Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/LJsQ6phR8LiQVY1FFhD_unQmTVI.roa
File: LJsQ6phR8LiQVY1FFhD_unQmTVI.roa (raw, json)
Hash identifier: EDMo6GSMblcwsUUKgaU7mr/ntpmSgCtV67E6zw3bxPk=
Subject key identifier: 2C:9B:10:EA:98:51:F0:B8:90:55:8D:45:16:10:FF:BA:74:26:4D:52
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019CE1C3CAEFE1AA8E27EF0C33C323192ECB
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/LJsQ6phR8LiQVY1FFhD_unQmTVI.roa
Signing time: Thu 12 Mar 2026 11:17:10 +0000
ROA not before: Thu 12 Mar 2026 11:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208363
IP address blocks: 45.128.112.0/24 maxlen: 24
45.128.113.0/24 maxlen: 24
45.128.114.0/23 maxlen: 23
45.144.92.0/23 maxlen: 23
89.37.232.0/23 maxlen: 23
92.53.162.0/23 maxlen: 23
185.171.164.0/23 maxlen: 23
185.232.134.0/24 maxlen: 24
188.93.38.0/23 maxlen: 23
213.184.72.0/23 maxlen: 23
213.184.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:c3:ca:ef:e1:aa:8e:27:ef:0c:33:c3:23:19:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Mar 12 11:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c9b10ea9851f0b890558d451610ffba74264d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:41:cf:3f:4c:27:f1:a7:4f:e4:87:be:07:
1d:34:dd:20:11:76:42:79:7c:dd:22:bb:90:0b:7e:
79:db:a0:d0:20:58:05:f3:59:86:e4:7a:c7:5d:e0:
85:cf:63:1e:2f:a1:8f:68:ac:20:6d:3a:b6:fb:b3:
e8:7c:53:69:ea:7c:73:76:77:d3:3e:33:c6:16:f4:
a2:a8:22:c2:f2:bc:bc:f2:7b:9d:25:1e:f5:58:5d:
d1:82:a4:6e:15:db:74:b8:2e:a5:2a:02:bd:5f:af:
91:71:20:20:b3:ef:90:95:c4:c1:c2:4d:78:13:10:
eb:86:52:e4:7f:01:e8:31:cc:ae:9b:c4:d1:1e:da:
84:ea:29:d6:95:59:4f:2c:3a:d9:4e:17:c5:63:06:
ae:d8:ae:1a:20:05:8c:0b:80:a6:d6:3f:0c:78:b6:
ba:1d:ec:91:9a:a7:82:e6:70:fb:47:ac:24:b3:ed:
47:88:fd:98:99:db:0e:ad:f5:67:58:f6:1c:da:21:
42:c6:89:78:17:55:ff:1c:3b:1d:ec:e1:9d:d8:9f:
d0:48:f3:3b:4b:fd:35:09:8d:ba:e6:9e:66:ba:65:
40:b8:40:25:8e:41:07:f5:cc:ec:79:41:a7:6b:ee:
7f:25:01:cb:cf:48:6c:99:01:b2:8a:5c:fe:ae:16:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:10:EA:98:51:F0:B8:90:55:8D:45:16:10:FF:BA:74:26:4D:52
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/LJsQ6phR8LiQVY1FFhD_unQmTVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.112.0/22
45.144.92.0/23
89.37.232.0/23
92.53.162.0/23
185.171.164.0/23
185.232.134.0/24
188.93.38.0/23
213.184.72.0/22
Signature Algorithm: sha256WithRSAEncryption
03:eb:a6:22:9a:7d:12:5e:4b:0b:7c:35:38:7c:ec:cb:8e:21:
ad:37:c1:8b:42:0e:63:b6:34:b3:08:c1:b6:ea:f5:e0:c3:b0:
48:b1:cf:1e:8f:e1:b3:04:7e:c8:82:cc:ee:b8:30:27:bb:89:
d7:76:6d:19:64:fb:1c:ac:f7:28:de:cb:51:67:6f:27:61:7d:
23:de:0f:ba:29:06:0f:9f:da:c6:d2:e6:25:f4:8b:4b:9f:9e:
a0:70:47:11:94:9f:86:ac:4e:08:c6:e8:e6:2c:52:c9:03:1b:
e2:36:f9:9f:f1:85:6f:8e:b0:ab:bb:78:3d:7d:f5:e5:a6:2d:
de:ce:b4:f5:c5:de:9a:d9:93:18:50:a5:ec:a2:22:ec:8a:19:
fc:3b:71:c8:cb:dd:ec:82:de:d6:0a:6f:6f:ab:ef:11:37:a9:
de:89:be:5f:e4:75:c3:76:f7:09:73:71:e4:6b:70:9a:f0:6b:
61:d7:9b:e8:59:5f:14:47:92:12:36:45:67:d3:1a:70:7a:d2:
99:30:4c:51:32:22:a2:3c:97:3e:9a:69:06:32:a4:d5:2f:27:
28:b8:ea:30:78:3e:fa:15:85:07:f9:82:7f:00:30:a3:8e:1d:
7a:b8:9c:e8:35:43:9a:e7:92:d5:2b:e7:8b:5d:de:4d:82:77:
e9:79:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:18 2026 by rpki-client