Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LECChYwlsg9_YcsPBd8ew8vdOAs.roa
File: LECChYwlsg9_YcsPBd8ew8vdOAs.roa (raw, json)
Hash identifier: a1915bJQUTsFFQyLtb41D+Kh+WL8sNQOqfJMNQT64iw=
Subject key identifier: 2C:40:82:85:8C:25:B2:0F:7F:61:CB:0F:05:DF:1E:C3:CB:DD:38:0B
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A0607E0BCA1B329F4E891FA4AB74D657E9
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LECChYwlsg9_YcsPBd8ew8vdOAs.roa
Signing time: Wed 02 Sep 2026 05:01:08 +0000
ROA not before: Wed 02 Sep 2026 05:01:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215858
IP address blocks: 89.37.16.0/24 maxlen: 24
89.37.17.0/24 maxlen: 24
89.37.18.0/24 maxlen: 24
89.37.19.0/24 maxlen: 24
89.37.20.0/24 maxlen: 24
89.37.21.0/24 maxlen: 24
89.37.22.0/24 maxlen: 24
89.37.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:7e:0b:ca:1b:32:9f:4e:89:1f:a4:ab:74:d6:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Sep 2 05:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c4082858c25b20f7f61cb0f05df1ec3cbdd380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:53:21:2a:19:f6:06:d0:28:f0:5e:f3:36:
04:5b:5c:1c:b3:93:25:d4:e2:00:7a:28:3b:f5:3d:
df:73:ae:f4:bd:f6:19:cb:86:ce:69:a6:8b:97:6f:
b0:6b:3a:cb:83:e0:df:90:64:85:99:e7:03:66:49:
04:4d:49:b8:bd:5b:92:75:06:aa:30:f0:1e:47:c8:
f0:e8:e6:42:fa:72:03:5e:db:87:b9:c6:21:7a:6b:
6b:23:3f:68:da:58:40:d5:a5:7c:e8:a3:fa:7e:79:
26:3f:72:24:79:0d:42:58:8b:fa:f5:65:2c:75:56:
74:f5:a3:68:0e:3f:d5:01:71:bd:25:c0:fa:c1:09:
37:bc:16:c0:ea:ae:64:fe:1a:74:05:15:bf:2e:9d:
12:cb:fa:fa:84:dd:b3:48:66:f9:15:f6:b2:7b:6b:
55:c8:91:fe:d5:cc:b6:cf:48:88:ed:d6:44:cf:20:
4f:a7:e5:aa:67:66:e7:ef:60:d7:60:09:39:ab:dd:
cb:4e:7c:20:7a:27:af:f5:db:3d:df:1e:97:a1:b6:
3b:f4:57:85:d6:f7:9f:aa:4e:ea:56:78:4a:43:a3:
05:c0:1a:af:9a:33:fa:06:d9:b5:a5:f1:63:ea:e4:
53:13:00:37:b0:1c:f8:ca:bd:e6:1a:57:64:6e:d9:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:82:85:8C:25:B2:0F:7F:61:CB:0F:05:DF:1E:C3:CB:DD:38:0B
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LECChYwlsg9_YcsPBd8ew8vdOAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:28:69:a5:35:5a:b7:a6:9b:2d:36:03:fc:87:17:86:76:26:
a7:9e:ea:98:c0:77:08:72:f9:79:ef:cb:6d:41:00:39:eb:86:
50:61:c3:bf:44:5c:40:fc:72:f4:9f:8f:71:a0:64:b7:d7:91:
b5:ed:0b:89:49:51:dd:e2:07:8f:4c:7e:04:6e:71:9f:f5:e6:
f5:56:c1:5a:78:f2:61:20:3e:d2:6c:24:08:a0:21:87:0e:87:
17:4b:d0:4d:38:3f:c3:4b:07:85:09:d4:fa:b7:ca:71:98:92:
2f:fa:a2:ea:08:af:8c:63:3f:1b:76:ea:af:1c:bf:56:2d:30:
16:6c:5b:06:16:a8:e2:d4:bb:57:29:63:52:12:f4:58:9c:5a:
80:b2:ed:07:1f:43:19:26:b7:37:67:5f:7d:59:41:b0:8e:0d:
51:73:72:18:2e:3f:e4:57:64:cc:2f:05:14:a5:fd:cb:2c:04:
e0:fd:8a:bb:22:8d:6d:ef:fa:e3:5d:03:0e:e3:e0:0b:87:72:
a6:47:63:f5:e4:ec:39:21:34:f5:2c:5b:67:87:84:ee:79:a7:
64:b7:7e:e9:66:81:ab:77:35:0b:95:cc:ba:7c:3f:84:2c:32:
a3:a1:6c:5f:e3:2d:54:eb:26:fd:16:14:ed:52:b1:64:b9:75:
d8:32:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:46:09 2026 by rpki-client