Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LXFzApQ8WO88Y3a4M0D9PVZAwlY.roa
File: LXFzApQ8WO88Y3a4M0D9PVZAwlY.roa (raw, json)
Hash identifier: 6IhVyHcE6QnDS4u0MxX8Linu7wxidN+aEOukfHowPgc=
Subject key identifier: 2D:71:73:02:94:3C:58:EF:3C:63:76:B8:33:40:FD:3D:56:40:C2:56
Certificate issuer: /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial: 01A0C8B568CFE01C56F4E288F5525B966331
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LXFzApQ8WO88Y3a4M0D9PVZAwlY.roa
Signing time: Tue 22 Sep 2026 10:42:07 +0000
ROA not before: Tue 22 Sep 2026 10:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 77.245.16.0/20 maxlen: 20
185.22.104.0/22 maxlen: 22
185.83.60.0/22 maxlen: 22
185.83.61.0/24 maxlen: 24
217.147.208.0/20 maxlen: 20
2001:4168::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b5:68:cf:e0:1c:56:f4:e2:88:f5:52:5b:96:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Validity
Not Before: Sep 22 10:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d717302943c58ef3c6376b83340fd3d5640c256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:ce:c7:4f:64:eb:1c:16:d5:ea:58:57:f5:
1b:76:0b:63:79:9f:cf:47:40:fd:6e:9d:4d:c1:6d:
55:ae:ba:12:e3:ca:e5:58:e3:fc:3c:b1:f4:38:04:
25:0f:d5:ea:04:f9:50:e0:1d:21:40:6c:b1:50:3e:
55:b4:ed:eb:e0:85:f2:44:14:ed:32:dd:03:e1:60:
39:3f:35:c8:22:af:ce:fb:0f:c3:6e:f2:6c:ba:62:
05:54:64:35:c8:99:5c:f0:a0:0b:ec:7a:2b:5f:b1:
dd:8c:1f:fc:b5:85:87:bb:a4:86:bc:2b:19:c1:1c:
df:f7:04:d1:fa:06:75:b9:ba:1e:6f:99:36:c1:e4:
d7:17:c1:c2:07:5f:89:8b:aa:5e:ef:8c:4b:23:69:
4e:fd:2f:06:08:3f:8a:72:84:bd:83:f4:ab:34:af:
1f:ef:9c:48:5c:a5:7c:07:8b:62:51:5f:1a:24:46:
41:93:bf:a4:c8:04:66:15:2d:f2:13:7b:ff:04:3c:
c8:18:e7:cd:3c:b1:98:a1:b1:cc:26:3d:a9:d4:28:
ea:9b:b3:b1:07:33:3f:63:18:eb:1a:5f:c2:f0:f5:
e0:33:b2:41:cb:a5:0d:7a:fe:2a:23:13:ac:0c:d6:
a2:d4:d7:ea:4e:13:c8:6e:be:bb:36:e4:60:89:0c:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:73:02:94:3C:58:EF:3C:63:76:B8:33:40:FD:3D:56:40:C2:56
X509v3 Authority Key Identifier:
keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/LXFzApQ8WO88Y3a4M0D9PVZAwlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.16.0/20
185.22.104.0/22
185.83.60.0/22
217.147.208.0/20
IPv6:
2001:4168::/32
Signature Algorithm: sha256WithRSAEncryption
84:ae:28:20:d1:35:10:cd:b7:b6:3d:1e:3e:19:9e:c0:5e:0d:
df:11:78:66:3e:1d:16:ad:3a:da:9f:aa:45:89:df:c2:4f:99:
88:3e:f8:88:49:60:db:78:63:79:86:e9:1a:8c:63:60:65:b5:
48:9e:15:00:54:2f:8b:81:c9:cc:37:6d:67:1f:c9:ba:c3:05:
48:74:ce:f6:00:77:f4:36:e7:5a:d1:d0:76:ec:1d:f4:64:07:
2b:03:e4:12:0d:54:02:aa:82:0d:ed:ee:75:34:0a:f6:72:6a:
a2:8e:f7:e0:d1:0f:e4:d2:6b:a0:4f:12:89:51:1f:7a:12:8a:
86:9f:cd:fb:9c:e3:9c:f9:fd:74:66:bc:6c:40:df:c9:02:00:
32:e5:ce:9b:de:a5:b8:5e:73:8a:19:d7:12:f2:a0:ed:a8:cd:
93:33:82:d3:5f:c2:37:70:b0:84:fe:19:2b:c3:d1:a8:5d:3e:
63:af:3b:99:15:ff:f5:61:e8:9e:9a:24:f3:4a:8c:57:bc:a8:
fb:3d:18:3b:a2:b2:83:45:8e:16:5d:01:23:d1:0e:cc:74:64:
cd:ce:6b:7e:01:d5:d8:5d:9e:46:5a:c1:b5:71:25:a1:fb:4d:
1e:80:2b:7a:4c:bb:01:d0:b2:42:3d:c8:0c:b0:a1:22:5a:bb:
bf:78:05:76
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaDItWjP4BxW9OKI9VJblmMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjYwOTIyMTA0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDcxNzMwMjk0M2M1OGVmM2M2Mzc2YjgzMzQwZmQzZDU2NDBjMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7Ox09k6xwW1epYV/UbdgtjeZ/P
R0D9bp1NwW1VrroS48rlWOP8PLH0OAQlD9XqBPlQ4B0hQGyxUD5VtO3r4IXyRBTt
Mt0D4WA5PzXIIq/O+w/DbvJsumIFVGQ1yJlc8KAL7HorX7HdjB/8tYWHu6SGvCsZ
wRzf9wTR+gZ1uboeb5k2weTXF8HCB1+Ji6pe74xLI2lO/S8GCD+KcoS9g/SrNK8f
75xIXKV8B4tiUV8aJEZBk7+kyARmFS3yE3v/BDzIGOfNPLGYobHMJj2p1Cjqm7Ox
BzM/YxjrGl/C8PXgM7JBy6UNev4qIxOsDNai1NfqThPIbr67NuRgiQxNtQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFC1xcwKUPFjvPGN2uDNA/T1WQMJWMB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvTFhGekFwUThXTzg4WTNhNE0wRDlQVlpBd2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQETfUQAwQC
uRZoAwQCuVM8AwQE2ZPQMA0EAgACMAcDBQAgAUFoMA0GCSqGSIb3DQEBCwUAA4IB
AQCErigg0TUQzbe2PR4+GZ7AXg3fEXhmPh0WrTran6pFid/CT5mIPviISWDbeGN5
hukajGNgZbVInhUAVC+LgcnMN21nH8m6wwVIdM72AHf0Nuda0dB27B30ZAcrA+QS
DVQCqoIN7e51NAr2cmqijvfg0Q/k0mugTxKJUR96EoqGn837nOOc+f10ZrxsQN/J
AgAy5c6b3qW4XnOKGdcS8qDtqM2TM4LTX8I3cLCE/hkrw9GoXT5jrzuZFf/1Yeie
miTzSoxXvKj7PRg7orKDRY4WXQEj0Q7MdGTNzmt+AdXYXZ5GWsG1cSWh+00egCt6
TLsB0LJCPcgMsKEiWru/eAV2
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:08:27 2026 by rpki-client