Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/lhrCsEQ2ZgIhrNZsVX7JPkDhKKU.roa
File: lhrCsEQ2ZgIhrNZsVX7JPkDhKKU.roa (raw, json)
Hash identifier: dz2HKL/bFFQfgxDgdFfHjM3VbESnL+QGDev0Ln/yd3A=
Subject key identifier: 96:1A:C2:B0:44:36:66:02:21:AC:D6:6C:55:7E:C9:3E:40:E1:28:A5
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019F8E53584FDAEC6FEAF78E733FB0E1D2BE
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/lhrCsEQ2ZgIhrNZsVX7JPkDhKKU.roa
Signing time: Thu 23 Jul 2026 09:34:14 +0000
ROA not before: Thu 23 Jul 2026 09:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a14:5f00::/29 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:53:58:4f:da:ec:6f:ea:f7:8e:73:3f:b0:e1:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 23 09:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=961ac2b04436660221acd66c557ec93e40e128a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:e8:1e:d3:fa:ae:22:26:66:30:38:55:0e:
f2:e9:44:c8:ab:18:76:33:1b:73:ed:65:74:01:2d:
11:b3:fa:0d:e9:0f:d4:30:54:e2:93:65:77:fb:51:
62:35:10:0a:53:51:7e:ca:a8:87:ce:41:70:6a:f3:
c8:19:d9:3b:96:f4:e7:63:4d:23:7d:a3:82:c5:bc:
8c:7a:d7:30:79:19:22:40:94:3a:ca:b6:61:e0:2d:
c5:47:7f:97:a5:58:ab:9b:da:ba:5c:7a:9f:26:ee:
cc:61:7d:82:00:2a:f1:30:d1:cd:ad:08:bc:d3:e7:
ef:9c:71:55:7d:3f:c8:6f:dd:84:39:03:68:1a:1d:
97:6e:a4:67:d8:70:0e:48:64:ac:92:54:1c:fd:14:
e9:a9:df:a1:3e:1d:83:25:bb:b9:ff:7b:3f:28:c6:
ef:ee:2f:b9:d5:b0:34:73:52:23:18:7f:42:26:fc:
f1:e7:8c:08:be:75:e6:08:55:af:98:22:b2:ae:77:
f2:f9:d5:98:2f:59:1b:00:61:1d:73:b6:dc:e3:d1:
de:d3:68:a1:06:20:fc:fc:b2:95:8f:28:64:77:50:
25:1b:1c:d3:f2:1f:17:54:f8:19:25:3c:99:0b:ca:
0b:aa:70:df:11:4e:9e:7c:b2:15:23:05:88:86:72:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:C2:B0:44:36:66:02:21:AC:D6:6C:55:7E:C9:3E:40:E1:28:A5
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/lhrCsEQ2ZgIhrNZsVX7JPkDhKKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
92:fd:9f:46:23:2b:d4:12:cb:c4:40:01:eb:7f:1e:06:b8:d8:
28:1c:be:8e:03:6a:22:05:cc:3a:4b:7a:a0:b1:01:6b:bf:42:
a4:92:24:16:db:ed:e4:36:fa:68:a4:ff:31:6e:00:21:9a:6e:
4f:1b:85:0f:77:52:4b:ac:34:f7:d8:38:5f:3d:65:3a:29:3e:
3b:34:60:b0:80:23:f7:92:10:bf:25:05:6f:f7:9b:19:77:6e:
59:7e:cd:24:3d:ec:a4:80:d9:54:18:cc:13:59:36:9d:1f:f3:
d4:68:52:16:3e:d2:1e:0c:ed:3e:ff:61:86:1c:86:73:5d:18:
48:ad:9e:c8:0d:cf:1e:52:ae:0c:1d:7c:c0:74:da:84:99:0a:
e7:35:24:b7:75:68:bd:59:43:98:e7:58:67:9f:7a:f6:a3:14:
d7:74:3f:cc:08:1b:90:47:a4:0d:76:a9:c7:5b:d1:24:c7:13:
64:16:b9:5a:4c:df:b3:1f:d3:25:7d:33:99:bb:01:19:5a:6b:
e6:59:c6:19:81:2e:ec:19:32:dd:35:d1:14:50:f0:f6:fa:56:
fe:6f:8c:03:16:5b:2e:74:eb:87:c9:b8:74:8c:f7:d1:75:f6:
e5:37:9b:8a:7e:01:90:8c:c3:a1:4f:cd:bd:39:95:a8:59:db:
5a:6a:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:03 2026 by rpki-client