Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/lvB_hoqp6AZb4aCz1rlyRhq5dZc.roa
File: lvB_hoqp6AZb4aCz1rlyRhq5dZc.roa (raw, json)
Hash identifier: GQ3BEgoKvPO4iBD/plAOy391yJNRAF4NTtXMoxuwYYo=
Subject key identifier: 96:F0:7F:86:8A:A9:E8:06:5B:E1:A0:B3:D6:B9:72:46:1A:B9:75:97
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 01A0C9AE6ED6EE67C8FE10D81E03EA5CF9F3
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/lvB_hoqp6AZb4aCz1rlyRhq5dZc.roa
Signing time: Tue 22 Sep 2026 15:14:07 +0000
ROA not before: Tue 22 Sep 2026 15:14:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218608
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:ae:6e:d6:ee:67:c8:fe:10:d8:1e:03:ea:5c:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Sep 22 15:14:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96f07f868aa9e8065be1a0b3d6b972461ab97597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:3e:a1:cf:9e:3b:b2:c6:b1:38:0a:f5:00:
98:a5:91:cc:de:a8:3f:34:b4:36:19:a3:22:5f:2d:
e5:f7:44:68:50:d3:d6:e0:fe:67:73:28:60:29:b7:
92:fd:64:2a:3d:61:82:9f:6f:61:a3:66:05:d5:68:
e9:61:59:db:f0:a7:66:cb:da:57:4b:c9:50:37:89:
20:dd:bb:df:0c:ea:30:73:e8:4d:a6:5d:3b:82:12:
52:63:cc:58:38:24:31:43:d6:e3:c7:b5:2e:d0:20:
47:08:42:8a:fb:be:63:0f:c4:e5:22:6f:c5:05:47:
4a:8e:d9:13:ed:aa:d3:7d:2e:65:4d:17:34:1d:d9:
b6:d4:5f:3a:05:be:af:f2:ef:b7:56:da:8d:11:7d:
63:43:da:0b:84:ac:46:22:44:a4:c8:3e:e9:f3:0d:
7e:1d:6d:51:4f:e9:ea:97:2e:89:05:94:fa:aa:49:
23:11:ba:00:53:89:2f:be:ae:a2:e5:2a:76:61:41:
26:4d:31:ee:ce:d1:28:6a:63:08:dc:5a:76:78:a7:
ad:bc:76:96:95:95:75:2c:15:37:ed:71:4e:8b:74:
65:5f:c9:50:eb:55:02:19:9a:7b:bd:d4:bc:dc:4a:
d0:e6:96:e0:18:5d:32:43:1c:b5:00:80:b1:4e:a7:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:7F:86:8A:A9:E8:06:5B:E1:A0:B3:D6:B9:72:46:1A:B9:75:97
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/lvB_hoqp6AZb4aCz1rlyRhq5dZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
185.153.230.0/23
185.171.26.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fc:b6:8c:ab:83:14:33:fe:c7:79:46:39:bd:cb:c0:3c:64:
cd:73:c9:35:a9:f6:3a:46:24:fc:8a:92:98:de:8d:7a:ca:30:
90:a5:95:e4:f3:fe:28:17:d3:d4:ae:72:59:f4:36:31:0f:d3:
91:3c:60:4a:6e:f5:d6:27:b4:4a:7e:7e:66:ea:77:69:d5:c6:
c8:f6:fe:bf:8b:58:42:5c:14:15:db:a6:0c:0e:54:d2:86:d6:
09:9c:e3:d8:bf:53:00:6d:3a:93:ff:40:0b:68:00:96:c0:1c:
92:11:0e:28:d2:c7:b3:3d:b9:c0:75:5b:76:9b:05:42:63:a6:
49:f3:5d:71:ec:de:9b:0f:9b:5e:6f:e4:9b:95:85:a5:b3:94:
d6:b6:a3:bc:5d:b5:af:f1:07:19:ad:ad:fc:50:f3:e7:eb:76:
6a:ba:ea:ff:d0:1f:58:55:30:c7:a4:ff:91:35:04:c6:96:f5:
1a:22:98:e6:af:4b:02:b5:e6:fb:69:c7:7d:f8:ac:98:f6:1d:
4b:6b:d3:74:fa:4e:0a:64:d9:4a:b8:32:72:00:18:82:0c:d7:
76:3d:35:eb:44:38:1e:39:3c:00:cd:38:af:f5:aa:9d:b9:31:
ec:0f:12:03:ea:ff:14:03:19:ef:33:32:14:5a:9c:cd:07:2b:
bf:da:78:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:14 2026 by rpki-client