Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/lLkHxJqkE8fba1rru9i3aJf3RMY.roa
File: lLkHxJqkE8fba1rru9i3aJf3RMY.roa (raw, json)
Hash identifier: s90wIgzsP8JNTbm6DZweEnvciipAvCOC57+xLPE4UUA=
Subject key identifier: 94:B9:07:C4:9A:A4:13:C7:DB:6B:5A:EB:BB:D8:B7:68:97:F7:44:C6
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A0C2B611BCE577DD80112867A9800380E4
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/lLkHxJqkE8fba1rru9i3aJf3RMY.roa
Signing time: Mon 21 Sep 2026 06:45:07 +0000
ROA not before: Mon 21 Sep 2026 06:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 185.211.12.0/23 maxlen: 23
185.211.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:b6:11:bc:e5:77:dd:80:11:28:67:a9:80:03:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Sep 21 06:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b907c49aa413c7db6b5aebbbd8b76897f744c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:47:a1:e8:1e:77:b7:4c:5e:d1:76:9e:34:
37:b7:98:1a:99:3f:70:e0:3e:ae:17:66:86:e5:d0:
18:d5:8c:d8:b3:a0:f3:14:ba:a6:c9:e1:b5:e2:ed:
cb:78:ae:6b:62:a1:65:2a:eb:10:80:82:7f:72:c7:
b6:d7:af:fc:df:26:e3:cc:b9:ab:ab:f7:8b:28:f4:
81:d3:64:b3:4e:52:c4:03:71:8c:75:28:ce:f7:2b:
74:db:67:f0:a1:b3:b7:5c:41:9d:e7:e3:6f:bc:7c:
7d:8f:5b:f1:f5:10:51:e6:c0:ba:4e:ae:52:93:18:
2c:e8:a0:33:3c:88:a1:58:68:6f:6b:ab:a3:e3:dd:
fa:32:f8:ae:fb:b7:c4:4e:13:ba:a7:18:c6:50:c8:
8a:8b:c0:fd:16:cd:cc:0e:d8:33:8c:2f:f5:d7:ba:
84:b0:d8:8e:18:1a:69:84:46:0d:37:6a:df:bf:de:
14:99:a8:89:87:62:f2:dc:19:a5:9c:29:20:6e:d4:
cb:43:08:97:55:43:27:05:ff:8a:12:16:cc:8a:84:
93:aa:40:1d:4c:7c:8d:09:4c:36:58:48:45:45:7f:
13:de:60:47:ca:3b:2c:d1:63:56:f0:74:bb:be:40:
8f:a9:52:d5:d0:95:88:a3:ef:3f:0b:32:ec:0e:97:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:07:C4:9A:A4:13:C7:DB:6B:5A:EB:BB:D8:B7:68:97:F7:44:C6
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/lLkHxJqkE8fba1rru9i3aJf3RMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.12.0/23
Signature Algorithm: sha256WithRSAEncryption
82:18:a5:0d:94:6c:f6:1b:79:26:70:b5:9b:74:f3:89:73:20:
05:91:94:57:74:36:ef:0b:19:af:51:85:3c:d4:25:50:41:d2:
8c:d3:f1:c1:72:be:25:78:0c:8c:36:db:2b:55:0b:5f:cf:af:
cc:d6:01:e2:33:39:7e:fe:9b:2e:5d:84:2c:02:0c:38:2c:38:
ca:67:f5:25:ce:66:29:7b:e8:8f:95:38:4d:01:eb:19:9d:01:
ba:14:d5:a2:43:6b:f6:57:73:38:c1:37:6f:7e:8a:60:cc:3f:
bc:76:f2:32:ff:50:f4:6a:f2:dd:bb:0e:32:6c:5a:2a:91:b7:
19:0c:2d:68:c3:14:1e:60:f0:3c:9f:2a:d9:45:0d:4c:e6:22:
53:6c:b7:03:ad:67:2c:4f:a7:00:c5:31:a3:dd:a7:7b:84:d3:
b6:52:46:86:32:f6:1e:66:01:53:c1:ab:7d:92:d4:65:38:b1:
b4:b4:f9:b5:34:62:f6:bd:89:15:30:8a:dd:4b:df:f0:5d:60:
ec:ed:db:73:d0:b9:b4:ef:bd:fb:64:fa:b7:61:d4:52:f2:4d:
61:3e:7b:10:07:75:f3:77:3c:92:0e:25:a6:b3:fb:81:0c:35:
ae:29:77:12:a8:cf:b7:1e:69:f7:c6:f8:61:1b:74:08:68:eb:
f1:76:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:35 2026 by rpki-client