Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LTh9-MZ5she5Y4TdatH9zy4F4nU.roa
File: LTh9-MZ5she5Y4TdatH9zy4F4nU.roa (raw, json)
Hash identifier: B2KBu4CQ2ifEVbQDwhUxuhsJw3WmFj2SaKSL5DaA6cc=
Subject key identifier: 2D:38:7D:F8:C6:79:B2:17:B9:63:84:DD:6A:D1:FD:CF:2E:05:E2:75
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DDF01CAAEE9FFD8F194AA81379BF7BC27
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LTh9-MZ5she5Y4TdatH9zy4F4nU.roa
Signing time: Thu 30 Apr 2026 15:28:49 +0000
ROA not before: Thu 30 Apr 2026 15:28:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200010
IP address blocks: 191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:01:ca:ae:e9:ff:d8:f1:94:aa:81:37:9b:f7:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 30 15:28:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d387df8c679b217b96384dd6ad1fdcf2e05e275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:fe:b8:34:7a:37:47:bb:ca:5c:fb:1c:10:
ca:a2:8b:1e:b5:19:d9:2b:86:de:06:96:66:0e:10:
cc:2e:2b:9f:f9:17:46:62:24:1c:ea:f1:fb:9f:52:
91:be:43:92:54:21:dc:c2:d2:b2:89:6f:10:ed:7a:
b5:1b:d1:05:03:d9:ca:bb:a5:d2:a8:67:c0:b8:52:
5b:e4:bb:29:7c:60:9f:ff:0b:6c:c4:50:02:a8:40:
12:07:6b:b7:b8:3d:da:f9:d4:e4:9d:3a:50:47:d8:
15:d1:d5:e7:28:b0:62:c6:30:66:04:bc:47:30:b3:
7f:75:68:95:e4:64:0a:a7:62:ed:7c:18:77:d2:0a:
cb:bd:2e:04:d4:ae:1b:72:80:23:d3:f5:fd:eb:89:
bd:e9:d3:f3:09:e2:c7:20:75:a9:36:c7:e2:b5:b3:
a0:a0:7b:5b:6b:0f:74:4d:6b:36:b9:dd:23:64:80:
cc:bb:50:5a:8f:98:05:78:9f:12:31:f9:e8:6a:4d:
39:1c:0a:ad:5f:1c:52:7b:a5:f0:03:74:01:ee:9c:
9e:8e:09:9d:31:2d:52:c7:bf:3a:ec:d7:db:f2:75:
bc:2f:c3:b9:78:88:dc:00:ff:58:71:87:17:85:b5:
cf:1e:92:c7:cf:4c:0c:48:68:a4:cc:8c:65:28:98:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:7D:F8:C6:79:B2:17:B9:63:84:DD:6A:D1:FD:CF:2E:05:E2:75
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/LTh9-MZ5she5Y4TdatH9zy4F4nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5c:e2:d0:66:5a:ac:e4:12:41:b4:8c:49:ef:89:52:fc:f2:
a9:f4:2e:43:d6:de:30:b7:88:f3:df:35:dc:c6:7e:76:d1:44:
7d:aa:72:47:38:01:c6:6d:90:c6:6a:86:97:9d:eb:32:ff:06:
c9:ae:7f:78:de:46:81:d4:f0:7a:e1:94:27:58:da:8a:6d:de:
1d:38:6d:67:92:ab:6e:ec:78:42:fb:0a:61:75:a8:7f:ae:5f:
7d:a8:3a:e7:08:29:ee:8a:a0:32:d6:96:92:76:f2:5f:54:36:
a0:cf:79:98:bc:aa:e7:7b:db:d5:70:92:4e:a8:ea:fe:cb:34:
21:6b:0a:28:57:2e:10:85:35:c5:1a:c5:3a:e0:db:a1:a9:bd:
cb:36:14:a4:15:f6:28:2f:8e:ea:12:c9:f4:f9:2b:e1:73:58:
cc:c8:07:e9:e0:f1:20:6d:35:ab:97:bd:57:7b:a8:40:25:cf:
37:39:32:66:37:05:5e:a3:e9:97:6a:32:94:c0:a9:74:69:08:
bb:c5:3c:52:a8:69:42:a2:73:cc:63:5b:c7:59:f5:9b:e6:2a:
b3:f2:8f:06:5b:44:d0:66:29:c5:1f:f8:d8:f6:05:2b:03:04:
d9:fd:fb:70:8f:2d:3b:62:4f:10:8d:09:1e:20:9a:da:78:01:
aa:c7:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:58 2026 by rpki-client