Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lm0JDakseN4M9k5prGS2OV01r6E.roa
File: lm0JDakseN4M9k5prGS2OV01r6E.roa (raw, json)
Hash identifier: tfEpnDtBaRvT6Y+MzPXehc/2PbbXY6lqNNMqfIJXsn0=
Subject key identifier: 96:6D:09:0D:A9:2C:78:DE:0C:F6:4E:69:AC:64:B6:39:5D:35:AF:A1
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019F88E2D3526C286FA3FA2B63DCF7EDB4EF
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lm0JDakseN4M9k5prGS2OV01r6E.roa
Signing time: Wed 22 Jul 2026 08:13:14 +0000
ROA not before: Wed 22 Jul 2026 08:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 45.12.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:e2:d3:52:6c:28:6f:a3:fa:2b:63:dc:f7:ed:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jul 22 08:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=966d090da92c78de0cf64e69ac64b6395d35afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:42:19:61:c3:3e:f1:92:bd:cc:03:71:a1:
ef:10:ef:8d:7e:4f:e5:8f:4a:dc:d5:53:54:c7:e9:
58:5d:1e:4e:6e:0d:15:eb:6b:ed:8a:e2:82:9e:53:
30:b0:ff:80:8d:4c:91:99:d1:6e:86:71:27:cc:a5:
79:89:f3:f4:a2:3a:ec:93:2b:00:59:8e:b2:ed:54:
fc:38:f3:fc:02:4f:58:33:aa:5c:0b:96:2a:31:5d:
78:01:ea:63:a6:7b:91:00:13:8a:04:82:db:a6:b1:
cb:9f:13:f9:49:89:bc:e0:4f:a0:c3:f3:29:af:71:
cb:ec:d6:c1:90:63:de:49:55:05:6d:5c:c7:1e:15:
a4:d1:2c:9e:37:9d:15:49:b0:04:0b:19:7d:08:ef:
02:ea:1d:fe:17:e9:77:ed:a2:fe:aa:f3:4a:02:21:
0f:9f:f5:dc:25:ab:a8:d6:6f:78:c2:6f:dd:a3:61:
6a:c5:31:c7:0e:36:e5:c6:aa:72:db:c2:01:0a:5d:
01:be:a7:cc:d5:52:42:dd:07:04:03:13:8a:34:10:
17:67:74:b8:1c:5d:9b:41:fd:37:9a:85:1a:8b:cb:
49:00:84:0e:49:b9:62:ff:c5:7f:29:6d:8c:6b:14:
42:71:28:90:ab:61:de:b9:15:33:e3:71:9f:43:22:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:09:0D:A9:2C:78:DE:0C:F6:4E:69:AC:64:B6:39:5D:35:AF:A1
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lm0JDakseN4M9k5prGS2OV01r6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a1:7d:2a:ee:4b:6d:b0:18:23:6e:b7:8f:69:6e:98:1e:74:
10:7f:70:8a:81:a8:53:76:97:8d:63:fd:ff:02:46:38:d1:bb:
45:94:0a:b9:80:9b:75:22:4b:7d:f7:71:74:7d:33:7f:56:62:
fa:14:ef:4f:97:f0:db:05:f6:a4:eb:2a:5f:bf:16:e8:61:fc:
2a:2c:f7:66:a7:80:0d:60:e3:23:e5:bd:f3:e8:2c:d0:f7:bd:
0f:f1:17:6a:83:96:9f:14:e5:3e:f7:1c:fc:22:09:ad:72:b5:
22:a6:da:62:7c:32:f6:c6:ac:08:15:65:b4:89:29:2d:27:a2:
2d:de:96:58:31:21:27:e5:17:4e:fe:52:48:c1:70:6d:2b:8f:
80:ac:b3:55:02:29:fc:bb:f0:8e:ba:96:00:7f:71:ea:bb:0c:
90:05:e5:13:4d:c9:e0:c9:c7:53:04:65:cf:82:be:83:dd:d0:
e5:4c:16:58:1a:1d:99:dc:45:57:ac:44:a1:15:5b:6b:33:3e:
fa:52:40:03:d3:24:df:65:81:5b:36:0b:85:4c:ea:c4:6f:0c:
21:c4:54:91:08:31:1d:5a:62:fb:d5:38:66:2a:31:05:40:3c:
6b:3f:bd:30:ec:39:3a:44:2f:58:84:fa:f8:44:0a:9d:71:7c:
21:40:cd:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+I4tNSbChvo/orY9z37bTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjYwNzIyMDgxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjZkMDkwZGE5MmM3OGRlMGNmNjRlNjlhYzY0YjYzOTVkMzVhZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02pCGWHDPvGSvcwDcaHvEO+Nfk/l
j0rc1VNUx+lYXR5Obg0V62vtiuKCnlMwsP+AjUyRmdFuhnEnzKV5ifP0ojrskysA
WY6y7VT8OPP8Ak9YM6pcC5YqMV14AepjpnuRABOKBILbprHLnxP5SYm84E+gw/Mp
r3HL7NbBkGPeSVUFbVzHHhWk0SyeN50VSbAECxl9CO8C6h3+F+l37aL+qvNKAiEP
n/XcJauo1m94wm/do2FqxTHHDjblxqpy28IBCl0BvqfM1VJC3QcEAxOKNBAXZ3S4
HF2bQf03moUai8tJAIQOSbli/8V/KW2MaxRCcSiQq2HeuRUz43GfQyLp/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZtCQ2pLHjeDPZOaaxktjldNa+hMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvbG0wSkRha3NlTjRNOWs1cHJHUzJPVjAxcjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzaMA0G
CSqGSIb3DQEBCwUAA4IBAQCuoX0q7kttsBgjbrePaW6YHnQQf3CKgahTdpeNY/3/
AkY40btFlAq5gJt1Ikt993F0fTN/VmL6FO9Pl/DbBfak6ypfvxboYfwqLPdmp4AN
YOMj5b3z6CzQ970P8Rdqg5afFOU+9xz8IgmtcrUiptpifDL2xqwIFWW0iSktJ6It
3pZYMSEn5RdO/lJIwXBtK4+ArLNVAin8u/COupYAf3HquwyQBeUTTcngycdTBGXP
gr6D3dDlTBZYGh2Z3EVXrEShFVtrMz76UkAD0yTfZYFbNguFTOrEbwwhxFSRCDEd
WmL71ThmKjEFQDxrP70w7Dk6RC9YhPr4RAqdcXwhQM26
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:42 2026 by rpki-client