Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/LvRMgMnIz-WSpwPtNC_0qN2ezk4.roa
File: LvRMgMnIz-WSpwPtNC_0qN2ezk4.roa (raw, json)
Hash identifier: 9KTj/IvgwPLL/HUnU0bmQjDhIav2+yG3ftcrBIJ5iZE=
Subject key identifier: 2E:F4:4C:80:C9:C8:CF:E5:92:A7:03:ED:34:2F:F4:A8:DD:9E:CE:4E
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0CA60F7E8D0F2FA6BC750B51977CA1480
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/LvRMgMnIz-WSpwPtNC_0qN2ezk4.roa
Signing time: Tue 22 Sep 2026 18:29:07 +0000
ROA not before: Tue 22 Sep 2026 18:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197313
IP address blocks: 178.214.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:60:f7:e8:d0:f2:fa:6b:c7:50:b5:19:77:ca:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Sep 22 18:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef44c80c9c8cfe592a703ed342ff4a8dd9ece4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:39:26:cc:29:22:6e:51:51:97:46:23:ff:
29:0e:82:c5:af:51:32:8a:ae:20:17:a6:4d:55:e1:
c0:ae:e6:ab:a6:9d:e3:de:a0:b4:fc:64:6a:4b:0e:
f1:4b:fe:42:78:34:c8:0a:8c:b6:76:49:39:e5:b3:
62:d9:fa:e5:1e:f9:6d:6e:49:99:9c:27:fd:b1:e5:
3b:9b:1e:0f:62:63:df:8e:b7:6c:e4:b9:a6:0a:50:
90:86:8b:5e:68:b5:53:36:41:9a:a4:42:66:11:86:
27:0f:26:4c:c4:c5:0f:38:6d:cf:ef:15:c2:9d:85:
03:17:b3:e2:a3:07:fa:ab:30:b9:ea:36:f0:89:72:
45:eb:33:ff:8d:43:7e:41:c2:ad:25:26:bd:71:a8:
3c:c8:b6:dc:42:eb:23:de:b6:31:98:6a:53:cb:a6:
8d:96:cd:17:06:ce:dc:8a:85:9f:d6:29:f9:b8:90:
c6:3e:52:95:1a:61:1a:9f:63:20:1e:fb:48:85:a9:
12:0c:34:f7:1b:f8:2d:f6:a7:e7:e1:83:b6:09:3b:
55:7e:0f:5a:d8:fb:fa:89:6a:d6:57:0c:d3:fb:2b:
88:fb:59:45:bc:4c:58:7d:41:13:08:d6:9b:e0:cf:
08:cf:df:bb:95:28:3c:fe:90:5e:44:b9:e4:b1:04:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:4C:80:C9:C8:CF:E5:92:A7:03:ED:34:2F:F4:A8:DD:9E:CE:4E
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/LvRMgMnIz-WSpwPtNC_0qN2ezk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.115.0/24
Signature Algorithm: sha256WithRSAEncryption
23:97:3f:f4:7a:87:8d:49:29:70:23:db:d2:04:c6:51:41:08:
0a:a5:ea:c8:d2:e0:1a:12:f8:5f:af:73:d1:6d:e9:2e:b7:77:
2c:8b:ea:a0:21:9d:72:e3:b7:4e:ab:b6:d5:b0:d9:8e:3a:34:
d4:9b:ce:f5:9d:3a:ae:eb:0f:24:86:e6:18:f6:3d:47:77:23:
95:7c:67:ed:81:8c:85:87:17:fc:c4:31:7b:6f:1f:7f:5e:d1:
80:f1:2b:45:dc:b0:ac:69:f6:d2:f6:ed:57:99:f0:ac:5d:6d:
e3:99:ce:14:20:7b:e6:2b:3a:9c:7c:62:52:68:db:bd:19:99:
10:ef:f7:ea:47:7e:d7:49:16:e1:2b:62:62:c2:bd:c4:4c:c3:
19:23:b0:ec:eb:9a:0c:dd:26:53:0d:a9:b5:b1:a0:09:db:6e:
b5:07:57:f0:f3:b6:90:0e:b2:45:9b:3e:35:c0:81:b8:a8:23:
e0:ba:4c:45:88:0f:ae:58:3a:bc:67:56:13:bf:ec:2b:4d:ac:
31:3f:1d:4d:7b:85:b8:bc:64:3e:d1:f7:bf:02:1f:79:4c:35:
13:9c:54:5c:51:f6:45:fe:94:58:e5:ef:22:d9:cd:41:d9:cf:
db:97:da:bb:33:fc:d5:27:ca:7f:27:0f:6e:75:af:3b:3e:53:
bb:08:9e:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDKYPfo0PL6a8dQtRl3yhSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwOTIyMTgyOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWY0NGM4MGM5YzhjZmU1OTJhNzAzZWQzNDJmZjRhOGRkOWVjZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tw5JswpIm5RUZdGI/8pDoLFr1Ey
iq4gF6ZNVeHAruarpp3j3qC0/GRqSw7xS/5CeDTICoy2dkk55bNi2frlHvltbkmZ
nCf9seU7mx4PYmPfjrds5LmmClCQhoteaLVTNkGapEJmEYYnDyZMxMUPOG3P7xXC
nYUDF7Piowf6qzC56jbwiXJF6zP/jUN+QcKtJSa9cag8yLbcQusj3rYxmGpTy6aN
ls0XBs7cioWf1in5uJDGPlKVGmEan2MgHvtIhakSDDT3G/gt9qfn4YO2CTtVfg9a
2Pv6iWrWVwzT+yuI+1lFvExYfUETCNab4M8Iz9+7lSg8/pBeRLnksQR/XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC70TIDJyM/lkqcD7TQv9Kjdns5OMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvTHZSTWdNbkl6LVdTcHdQdE5DXzBxTjJlems0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstZzMA0G
CSqGSIb3DQEBCwUAA4IBAQAjlz/0eoeNSSlwI9vSBMZRQQgKperI0uAaEvhfr3PR
bekut3csi+qgIZ1y47dOq7bVsNmOOjTUm871nTqu6w8khuYY9j1HdyOVfGftgYyF
hxf8xDF7bx9/XtGA8StF3LCsafbS9u1XmfCsXW3jmc4UIHvmKzqcfGJSaNu9GZkQ
7/fqR37XSRbhK2Jiwr3ETMMZI7Ds65oM3SZTDam1saAJ2261B1fw87aQDrJFmz41
wIG4qCPgukxFiA+uWDq8Z1YTv+wrTawxPx1Ne4W4vGQ+0fe/Ah95TDUTnFRcUfZF
/pRY5e8i2c1B2c/bl9q7M/zVJ8p/Jw9uda87PlO7CJ6U
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:09:10 2026 by rpki-client