Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LhT4Mr7pBvmSebh_xpC6XvBDifs.roa
File: LhT4Mr7pBvmSebh_xpC6XvBDifs.roa (raw, json)
Hash identifier: /pqawyzvpLTnZE+ptaDtmcd+h9N5yx6aJ4Q7iNJd134=
Subject key identifier: 2E:14:F8:32:BE:E9:06:F9:92:79:B8:7F:C6:90:BA:5E:F0:43:89:FB
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F21DAEF4DA76AA7EB4B180D84C441835A
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LhT4Mr7pBvmSebh_xpC6XvBDifs.roa
Signing time: Thu 02 Jul 2026 08:03:43 +0000
ROA not before: Thu 02 Jul 2026 08:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57922
IP address blocks: 185.157.218.0/24 maxlen: 24
185.157.219.0/24 maxlen: 24
185.186.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:da:ef:4d:a7:6a:a7:eb:4b:18:0d:84:c4:41:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 2 08:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e14f832bee906f99279b87fc690ba5ef04389fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:f1:a2:11:41:98:94:a4:06:3a:4b:cf:b1:
3c:11:1a:bf:58:0a:0e:2e:8a:be:85:2f:1b:3a:0e:
ce:1d:2a:f2:9d:23:24:63:46:03:56:77:e1:af:5f:
1b:00:29:7d:f9:b8:b4:fe:ba:70:8e:f2:69:8d:4c:
48:55:57:14:15:cc:42:79:5f:2c:5c:3d:e7:c6:c0:
f8:89:23:19:ee:79:47:db:89:ff:3a:2a:2d:89:bc:
0f:9b:3a:11:d2:e0:bd:6a:83:97:af:47:aa:08:1c:
a8:b1:77:b1:21:5d:a3:fe:13:5a:4f:48:9f:44:a9:
44:a4:23:23:ac:8f:b2:5c:18:67:e0:ad:74:0c:cf:
62:17:b9:be:d0:81:38:f3:a4:89:83:41:e8:72:f6:
9d:67:4e:22:aa:53:03:eb:1b:dd:d9:3d:0b:d2:b5:
5d:f9:7c:ab:ea:aa:0c:48:07:eb:b9:bd:f3:b9:34:
0e:eb:d6:9b:fd:df:41:d8:f9:eb:6e:0e:90:b4:3a:
a6:4a:f7:66:6d:30:74:c5:81:f0:1f:c9:85:16:46:
c4:e1:15:a7:98:2d:22:f4:ab:c4:03:9a:06:84:40:
2c:de:54:5f:8a:b9:8f:dc:8f:24:0b:ca:68:5e:21:
0d:c3:58:98:6c:47:53:6b:5c:3f:76:f4:a2:78:51:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:F8:32:BE:E9:06:F9:92:79:B8:7F:C6:90:BA:5E:F0:43:89:FB
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LhT4Mr7pBvmSebh_xpC6XvBDifs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.218.0/23
185.186.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:36:b3:dc:03:67:aa:6a:03:53:aa:66:64:d3:ab:a6:3b:b6:
d3:d1:e8:c6:83:ad:51:e1:90:20:2c:90:98:df:bc:7c:4b:c7:
e6:f2:88:d4:4a:f2:3b:fc:7c:63:cc:6c:38:5a:3b:6a:db:16:
73:ec:a1:06:de:9d:57:4f:3a:77:ef:b5:c7:91:53:23:23:d4:
74:6d:8b:5b:46:68:08:42:c3:4c:f2:0e:2c:99:21:76:92:9a:
cd:cc:7b:7a:cd:25:63:44:40:e6:24:06:ab:68:f7:e6:41:dc:
07:fa:ca:f6:51:4e:ad:c0:31:b1:8c:12:8c:43:34:95:63:a7:
e0:41:e2:48:7e:4d:87:59:37:30:b8:5d:6e:3a:c6:3c:b9:5d:
86:51:b5:6a:23:7f:26:50:44:c3:81:c2:0a:97:b0:08:10:93:
36:e4:01:ea:36:16:55:5b:cf:d7:3f:51:d4:69:4e:32:24:43:
a5:74:00:5b:0a:2e:78:c4:db:1c:34:df:23:22:03:ba:13:3a:
57:c6:f3:40:14:d4:8c:9e:85:ee:39:19:db:80:1c:37:83:34:
c0:46:bc:3c:b7:2d:3e:9c:3c:12:da:c8:8b:38:ca:5d:3b:ef:
bb:39:41:d0:77:99:f8:a5:8e:f9:f8:bb:34:e4:24:2b:a2:7f:
ea:3d:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:40 2026 by rpki-client