Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/LexXkjfAE5yNq8p4TfuCEaRKHeg.roa
File: LexXkjfAE5yNq8p4TfuCEaRKHeg.roa (raw, json)
Hash identifier: KDlc/z2I2lAqH602iJ+p3ujK1GdvNju4aKO99XjRuPY=
Subject key identifier: 2D:EC:57:92:37:C0:13:9C:8D:AB:CA:78:4D:FB:82:11:A4:4A:1D:E8
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 01A0ED084E2FBB4298142EA0783A5398E34F
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/LexXkjfAE5yNq8p4TfuCEaRKHeg.roa
Signing time: Tue 29 Sep 2026 11:58:59 +0000
ROA not before: Tue 29 Sep 2026 11:58:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 195.93.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:08:4e:2f:bb:42:98:14:2e:a0:78:3a:53:98:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Sep 29 11:58:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dec579237c0139c8dabca784dfb8211a44a1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:37:45:28:35:8e:bc:12:a3:34:db:6e:9e:
04:9e:83:6f:da:64:53:97:f6:01:02:7a:c6:41:b6:
be:6b:92:73:9e:8e:7d:60:3e:39:6d:e8:3a:44:e3:
25:57:6c:ea:a0:3f:9b:75:b8:a9:79:50:16:8a:2a:
38:e9:56:8e:5c:3a:c0:7e:40:4f:d5:c7:65:93:ce:
99:a3:37:53:11:33:b0:72:e2:c4:74:6e:de:23:0c:
e1:60:6a:be:38:93:ad:66:0a:31:1a:a0:9b:fa:4c:
36:80:81:a2:19:c5:df:4b:2d:c3:06:a0:60:7b:10:
14:09:d7:17:50:1b:36:0f:7b:de:d4:66:f1:76:e5:
ae:dd:75:28:58:fd:3d:da:65:a5:4d:63:b5:ca:78:
05:63:31:40:aa:f1:ff:b0:43:46:29:e0:d8:55:6d:
1c:cd:ec:06:bd:0c:00:fd:82:10:16:39:3c:1e:2c:
93:3b:6e:b7:8f:a8:06:38:a1:2c:49:b2:d6:48:ac:
f8:2c:db:b7:db:14:0d:a4:0a:af:00:26:9c:0e:40:
1d:11:17:41:5f:e8:cf:be:d6:d7:5a:51:91:26:c1:
c4:2b:d1:07:12:29:34:bd:1f:fd:81:c2:b4:fc:5e:
1e:fd:7c:b8:d1:2d:92:73:00:b1:da:81:4d:c3:6b:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EC:57:92:37:C0:13:9C:8D:AB:CA:78:4D:FB:82:11:A4:4A:1D:E8
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/LexXkjfAE5yNq8p4TfuCEaRKHeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:cd:9f:35:a8:05:1a:38:2c:7b:da:60:46:2a:15:5d:ab:8c:
08:f8:8a:ea:84:d4:30:ec:fe:82:13:17:3d:ad:a1:3e:27:90:
3e:f2:e2:74:b3:a1:c3:1c:f6:ad:1d:d2:96:9b:0d:c5:3f:e9:
27:26:06:c6:18:0e:45:14:1a:ea:3a:86:cc:fa:76:bc:d6:4d:
e8:7c:72:4b:f5:df:39:24:75:98:9c:bd:80:c1:c2:22:45:4f:
05:1b:b8:0c:9b:50:a5:db:52:c2:62:f5:06:ee:43:28:6f:6d:
88:43:9f:04:8e:10:5e:38:96:84:2d:bf:70:c8:38:27:6d:07:
8a:04:3a:12:75:fe:5e:ce:5e:8a:28:08:f6:78:5e:a4:8b:80:
94:4c:77:ae:80:68:3b:12:e0:47:f1:12:4a:4f:6a:f4:98:a0:
d6:76:b0:a3:fc:04:e2:10:70:77:d5:ec:a6:ab:fb:2c:79:fd:
95:49:e4:8b:1c:e3:bb:15:cf:25:4c:6f:c0:8d:81:36:8c:ed:
22:0f:7f:d3:89:de:31:70:26:48:93:6c:31:4c:7b:4b:7b:7f:
62:aa:5d:ce:92:fc:09:ce:e2:0a:8b:7f:a5:f6:1d:2c:76:f8:
ff:86:a6:39:39:8c:1e:c2:ef:ea:d8:d0:20:d6:10:74:de:49:
75:ba:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:13:06 2026 by rpki-client