
FDU3MFxQRmcX4II4zyskE8Jsc9oBzws/jSLW3TkEq6THWiayxhrCTFzlt9qnwKmw
aLRB0fHHKYcMeGKtRpFHsS+1tRIlW2rzYpp5GlCwfwmZqJAk1AznomdDAPw4Nm6J
b9RwD8N5xepn5bTCwq2LM/khPIEo/xaaOhhmBeCHfM48upOMpp1tUJixcwIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFC5kBj8SSGa9pwqzuF3n6xCv7dSOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTG1RR1B4SklacjJuQ3JPNFhlZnJFS190MUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAB8N4AME
AC1C5AMEAC1C5wMEAC1Z9wMEAC2NngMEAFGh7gMEAFOPcQMEAFQ2MwMEAVXZggME
AFd4VwMEAFd4fgMEAFd4pgMEAFz5MgMEAF17bQMEAJNOZQMEArnaVAMEALneoAME
AMI3ugMEAMKprzANBgkqhkiG9w0BAQsFAAOCAQEATXuFkj96jrMxRGosxsvH4ZPK
/b9byVkKhGcZFqHYQPRo7cLYUvuZhH/glmmgrfBj84mHxiG3jbqpdTsd/NEJcXWM
5tb0YLiS0t3ml7+A1L1EFHhNZO7M2z2T8vzITRjU9MhdgGcHCzXtbj0DAC34f6fg
kZrQRXLGyXRfQN2Z95wjx8tNV4y7rNg6Utyhf2AOpffeulHxB+hMlQvJM3XgSxuc
ti9K1Egkfd9CcrmtKeLcEtf3GXOElNRkzQnuyIXad62vfwBooDNb2aME6AeE4qVG
dUkbRrsS7dwNUChPLQOu3PcjEAnbuYoFDuxArOvwWwyeEZokjxI7PFv2Y4Km/A==
-----END CERTIFICATE-----
Generated at Wed May 13 16:43:03 2026 by rpki-client