Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LizQ_PDO1KwzoVjEcaxAdKKBOD0.roa
File: LizQ_PDO1KwzoVjEcaxAdKKBOD0.roa (raw, json)
Hash identifier: iD5cifW99jl+olutnXBIpDk7IpjEJQWYX82wd1AbKvk=
Subject key identifier: 2E:2C:D0:FC:F0:CE:D4:AC:33:A1:58:C4:71:AC:40:74:A2:81:38:3D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DBFFD162A9D779D5EF13800CA7681AF2F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LizQ_PDO1KwzoVjEcaxAdKKBOD0.roa
Signing time: Fri 24 Apr 2026 14:55:27 +0000
ROA not before: Fri 24 Apr 2026 14:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214661
IP address blocks: 213.218.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:fd:16:2a:9d:77:9d:5e:f1:38:00:ca:76:81:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 24 14:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e2cd0fcf0ced4ac33a158c471ac4074a281383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:bf:e4:d4:f4:05:17:22:3d:7e:31:23:e5:
16:ea:5c:8c:bb:f1:9c:67:7b:d6:22:e3:b5:b3:4b:
ac:c8:d4:03:88:a1:37:be:4e:3e:64:e4:24:bc:ba:
89:eb:30:1a:f1:4b:43:f1:63:f2:33:74:11:0e:a1:
18:45:60:25:5a:c7:c3:2c:f9:3b:7a:b0:97:c5:51:
4c:d4:9e:37:16:60:db:85:cb:89:9c:ec:df:f5:92:
4b:82:1a:e4:73:32:fb:b9:25:70:bd:da:34:2c:7b:
49:6d:56:cd:7e:e9:47:26:40:da:4f:07:44:17:b7:
5e:a4:77:7c:4a:d1:62:4d:ba:4e:42:79:6a:bd:c0:
eb:86:fe:a5:75:cc:6d:07:24:9e:47:41:98:43:a2:
74:db:01:fc:69:50:bf:8d:5b:8b:3f:fb:1a:c9:0b:
ac:64:40:bc:f3:c3:94:a2:68:ac:8d:84:f9:84:49:
9c:28:76:8a:3a:c6:e0:71:cf:f9:f9:a9:f9:14:2f:
e8:eb:fa:a8:5f:55:7b:bc:d3:5b:17:a7:83:73:9f:
64:f2:f2:f1:ab:52:d0:ec:f3:7d:55:b1:f7:9f:d8:
5e:ef:a2:56:9d:ad:6d:40:19:5a:19:95:d8:a1:9a:
a9:96:dc:11:73:1b:d4:50:df:09:cb:7b:e4:04:f8:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2C:D0:FC:F0:CE:D4:AC:33:A1:58:C4:71:AC:40:74:A2:81:38:3D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LizQ_PDO1KwzoVjEcaxAdKKBOD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6d:43:cb:ab:93:62:e1:72:f2:fc:9f:ce:a5:86:a4:6e:f1:
f8:ac:3e:64:15:33:26:9a:14:88:7e:8c:7e:0d:c2:b5:71:af:
cd:52:9f:5a:ac:f1:c0:b8:e2:6b:72:6a:c0:f2:5e:65:24:84:
7f:45:7f:0f:9d:07:00:bb:31:48:d4:34:d0:9f:57:94:3f:28:
58:50:ee:71:35:62:b8:22:e3:72:01:9a:de:4c:52:f9:4d:d9:
79:b2:e3:d3:0d:55:2f:c5:d1:89:c5:50:da:c5:ac:61:f3:de:
28:ff:88:70:55:71:7a:a2:81:a0:4c:bf:01:15:72:8e:a8:50:
49:11:b4:cb:06:0f:63:9f:2a:00:41:39:7d:19:93:6e:68:66:
ea:55:97:ef:47:4f:af:bd:13:58:d8:3a:16:f6:bd:d0:06:74:
18:f1:fe:d6:3b:be:22:3f:34:75:87:1d:cd:5f:0f:a3:4f:ad:
40:c4:22:33:58:b4:b8:53:c8:00:7a:99:b8:76:27:d4:c2:d2:
05:b3:36:33:2a:6a:1e:31:62:4d:03:14:89:96:6a:0f:32:49:
04:d2:2c:89:3f:ad:63:5b:af:9e:86:6b:59:26:62:a0:b2:3c:
c0:5e:c5:68:c3:04:7f:bd:cd:69:9e:d4:b7:86:7e:81:54:24:
d5:5e:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:40 2026 by rpki-client