Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa
File: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (raw, json)
Hash identifier: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=
Subject key identifier: 2D:70:BF:9F:3B:E2:E0:26:FB:94:70:F8:3F:2F:57:2B:32:ED:0B:7F
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 019E03642B778ACD36BEDC2ED486856A244D
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa
Signing time: Thu 07 May 2026 17:02:36 +0000
ROA not before: Thu 07 May 2026 17:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205856
IP address blocks: 185.203.252.0/22 maxlen: 22
2a0b:d6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:64:2b:77:8a:cd:36:be:dc:2e:d4:86:85:6a:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: May 7 17:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d70bf9f3be2e026fb9470f83f2f572b32ed0b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:bf:59:ca:36:65:09:d2:6f:fc:bf:06:e5:
8b:7e:5f:8e:80:fb:be:74:18:10:de:d4:04:69:0a:
ea:5e:db:c8:99:34:e8:5b:b6:8d:9d:49:dd:88:70:
99:6b:de:91:1b:48:b6:c1:e4:ef:d2:86:8c:76:8b:
05:b0:f6:9b:36:a1:36:39:e3:5b:b5:c8:61:fd:34:
ed:4b:c3:51:5b:1b:74:4f:01:04:23:9d:32:f7:b4:
36:33:c7:09:69:2c:3d:85:22:f2:05:d1:8c:12:e4:
ea:a1:ab:fb:eb:b1:f3:09:b6:40:e4:b4:4e:9c:d6:
6b:c2:2d:8d:90:c3:45:e1:2d:5b:10:9e:ee:cc:2c:
58:42:9b:74:3d:74:8f:f9:24:60:df:4f:2f:7e:02:
28:81:39:9f:f9:23:a8:19:7c:e0:df:cc:ec:9b:bf:
8d:b1:b6:8b:8b:96:73:a7:ba:2b:eb:62:6b:cc:d1:
42:cd:03:40:5b:b9:ba:8b:af:ae:42:5a:bb:b4:51:
a2:e6:03:cd:d4:33:e1:e1:06:dd:a3:a4:92:4d:54:
c0:45:8b:bb:92:02:cc:ee:05:38:58:7d:1d:6b:c9:
be:63:7e:90:53:79:52:ee:98:9a:2e:3a:12:55:57:
da:39:22:74:7f:eb:5c:94:0e:78:b9:87:9a:84:2b:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:BF:9F:3B:E2:E0:26:FB:94:70:F8:3F:2F:57:2B:32:ED:0B:7F
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.252.0/22
IPv6:
2a0b:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:8f:b2:a8:1b:fc:ba:81:2a:ac:49:b4:03:80:b9:19:9c:1e:
5e:ac:39:ee:ba:a6:07:8c:a2:d3:72:a4:5a:e7:11:29:e5:01:
b9:c6:e3:2e:dc:a1:4e:08:f0:0c:bc:b8:6b:cd:97:42:fd:89:
36:ec:21:3c:e7:d8:7a:3b:c9:df:50:f8:20:b3:55:61:8d:47:
3e:73:ed:4a:ef:4a:df:a7:80:63:16:7a:58:39:80:5e:3f:cb:
f8:81:a4:09:02:70:6e:41:49:98:d9:f4:5b:0a:01:ca:09:4a:
8d:00:e6:1f:75:c9:bc:0b:53:b0:06:c5:34:da:e8:46:95:8e:
8b:ce:1c:6f:65:1a:75:2b:30:83:d3:23:e6:12:90:06:05:e7:
5e:21:5f:fa:6e:81:a2:25:66:22:8a:66:62:3a:74:69:09:4f:
3f:dc:33:2d:e1:5b:12:a4:8a:df:e0:72:b9:3b:d7:46:ec:d2:
64:e4:1f:e3:1e:bd:a0:f8:d3:6c:4c:79:e7:6b:1c:f8:65:d0:
8f:31:54:5f:d4:36:93:e8:ae:62:ee:fd:60:78:9f:81:72:bf:
04:1f:e7:1a:3b:f7:89:05:b5:5a:a3:a5:6c:cb:05:38:1b:fe:
d6:f8:f7:17:a0:91:72:38:28:4f:61:30:31:61:51:5a:76:a8:
bd:6f:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:29 2026 by rpki-client