Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa
File: LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa (raw, json)
Hash identifier: wPUxThCCBF05g0fTbeBHjNHbYdl0RItVLzPHmSaC9kA=
Subject key identifier: 2C:DB:AF:5B:61:1B:92:50:FF:AC:F0:94:56:EF:22:B8:AC:44:5E:64
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 019B78A2585187713FDE73C545CA4C87946A
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa
Signing time: Thu 01 Jan 2026 08:17:43 +0000
ROA not before: Thu 01 Jan 2026 08:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208997
IP address blocks: 45.11.136.0/24 maxlen: 24
45.11.137.0/24 maxlen: 24
45.11.138.0/24 maxlen: 24
45.11.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:58:51:87:71:3f:de:73:c5:45:ca:4c:87:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Jan 1 08:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cdbaf5b611b9250ffacf09456ef22b8ac445e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:be:64:67:0c:d4:b3:f6:cb:ec:84:60:52:
fd:a8:d5:21:1a:02:35:71:c6:4c:b9:19:61:7d:0b:
1a:f0:30:97:11:66:bc:8f:04:a3:74:46:c4:f7:10:
b3:8b:dd:69:c5:78:e0:2e:87:3b:76:b9:a4:8c:d7:
b5:a7:c3:68:de:d6:91:41:eb:68:29:68:3a:95:da:
3b:e7:d7:fe:f0:15:56:84:81:36:b1:b9:80:d4:a8:
1f:1b:aa:a2:27:ab:1d:a9:80:3c:b0:b3:88:d7:c6:
a9:c3:17:41:78:9a:cf:f7:ad:a1:b7:c4:d4:89:d6:
de:49:0f:71:2c:49:30:52:8b:be:b7:58:73:93:5e:
35:36:12:5c:fe:05:70:65:60:d0:57:82:1b:22:72:
73:e2:64:ec:75:fe:1e:80:e8:33:18:a2:2d:e6:f3:
0e:f9:44:d3:c2:80:53:32:7c:fa:a5:88:f8:f8:3b:
2f:76:f7:54:14:0d:2b:89:81:af:63:c7:da:18:d2:
f6:97:86:e0:23:8f:10:dd:f0:57:b8:b2:bc:8c:ff:
ed:5e:35:1e:fe:06:63:ca:12:fb:98:46:8f:87:2c:
c3:50:b3:dd:42:d0:4c:10:75:94:ab:93:70:fe:a5:
8c:69:b3:5a:3e:aa:9b:6a:5e:04:6b:7b:18:59:62:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:AF:5B:61:1B:92:50:FF:AC:F0:94:56:EF:22:B8:AC:44:5E:64
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
80:5a:21:99:bc:61:ba:a6:17:36:44:a2:46:8b:82:6d:ae:3e:
c4:9f:e5:92:ec:dd:c6:04:a0:1b:79:be:56:3d:92:a3:1d:ff:
bc:2e:53:90:5c:0f:8f:b2:be:4a:e0:66:32:0b:3b:96:fc:00:
d8:be:ec:66:75:1c:d4:3a:4d:31:3c:5a:60:54:91:09:63:01:
80:b3:26:93:bc:de:17:1b:19:ec:f7:98:ab:af:cd:9d:f8:3d:
33:3f:ce:40:5c:a2:75:0b:1a:25:db:6b:46:0e:ff:5c:d8:2e:
b3:47:c5:d5:54:24:ac:a4:9d:17:30:9c:1c:46:11:00:09:c2:
53:11:cd:69:78:7f:4f:87:30:b7:46:7a:13:53:d5:24:d9:88:
37:4f:8a:cc:96:d8:62:9e:7f:36:c5:22:3d:e3:64:f6:1e:f2:
2a:bd:f4:a3:1d:3d:90:93:34:20:8c:af:35:19:5d:58:f8:a9:
ef:9d:d3:47:11:ef:2c:e6:84:5c:8c:24:da:59:69:df:ed:40:
4d:23:46:1b:36:6d:19:1f:d9:7e:e1:66:cc:e1:fb:e2:17:a3:
b1:ca:ee:44:6e:95:be:bd:b9:76:d4:ec:90:39:cb:18:e8:c9:
c2:92:63:4c:8f:77:64:b1:da:b7:35:45:7f:2f:65:6d:36:f0:
02:d3:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:23 2026 by rpki-client