Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/LmasvFTLE11mrCxdzPNrrKlYdc0.roa
File: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (raw, json)
Hash identifier: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=
Subject key identifier: 2E:66:AC:BC:54:CB:13:5D:66:AC:2C:5D:CC:F3:6B:AC:A9:58:75:CD
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019DD5D39F856BA08A6159DA75B93AA80B61
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/LmasvFTLE11mrCxdzPNrrKlYdc0.roa
Signing time: Tue 28 Apr 2026 20:41:49 +0000
ROA not before: Tue 28 Apr 2026 20:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 138.124.60.0/24 maxlen: 24
138.124.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:d3:9f:85:6b:a0:8a:61:59:da:75:b9:3a:a8:0b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 28 20:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e66acbc54cb135d66ac2c5dccf36baca95875cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:6d:39:2e:98:f6:40:7e:b0:8b:39:65:9e:
e1:61:2b:0f:a7:e7:34:55:37:51:52:7a:55:72:4e:
89:27:a9:68:c2:e5:5f:c3:af:73:f9:87:59:8b:c0:
1c:1a:b4:64:97:c3:cd:1d:e3:85:41:a6:24:be:69:
bf:0b:14:3a:09:75:b5:32:fd:55:a4:64:c0:6b:3e:
84:3b:49:00:8e:32:fb:fb:d0:f1:53:9d:93:17:df:
93:91:51:53:1b:e5:a6:f6:db:58:55:fc:ca:74:0e:
42:99:7d:45:d7:59:69:5e:c9:c4:13:64:bc:ba:87:
9d:ba:af:45:27:fd:cc:2d:e8:aa:11:eb:19:81:91:
3d:b8:a7:7f:66:86:a1:07:b9:ba:0f:19:a2:8f:ce:
d6:23:58:4d:f5:74:2a:41:9e:ac:59:32:c2:b0:49:
da:04:52:d9:c3:96:a0:de:38:3a:0b:6c:b6:33:b6:
b5:95:db:61:34:ad:39:82:2c:8f:a7:04:e4:49:ad:
ed:63:ee:15:e7:b4:e6:35:cf:2b:f2:c9:2d:4c:98:
ab:e9:81:ef:81:c1:5e:cb:1a:eb:c2:ba:c0:ea:55:
7b:c3:1b:82:84:b7:64:e2:b4:5f:ee:25:25:f1:01:
2a:0a:2a:8d:f5:c2:74:5a:48:73:b8:d7:68:72:b7:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:AC:BC:54:CB:13:5D:66:AC:2C:5D:CC:F3:6B:AC:A9:58:75:CD
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/LmasvFTLE11mrCxdzPNrrKlYdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.60.0/24
138.124.123.0/24
Signature Algorithm: sha256WithRSAEncryption
33:31:45:c0:e7:9f:a9:e1:02:45:10:7e:b6:3e:61:40:63:b9:
8b:1f:e9:63:70:e7:c1:10:6e:81:4e:c8:3c:b1:cb:3a:bc:1f:
11:48:27:3d:05:38:b9:8c:86:74:74:4f:20:58:f9:da:cc:08:
7b:b4:bd:a6:16:7b:e8:d0:ed:02:c6:d9:2c:2a:9b:ff:7c:8f:
c5:08:0e:2c:e5:b5:50:91:34:c7:72:f3:89:a7:3f:cd:13:02:
4f:a0:04:cf:fb:25:3c:64:8e:d1:48:09:3c:a5:a1:a6:22:52:
96:fc:6d:78:3c:89:d4:98:b5:90:0d:7a:cf:e5:a0:04:68:4b:
ed:3a:42:37:8f:ed:24:08:b4:a7:87:f3:3a:9c:6b:7f:e1:b3:
6d:1a:35:26:da:03:50:90:a3:e8:24:88:38:6c:4c:1b:24:4b:
82:9f:a6:11:89:2f:9b:ad:30:49:ee:6f:9c:66:66:cb:8b:c3:
09:03:c2:91:91:14:0d:69:72:d6:69:4e:fa:a7:2a:b4:14:d9:
dc:66:ce:7c:20:ec:91:58:ba:41:e6:d3:30:47:82:99:db:ca:
d5:9d:0b:50:61:86:a8:bd:7f:a8:6c:e3:13:92:b0:bb:9b:b8:
6a:60:0d:eb:a5:2f:4c:dd:17:eb:10:77:8b:59:c5:f7:62:22:
f3:2d:17:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3V05+Fa6CKYVnadbk6qAthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjYwNDI4MjA0MTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTY2YWNiYzU0Y2IxMzVkNjZhYzJjNWRjY2YzNmJhY2E5NTg3NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvxtOS6Y9kB+sIs5ZZ7hYSsPp+c0
VTdRUnpVck6JJ6lowuVfw69z+YdZi8AcGrRkl8PNHeOFQaYkvmm/CxQ6CXW1Mv1V
pGTAaz6EO0kAjjL7+9DxU52TF9+TkVFTG+Wm9ttYVfzKdA5CmX1F11lpXsnEE2S8
uoeduq9FJ/3MLeiqEesZgZE9uKd/ZoahB7m6Dxmij87WI1hN9XQqQZ6sWTLCsEna
BFLZw5ag3jg6C2y2M7a1ldthNK05giyPpwTkSa3tY+4V57TmNc8r8sktTJir6YHv
gcFeyxrrwrrA6lV7wxuChLdk4rRf7iUl8QEqCiqN9cJ0WkhzuNdocrcSNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC5mrLxUyxNdZqwsXczza6ypWHXNMB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvTG1hc3ZGVExFMTFtckN4ZHpQTnJyS2xZZGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinw8AwQA
inx7MA0GCSqGSIb3DQEBCwUAA4IBAQAzMUXA55+p4QJFEH62PmFAY7mLH+ljcOfB
EG6BTsg8scs6vB8RSCc9BTi5jIZ0dE8gWPnazAh7tL2mFnvo0O0CxtksKpv/fI/F
CA4s5bVQkTTHcvOJpz/NEwJPoATP+yU8ZI7RSAk8paGmIlKW/G14PInUmLWQDXrP
5aAEaEvtOkI3j+0kCLSnh/M6nGt/4bNtGjUm2gNQkKPoJIg4bEwbJEuCn6YRiS+b
rTBJ7m+cZmbLi8MJA8KRkRQNaXLWaU76pyq0FNncZs58IOyRWLpB5tMwR4KZ28rV
nQtQYYaovX+obOMTkrC7m7hqYA3rpS9M3RfrEHeLWcX3YiLzLRd1
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:46 2026 by rpki-client