Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/LZKXm-bLhsbXiuFmWld_mUy97PM.roa
File: LZKXm-bLhsbXiuFmWld_mUy97PM.roa (raw, json)
Hash identifier: rvRDsRBYcjc9lrQ+x4qRkImf0hKdqG8bKXCQWaD0Yuw=
Subject key identifier: 2D:92:97:9B:E6:CB:86:C6:D7:8A:E1:66:5A:57:7F:99:4C:BD:EC:F3
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01A0D8ED2215A3C5968C8F9C62D7564F4861
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/LZKXm-bLhsbXiuFmWld_mUy97PM.roa
Signing time: Fri 25 Sep 2026 14:16:54 +0000
ROA not before: Fri 25 Sep 2026 14:16:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60084
IP address blocks: 91.107.119.0/24 maxlen: 24
91.200.149.0/24 maxlen: 24
92.255.9.0/24 maxlen: 24
92.255.11.0/24 maxlen: 24
2a00:ab00:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:ed:22:15:a3:c5:96:8c:8f:9c:62:d7:56:4f:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Sep 25 14:16:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d92979be6cb86c6d78ae1665a577f994cbdecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:82:6c:1c:ce:17:35:a4:cf:a4:34:14:43:
22:92:fc:72:5d:27:fa:cd:f0:26:16:a2:f6:99:a1:
14:e5:ea:89:cc:a6:3d:a7:ad:25:8d:44:19:b1:db:
a2:68:02:f9:f0:1d:22:27:6f:3b:6b:33:ed:ec:10:
53:75:c7:ba:d1:4b:e1:bf:2d:8e:7a:81:6e:7a:a0:
58:ed:99:98:0f:67:d1:67:fe:3b:e7:27:9b:ce:fe:
3c:95:b0:f3:42:ee:7e:94:66:4d:ce:9c:45:e6:f2:
e3:9a:40:41:ee:86:11:fb:24:cf:21:65:c6:99:77:
5a:1c:ca:69:75:f5:f6:2b:02:1f:b3:91:1b:6d:bc:
9a:a9:1f:62:21:0d:0b:91:34:a5:67:8c:5a:b3:4a:
29:50:99:35:cd:78:38:ed:ae:98:50:8f:5c:fc:50:
f0:13:77:da:19:d3:46:d8:24:42:30:d6:0a:57:28:
43:aa:ae:a9:7f:03:42:55:68:3b:34:dc:bd:44:67:
e9:13:6a:91:f3:ad:11:ba:0a:c1:cc:7d:68:2f:b9:
44:f4:86:39:67:e1:6c:5c:95:82:1e:da:71:e3:08:
7b:28:fe:51:8d:00:a2:03:75:e1:e8:3a:c1:e6:17:
17:5c:0b:4c:ee:41:ac:a8:93:a1:85:ce:ca:e4:73:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:97:9B:E6:CB:86:C6:D7:8A:E1:66:5A:57:7F:99:4C:BD:EC:F3
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/LZKXm-bLhsbXiuFmWld_mUy97PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.119.0/24
91.200.149.0/24
92.255.9.0/24
92.255.11.0/24
IPv6:
2a00:ab00:7000::/36
Signature Algorithm: sha256WithRSAEncryption
1c:e4:04:97:22:61:44:4f:53:4e:9b:0d:cd:5c:e6:d7:63:b4:
20:37:ee:d8:d9:02:00:72:b9:8f:16:b8:0f:ef:db:eb:f6:0f:
ce:fc:bf:64:e6:e3:68:e7:29:81:87:15:35:ab:28:90:f3:c5:
5f:15:29:20:fe:e5:46:7f:cf:b0:b3:0e:ed:84:d3:96:b1:2a:
a4:90:31:fe:f9:0f:b4:9f:df:14:10:33:41:81:b8:5d:f4:73:
15:7d:b9:a1:24:2b:06:a0:57:fa:d4:9a:ee:ff:78:5a:55:56:
c4:c4:76:da:8f:60:7f:c4:7a:e1:a0:87:09:61:ef:dd:34:2c:
c5:d9:d6:b8:4c:87:cf:9f:fe:80:8a:b0:05:4a:f6:f9:7a:ba:
38:c5:14:5a:78:9d:bd:9a:68:f1:56:4b:66:06:ef:3e:01:b7:
e8:ac:23:32:57:66:60:9f:ec:c4:39:fb:ca:3b:56:82:5d:4d:
73:db:ec:55:0a:e3:97:05:14:45:b9:9d:6d:ff:44:54:57:cd:
fb:6f:3c:80:c7:a0:d7:3f:8e:65:46:d6:ef:1d:17:a8:a4:c6:
a7:a6:98:49:fe:1c:aa:4c:7a:ad:12:36:2f:bb:59:70:73:4a:
75:c2:52:57:ae:3e:20:74:a2:32:57:d7:7b:1c:9b:13:35:16:
a1:94:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:47:27 2026 by rpki-client