Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/Lcm22_TPGNqwJZqkJEzfcC_rvNM.roa
File: Lcm22_TPGNqwJZqkJEzfcC_rvNM.roa (raw, json)
Hash identifier: TjLCtgcxkG/42ch4XlnmQy1IDgmAjwt3AY74YSi27ws=
Subject key identifier: 2D:C9:B6:DB:F4:CF:18:DA:B0:25:9A:A4:24:4C:DF:70:2F:EB:BC:D3
Certificate issuer: /CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Certificate serial: 01A0D7FA8504B276ADE4A09C2177C4258524
Authority key identifier: 69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/Lcm22_TPGNqwJZqkJEzfcC_rvNM.roa
Signing time: Fri 25 Sep 2026 09:51:54 +0000
ROA not before: Fri 25 Sep 2026 09:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218859
IP address blocks: 142.228.32.0/23 maxlen: 24
2a0d:4ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:fa:85:04:b2:76:ad:e4:a0:9c:21:77:c4:25:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Validity
Not Before: Sep 25 09:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc9b6dbf4cf18dab0259aa4244cdf702febbcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:96:f5:fe:a3:76:4c:ac:38:28:46:1d:9b:
5a:52:a9:4d:9e:05:07:5b:2a:fe:d5:b3:ec:16:f4:
ab:2c:69:f6:27:2d:f8:a9:42:12:a0:82:d0:7a:18:
14:08:d7:7a:51:64:4b:1c:68:c5:b4:d6:bb:43:62:
6a:67:4e:ae:a1:15:67:4b:f2:c0:e4:44:76:80:2a:
af:ed:39:7e:05:1e:76:43:c7:67:e2:7b:d0:4a:b6:
66:58:5d:f7:d8:f0:d1:4c:c4:a7:23:c6:ef:ec:55:
13:37:a1:6b:f0:07:1f:73:bd:3b:95:20:b8:24:f8:
c0:df:17:eb:75:b2:4c:4b:7f:88:27:05:da:7b:60:
9c:57:90:44:20:83:26:4a:04:d2:f3:81:30:1b:6e:
8f:47:0c:f6:d2:9b:f0:82:9b:a4:2c:e6:4c:71:4d:
74:cd:84:3b:d0:2d:7c:63:2d:fc:47:c5:41:c8:2a:
ed:dd:86:78:81:32:7d:ed:60:5b:18:6c:ab:5c:9f:
69:e7:ee:cf:7b:0d:c3:1a:67:c9:6f:bf:f7:82:b3:
b5:bf:8b:a1:d3:68:a2:6e:3b:ea:fa:bc:9b:00:ba:
27:61:62:fe:d6:6d:8c:0d:8b:a3:49:d0:d8:d1:d9:
74:54:56:de:ed:b8:44:69:36:0f:f6:ed:e0:40:ce:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:B6:DB:F4:CF:18:DA:B0:25:9A:A4:24:4C:DF:70:2F:EB:BC:D3
X509v3 Authority Key Identifier:
keyid:69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/Lcm22_TPGNqwJZqkJEzfcC_rvNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.32.0/23
IPv6:
2a0d:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
44:8f:33:0a:ce:f3:ac:bd:3c:22:d4:e3:4a:2b:7e:50:d3:79:
2b:b8:ed:8c:6b:72:6b:d2:06:42:63:11:c8:ef:e1:3a:c6:64:
1f:23:6d:11:b5:57:ec:3a:80:8f:cf:6f:49:67:1d:a7:41:c2:
ef:f3:71:84:41:05:31:0f:c1:18:a2:d8:6a:43:8f:b0:e1:cc:
8e:04:13:96:6f:8d:ff:1e:92:0e:47:ab:41:94:4f:12:10:fc:
64:fc:25:8e:70:28:02:9f:5f:89:1d:13:0b:27:82:dc:e0:f8:
0c:58:04:cf:3b:c6:1e:8d:21:09:a8:17:77:b1:32:64:d1:8e:
86:90:3e:50:46:42:a3:63:a3:98:2b:ab:76:3f:ed:9d:bc:76:
10:a0:3d:c3:03:c4:03:3c:ab:cd:59:b2:47:c9:44:3e:d3:1b:
36:ca:6b:12:7f:97:7f:6d:38:4e:68:0b:ab:0b:63:05:df:e2:
f7:80:07:2b:eb:ec:be:79:81:6a:f9:e2:88:3c:5f:d3:81:82:
d7:3f:fd:e4:27:2d:de:a2:7c:3c:52:6f:c3:f9:a3:03:18:9f:
f8:f2:55:71:b7:4d:5d:a2:5d:d3:50:28:66:f0:ed:26:7a:b5:
a2:e8:b5:ab:36:96:82:36:ed:e8:23:f2:79:b2:b8:ef:e1:88:
e8:b1:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:37 2026 by rpki-client