Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/LPom1ycQUOhMD2I6nGZOcTb9dG4.roa
File: LPom1ycQUOhMD2I6nGZOcTb9dG4.roa (raw, json)
Hash identifier: AdqbjdmCanIAKUIDzwzsv8dbXf4F0gauVkaJiVx2Bx0=
Subject key identifier: 2C:FA:26:D7:27:10:50:E8:4C:0F:62:3A:9C:66:4E:71:36:FD:74:6E
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 01A0D316FF96992EE77C7580414403A80C11
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/LPom1ycQUOhMD2I6nGZOcTb9dG4.roa
Signing time: Thu 24 Sep 2026 11:04:54 +0000
ROA not before: Thu 24 Sep 2026 11:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51369
IP address blocks: 46.44.0.0/18 maxlen: 20
62.140.224.0/19 maxlen: 24
62.140.232.0/24 maxlen: 24
62.140.248.0/24 maxlen: 24
62.140.250.0/24 maxlen: 24
80.77.161.0/24 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.170.0/23 maxlen: 23
80.77.172.0/22 maxlen: 22
93.191.8.0/21 maxlen: 24
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.44.0/22 maxlen: 22
185.221.44.0/24 maxlen: 24
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:16:ff:96:99:2e:e7:7c:75:80:41:44:03:a8:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Sep 24 11:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cfa26d7271050e84c0f623a9c664e7136fd746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:f2:8f:89:78:48:2e:5c:4f:24:5a:6c:af:
89:e9:45:0c:dd:af:be:88:8d:3f:fd:16:59:3f:6a:
77:bf:b8:bb:7c:8a:a1:48:fe:64:7d:32:56:61:f3:
b5:7b:00:d3:a9:13:fb:e2:3c:84:52:32:8c:d0:66:
90:df:6b:80:c3:10:21:da:7b:b8:55:29:30:4d:67:
b7:b0:53:96:3f:01:70:2e:ca:2b:17:d9:70:96:15:
8d:c5:4e:b0:6e:21:0b:37:90:78:30:10:cc:62:02:
0f:28:90:52:52:75:bc:e7:f1:80:1a:42:7f:70:be:
8f:68:38:af:62:ce:26:41:a4:57:11:00:b4:34:d9:
c6:ae:49:83:1a:2d:a9:6e:db:7f:75:2c:c4:9b:fd:
f6:a6:ff:e6:2f:7f:0f:8e:b5:3d:10:d0:46:15:0b:
84:34:76:b7:61:98:75:7a:93:29:d6:8e:23:ac:6c:
92:2f:3e:92:ad:3b:82:a8:d5:07:0e:ad:ca:8f:a5:
cd:5f:94:f4:d8:93:f1:01:a0:71:8b:4d:c0:85:c8:
e0:0a:2d:31:98:6e:c3:91:b2:13:c8:9e:e9:7d:16:
37:f9:93:03:12:4b:94:a9:d9:9d:99:5f:f4:12:f1:
69:ab:bd:38:b2:55:0d:eb:32:1d:9b:e4:8e:e7:3e:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:26:D7:27:10:50:E8:4C:0F:62:3A:9C:66:4E:71:36:FD:74:6E
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/LPom1ycQUOhMD2I6nGZOcTb9dG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.161.0-80.77.163.255
80.77.169.0-80.77.175.255
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
59:b6:45:46:f1:75:eb:1b:b7:f2:15:1b:4c:58:20:00:54:4b:
9a:59:16:bb:d8:78:f4:9d:d7:32:6f:c8:ef:e6:f8:41:90:db:
fe:96:fd:16:12:e9:cf:75:52:85:68:14:d7:e5:e0:01:3c:ae:
ab:27:d2:5e:52:4a:1d:69:22:c4:5c:3d:dd:8d:62:f7:76:c6:
4a:da:7b:d6:0a:9e:6a:a2:21:63:2d:41:7b:97:2a:ee:1f:e9:
b6:01:7e:c8:a8:cb:12:83:64:60:a9:2e:46:8e:f8:6e:85:d3:
c4:f5:ea:7e:b8:98:07:7a:af:59:fe:80:5b:6c:d6:7a:8c:4b:
67:05:5e:3a:5d:13:f1:72:76:e3:f4:98:7a:fe:78:18:8f:7d:
d4:24:2d:d4:4b:d2:dc:f6:f5:dd:7e:85:8a:93:90:2c:22:0a:
c2:a8:f7:a8:f6:42:c5:2f:f5:1c:0d:e1:fc:30:ae:db:d9:5c:
64:2c:12:a0:e0:f4:72:0f:37:78:32:db:be:c2:36:12:51:a3:
75:e3:b8:f5:23:c9:29:d2:32:6a:6b:1b:e6:35:3d:95:a2:a2:
ba:c4:1e:d0:35:72:3f:6d:9b:98:be:44:bb:12:ef:d7:d7:9e:
f1:b3:c4:9d:70:ce:79:70:f2:2a:6e:6d:18:05:0a:65:09:ca:
a3:b2:c6:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:07:29 2026 by rpki-client