Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmB_tsH-36hyH7tteDYRHHKHJCM.roa
File: lmB_tsH-36hyH7tteDYRHHKHJCM.roa (raw, json)
Hash identifier: cala7/kAMMlm6KR0AOs1gwPsTBJLJnfOEix1z+K7XDk=
Subject key identifier: 96:60:7F:B6:C1:FE:DF:A8:72:1F:BB:6D:78:36:11:1C:72:87:24:23
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D276761130CA04D3BCA0615101E0DBD78
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmB_tsH-36hyH7tteDYRHHKHJCM.roa
Signing time: Wed 25 Mar 2026 23:49:39 +0000
ROA not before: Wed 25 Mar 2026 23:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201039
IP address blocks: 5.175.171.0/24 maxlen: 24
5.230.195.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:67:61:13:0c:a0:4d:3b:ca:06:15:10:1e:0d:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 25 23:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96607fb6c1fedfa8721fbb6d7836111c72872423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:16:ae:7d:db:25:3c:20:ba:a4:94:87:12:
b2:53:a0:fc:75:c4:78:4e:05:40:3b:da:5e:71:d4:
bc:93:1f:15:6a:87:9b:f9:61:89:b9:ea:2b:76:bb:
78:6f:65:52:5b:4b:b6:78:a1:4f:2b:27:91:aa:37:
ca:78:93:c3:81:3d:d7:c6:8b:d7:21:3e:fe:19:73:
75:9d:ec:20:0f:01:c7:b4:4a:b8:0e:c8:53:ed:d4:
e6:29:ba:4c:99:27:1b:84:a5:fd:8f:22:87:34:60:
8d:de:a0:4c:ce:51:11:f6:86:aa:e8:f2:57:e8:a9:
85:ab:01:0e:6f:4c:47:a7:0c:85:68:32:81:56:b2:
48:dc:b8:e0:d1:86:0b:96:de:39:14:62:29:d2:d6:
de:5a:dc:12:f1:23:f7:f2:11:4a:b0:eb:8a:51:20:
8e:54:cd:49:9e:bb:de:bb:ad:60:eb:c9:dd:0c:49:
d6:d2:d2:65:bd:ca:9a:24:cf:25:0b:e0:83:05:6b:
2f:40:58:3c:51:cb:50:59:4d:d3:6e:d4:57:b6:0d:
a3:21:dd:e0:0f:8a:c5:b6:05:33:22:34:52:65:a7:
7b:b1:c8:66:2b:54:62:59:8b:0f:a8:92:bf:fc:d0:
fd:ba:db:47:4d:46:e3:5c:08:d5:9c:76:d7:02:4d:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:7F:B6:C1:FE:DF:A8:72:1F:BB:6D:78:36:11:1C:72:87:24:23
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmB_tsH-36hyH7tteDYRHHKHJCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.171.0/24
5.230.195.0/24
5.231.252.0/24
Signature Algorithm: sha256WithRSAEncryption
db:7f:37:38:c8:b2:39:9b:56:17:ed:94:d4:41:3c:e6:bc:1d:
42:48:99:c3:33:fc:39:cc:fd:d2:bd:19:d6:70:21:4b:dd:6d:
e3:a3:3a:21:54:80:cb:ec:7a:0d:8b:2c:df:3c:2a:03:e6:03:
b2:6d:b5:d0:59:b3:95:b3:a1:89:21:2e:e8:f4:9c:a5:1a:28:
cf:6b:dd:33:99:62:7e:6b:29:6f:5d:a6:f9:90:7c:6d:3f:a6:
9a:68:73:38:c6:dc:29:c5:5c:cc:ef:21:fd:d6:aa:8b:55:f9:
97:6e:23:07:a1:2c:19:67:82:14:9a:a9:ed:d5:f9:60:a9:f4:
52:22:d3:40:6f:c2:a5:6c:f1:c1:12:a5:93:43:02:ef:dd:c2:
1d:14:07:bb:00:c8:38:25:b5:ca:35:0f:f4:46:eb:9b:ee:06:
14:7b:33:63:b9:0b:ec:8a:c5:d9:39:3e:85:ba:26:7e:f1:c4:
99:9e:93:77:12:59:22:4c:cb:ea:49:ec:15:9a:e4:34:8d:f0:
c7:d3:c2:72:9e:e9:43:e4:4b:55:18:5f:b3:4b:9b:86:c0:df:
72:72:08:6d:2f:ab:ae:49:8d:c3:69:57:5c:29:bc:65:55:e9:
57:97:43:e5:d5:e0:04:48:03:c1:ca:58:69:17:71:43:b5:59:
0f:05:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:48 2026 by rpki-client