Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LST4lhm3CkbzzOTZlKwtABXYV6A.roa
File: LST4lhm3CkbzzOTZlKwtABXYV6A.roa (raw, json)
Hash identifier: QCPbcsM446cpO9Z3DJB6QvEKtdgxp94L7N3lgQp7LF4=
Subject key identifier: 2D:24:F8:96:19:B7:0A:46:F3:CC:E4:D9:94:AC:2D:00:15:D8:57:A0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0607D74D42DB02641F259C526FCA49DB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LST4lhm3CkbzzOTZlKwtABXYV6A.roa
Signing time: Fri 08 May 2026 05:20:37 +0000
ROA not before: Fri 08 May 2026 05:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.136.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:07:d7:4d:42:db:02:64:1f:25:9c:52:6f:ca:49:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 8 05:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d24f89619b70a46f3cce4d994ac2d0015d857a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:61:d7:0d:06:2b:05:45:3c:30:d7:71:55:
cb:56:aa:9a:61:e3:3a:9a:dd:24:26:ca:2f:c0:39:
bf:d5:e9:1a:e8:0f:d2:d0:00:e5:b7:2c:c6:a7:14:
47:57:80:43:ed:47:b2:c6:5b:91:24:51:34:93:3e:
d1:0c:81:f3:5c:42:5e:15:d2:2b:cd:05:b8:82:c1:
89:d6:e7:f8:ec:04:e7:a7:73:df:60:f1:4a:2d:27:
06:45:a3:ae:8c:cc:1a:c9:c9:9d:cd:ef:61:ae:58:
51:93:2f:1d:8e:b7:56:44:81:5c:b0:d2:77:f1:5d:
08:0f:0e:53:6f:8d:ea:24:96:2c:1f:08:4b:70:31:
10:da:0a:e1:31:da:40:52:5e:f1:2f:a6:a6:51:aa:
c5:70:9a:b4:a5:f4:82:c3:01:14:b7:e6:b0:c5:d9:
8d:37:c0:3a:76:a1:8b:3b:f1:54:7a:41:66:7f:19:
64:5b:b1:a8:8f:af:83:e4:39:88:6e:9d:0f:ad:76:
67:57:ab:c3:8f:34:a2:6a:17:26:2f:13:4c:18:ca:
55:5b:a6:ed:0f:8d:fe:a9:0b:2f:ef:fd:0b:c2:f0:
17:a1:7a:7c:39:e4:26:73:45:79:24:8e:26:58:cf:
7f:f0:50:37:2d:79:65:07:e5:f6:8a:eb:6d:b2:75:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:24:F8:96:19:B7:0A:46:F3:CC:E4:D9:94:AC:2D:00:15:D8:57:A0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LST4lhm3CkbzzOTZlKwtABXYV6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.136.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:39:d6:9a:80:16:78:e1:0b:a3:87:8a:4c:f3:f8:5f:93:59:
02:93:54:91:27:a9:27:5f:a0:f0:75:98:78:eb:30:9f:42:08:
86:8b:da:d4:56:44:4f:3a:bd:e3:16:e1:f4:4a:44:86:b7:91:
48:bf:55:17:71:fb:8c:7f:a7:32:ee:50:f3:8c:97:20:d2:0b:
06:73:25:19:0c:8c:b7:66:40:eb:00:dd:4f:3e:be:79:55:d0:
8c:68:c7:c9:0f:2b:7e:0e:cd:fb:ed:8b:e2:63:c5:d7:1e:07:
a2:fe:02:4f:19:3f:4b:1e:31:0b:ca:d8:69:a1:63:ba:34:1e:
74:a0:cf:13:e0:4f:e6:df:ab:93:72:64:91:0e:29:38:d5:40:
98:f6:a3:56:a7:af:1f:65:92:6c:c9:46:83:12:9d:b9:0e:73:
c7:d3:79:43:88:65:40:40:3e:bc:eb:03:69:91:5b:aa:3d:a4:
70:e0:df:ff:b8:7d:db:26:4c:ba:c0:6f:0d:6b:a6:29:da:99:
6b:9d:e1:7c:9b:51:c1:79:4b:9a:f2:79:b8:37:8c:ba:79:07:
10:87:70:3d:9f:87:e0:fe:61:2e:16:5e:55:d8:6c:5d:77:36:
f7:4b:08:53:11:bb:d7:cb:13:47:68:9f:6e:e7:d2:c9:a4:e8:
46:0c:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:27 2026 by rpki-client