Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/LgBkQm7x65odd5JUqQrzXZBbc7k.roa
File: LgBkQm7x65odd5JUqQrzXZBbc7k.roa (raw, json)
Hash identifier: A2GqKDmQkAQi37nNTs39AiKN/Rkw4jxRNbekXfrJVdI=
Subject key identifier: 2E:00:64:42:6E:F1:EB:9A:1D:77:92:54:A9:0A:F3:5D:90:5B:73:B9
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019D035A4E3D3F0893DF6DAE77ED52C8E183
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/LgBkQm7x65odd5JUqQrzXZBbc7k.roa
Signing time: Wed 18 Mar 2026 23:49:03 +0000
ROA not before: Wed 18 Mar 2026 23:49:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8254
IP address blocks: 5.34.178.0/23 maxlen: 23
46.28.71.0/24 maxlen: 24
82.117.252.0/23 maxlen: 23
82.117.254.0/24 maxlen: 24
85.90.197.0/24 maxlen: 24
85.90.198.0/24 maxlen: 24
193.238.154.0/24 maxlen: 24
217.12.194.0/24 maxlen: 24
217.12.204.0/24 maxlen: 24
2a05:9405::/32 maxlen: 32
2a12:6fc3::/32 maxlen: 32
2a12:6fc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:5a:4e:3d:3f:08:93:df:6d:ae:77:ed:52:c8:e1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Mar 18 23:49:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0064426ef1eb9a1d779254a90af35d905b73b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:61:5a:ba:2c:c7:28:71:30:67:4e:2d:56:
ac:39:fa:14:17:b2:d3:ae:1c:2c:25:a6:de:94:9e:
76:4d:57:95:5a:83:69:9a:aa:17:be:c9:6c:d6:c5:
ee:50:f5:41:26:05:21:71:1f:9c:a0:db:72:ab:f4:
e0:af:14:96:ce:e9:cd:f2:af:e5:13:d7:ee:65:43:
cd:0c:42:39:1f:87:dd:99:12:ae:51:6c:0b:65:71:
70:c6:c5:ea:a5:14:78:80:e8:e0:d2:20:da:10:fe:
2d:ae:7c:3f:8d:27:40:20:0a:d9:bb:16:d7:b3:83:
31:4b:e1:9c:6e:56:15:f9:64:5e:0f:19:d2:7f:9f:
25:ec:0e:fd:f2:6b:2e:48:0a:50:97:ce:7e:31:7c:
a4:54:59:78:89:50:aa:2d:1b:94:1a:5d:8b:81:61:
67:4e:33:93:51:ec:d7:3e:8c:01:91:e9:8c:ed:2a:
a2:ec:ea:18:23:93:e9:8f:c1:5b:86:98:73:61:cf:
2b:5c:38:c6:73:1d:65:3c:82:3c:f2:4d:1d:91:43:
39:fe:9c:e8:bb:ce:21:4f:f0:ac:18:e6:42:6b:83:
b6:fb:38:a0:f8:d0:47:0b:d4:18:6a:22:4d:8b:50:
fb:18:23:0f:fc:0c:ac:4a:14:e3:3c:b0:12:cd:b2:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:64:42:6E:F1:EB:9A:1D:77:92:54:A9:0A:F3:5D:90:5B:73:B9
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/LgBkQm7x65odd5JUqQrzXZBbc7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.178.0/23
46.28.71.0/24
82.117.252.0-82.117.254.255
85.90.197.0-85.90.198.255
193.238.154.0/24
217.12.194.0/24
217.12.204.0/24
IPv6:
2a05:9405::/32
2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:ce:60:f0:c1:9e:c5:b7:39:5d:99:a5:5f:18:f5:f5:7e:75:
ea:91:43:f4:97:dc:cf:8d:de:33:d8:fb:08:8f:91:01:dc:fa:
ef:49:91:0d:26:41:9b:4a:e9:31:1c:36:c6:56:d9:b0:42:8b:
3d:a3:c4:15:0f:e0:f3:c5:b2:a4:77:05:40:71:4c:0b:05:ad:
eb:f1:e0:63:38:47:b3:8f:2e:c8:5e:44:84:8d:55:f9:d4:d4:
4f:e7:f2:42:58:49:65:b9:4f:cc:24:4d:d1:f0:c3:a2:13:fd:
72:0e:01:d7:f5:6a:7c:ac:2c:3e:43:e6:9b:99:93:13:5c:d6:
55:07:89:63:00:b8:25:03:4b:0e:87:13:04:3f:79:5d:fd:05:
23:ab:a8:ec:4d:af:28:a4:da:64:1c:3a:6e:db:d5:59:21:d3:
91:58:31:6a:7d:8a:27:03:bd:a9:90:03:42:dd:dd:f1:fd:75:
fc:9e:a7:5c:41:c6:1a:fb:68:a3:6f:b4:eb:12:45:85:17:e7:
6f:f3:d6:3b:9e:57:0c:13:3e:f0:bf:33:8b:eb:e1:e0:46:7a:
aa:80:e0:3e:7d:4b:14:08:da:10:6e:48:cb:17:87:c3:4a:78:
39:88:cd:d8:34:d3:ae:98:7d:89:7b:b6:2e:1c:79:e2:67:b2:
b6:fd:2f:0c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZ0DWk49PwiT322ud+1SyOGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjYwMzE4MjM0OTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTAwNjQ0MjZlZjFlYjlhMWQ3NzkyNTRhOTBhZjM1ZDkwNWI3M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vZhWrosxyhxMGdOLVasOfoUF7LT
rhwsJabelJ52TVeVWoNpmqoXvsls1sXuUPVBJgUhcR+coNtyq/TgrxSWzunN8q/l
E9fuZUPNDEI5H4fdmRKuUWwLZXFwxsXqpRR4gOjg0iDaEP4trnw/jSdAIArZuxbX
s4MxS+GcblYV+WReDxnSf58l7A798msuSApQl85+MXykVFl4iVCqLRuUGl2LgWFn
TjOTUezXPowBkemM7Sqi7OoYI5Ppj8FbhphzYc8rXDjGcx1lPII88k0dkUM5/pzo
u84hT/CsGOZCa4O2+zig+NBHC9QYaiJNi1D7GCMP/AysShTjPLASzbIbMQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFC4AZEJu8euaHXeSVKkK812QW3O5MB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvTGdCa1FtN3g2NW9kZDVKVXFRcnpYWkJiYzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBABAIAATA6AwQBBSKyAwQA
LhxHMAwDBAJSdfwDBABSdf4wDAMEAFVaxQMEAFVaxgMEAMHumgMEANkMwgMEANkM
zDAdBAIAAjAXAwUAKgWUBTAOAwUAKhJvwwMFACoSb8QwDQYJKoZIhvcNAQELBQAD
ggEBAHrOYPDBnsW3OV2ZpV8Y9fV+deqRQ/SX3M+N3jPY+wiPkQHc+u9JkQ0mQZtK
6TEcNsZW2bBCiz2jxBUP4PPFsqR3BUBxTAsFrevx4GM4R7OPLsheRISNVfnU1E/n
8kJYSWW5T8wkTdHww6IT/XIOAdf1anysLD5D5puZkxNc1lUHiWMAuCUDSw6HEwQ/
eV39BSOrqOxNryik2mQcOm7b1Vkh05FYMWp9iicDvamQA0Ld3fH9dfyep1xBxhr7
aKNvtOsSRYUX52/z1jueVwwTPvC/M4vr4eBGeqqA4D59SxQI2hBuSMsXh8NKeDmI
zdg0066YfYl7ti4ceeJnsrb9Lww=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:09 2026 by rpki-client