Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa
File: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (raw, json)
Hash identifier: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=
Subject key identifier: 2D:48:4C:DC:7F:25:84:E3:71:1A:0A:1A:5C:71:16:7C:A8:67:CF:66
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 019F236913BDEB15DF3AF8D301BE6200FA43
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204641
IP address blocks: 45.80.148.0/24 maxlen: 32
45.80.149.0/24 maxlen: 32
45.80.150.0/24 maxlen: 32
45.80.151.0/24 maxlen: 32
185.244.129.0/24 maxlen: 32
185.244.130.0/24 maxlen: 32
185.244.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:bd:eb:15:df:3a:f8:d3:01:be:62:00:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d484cdc7f2584e3711a0a1a5c71167ca867cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:ff:9b:e3:d6:25:19:51:c4:50:12:57:d8:
e3:f9:24:20:04:0b:72:98:2e:10:9d:79:d4:e1:5d:
17:66:07:e4:f4:1e:a5:30:74:1e:c1:55:af:99:2f:
e5:e3:2a:36:c8:2c:11:16:2d:dd:d5:c8:fc:7a:0d:
9e:25:d9:82:d2:2a:fe:d2:5e:9e:f6:39:ab:b4:a9:
e1:2a:1e:0f:39:66:f3:e3:3e:dc:05:e7:43:77:0e:
dc:6e:d9:dc:84:a9:87:b3:9d:d1:f6:e0:45:42:80:
bf:af:12:54:33:5b:df:a0:03:a7:63:3b:a8:9f:56:
ec:35:c4:04:6a:73:35:75:d0:fd:96:2d:39:70:a3:
7b:0c:c0:f8:c7:2e:7d:0f:64:82:27:aa:4d:aa:83:
46:3c:78:93:51:d4:01:68:b9:e2:10:21:63:b6:da:
d2:c6:45:0d:0c:89:b0:06:c8:93:8f:1f:43:50:56:
86:3b:73:17:1a:a5:c2:ab:42:5f:e0:1e:ce:fb:f5:
b2:83:c1:28:cd:e3:9d:69:34:a4:36:f1:2d:e6:92:
1d:aa:54:14:02:b5:98:15:30:93:75:7b:ff:2f:4d:
05:8a:9b:60:7b:3a:9d:71:08:4b:90:55:7b:61:d4:
29:0b:2a:50:b5:16:cf:4f:93:2c:ab:86:de:2a:23:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:4C:DC:7F:25:84:E3:71:1A:0A:1A:5C:71:16:7C:A8:67:CF:66
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.148.0/22
185.244.129.0-185.244.131.255
Signature Algorithm: sha256WithRSAEncryption
7a:95:62:78:a3:e6:09:e6:c5:a1:01:a9:2c:03:92:55:cc:07:
cc:50:c1:7d:76:7a:f4:8c:8d:03:1e:38:0c:df:d0:97:88:a0:
1a:6f:dc:75:f8:9f:82:d0:a7:5c:84:20:bc:ea:65:43:f1:6e:
f4:df:50:ac:00:2e:b4:3c:a0:6a:a8:a7:89:3d:13:45:35:75:
21:bb:11:ea:4a:eb:d3:64:9b:b1:1e:18:62:6a:f2:0d:ad:9b:
4c:36:3d:df:c4:d0:20:e9:94:5d:94:e4:44:f1:b6:b2:0e:50:
bc:96:6e:c4:72:a7:a1:3e:ca:46:74:e3:67:04:fa:e8:9c:5a:
9d:81:42:bf:93:36:3b:3f:45:5c:0e:d8:d2:77:dd:1c:f1:af:
a5:c0:5f:7f:74:ad:23:67:11:8f:f6:1b:2f:a6:87:2d:09:3a:
a6:83:8e:e5:58:2f:56:04:06:39:17:fd:c9:0b:3f:61:36:37:
6c:17:4d:37:d5:95:ce:63:13:25:d9:d6:aa:be:cb:17:d0:02:
ed:51:96:69:b5:5c:2b:0e:99:cf:e3:59:92:71:eb:20:d1:89:
47:f9:23:a3:43:22:7f:f0:11:05:f8:33:e2:74:07:74:2e:94:
ec:7b:6c:62:b7:60:76:cb:ec:b7:40:02:e3:8b:f8:fb:d4:8f:
79:86:10:22
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaRO96xXfOvjTAb5iAPpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4N2JjMWJiMjg2MmI1NzI1N2QyOWUwZDNiZDZiMWNlZDQz
M2VhMTMwHhcNMjYwNzAyMTUxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDQ4NGNkYzdmMjU4NGUzNzExYTBhMWE1YzcxMTY3Y2E4NjdjZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8P/m+PWJRlRxFASV9jj+SQgBAty
mC4QnXnU4V0XZgfk9B6lMHQewVWvmS/l4yo2yCwRFi3d1cj8eg2eJdmC0ir+0l6e
9jmrtKnhKh4POWbz4z7cBedDdw7cbtnchKmHs53R9uBFQoC/rxJUM1vfoAOnYzuo
n1bsNcQEanM1ddD9li05cKN7DMD4xy59D2SCJ6pNqoNGPHiTUdQBaLniECFjttrS
xkUNDImwBsiTjx9DUFaGO3MXGqXCq0Jf4B7O+/Wyg8EozeOdaTSkNvEt5pIdqlQU
ArWYFTCTdXv/L00FiptgezqdcQhLkFV7YdQpCypQtRbPT5Msq4beKiMrawIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFC1ITNx/JYTjcRoKGlxxFnyoZ89mMB8GA1UdIwQY
MBaAFBh7wbsoYrVyV9KeDTvWsc7UM+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0h2QnV5aGl0WEpYMHA0Tk85YXh6dFF6NmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct
ZTBhZGFiN2YxMTEyLzEvTFVoTTNIOGxoT054R2dvYVhIRVdmS2huejJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy
LzEvR0h2QnV5aGl0WEpYMHA0Tk85YXh6dFF6NmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLVCUMAwD
BAC59IEDBAK59IAwDQYJKoZIhvcNAQELBQADggEBAHqVYnij5gnmxaEBqSwDklXM
B8xQwX12evSMjQMeOAzf0JeIoBpv3HX4n4LQp1yEILzqZUPxbvTfUKwALrQ8oGqo
p4k9E0U1dSG7EepK69Nkm7EeGGJq8g2tm0w2Pd/E0CDplF2U5ETxtrIOULyWbsRy
p6E+ykZ042cE+uicWp2BQr+TNjs/RVwO2NJ33Rzxr6XAX390rSNnEY/2Gy+mhy0J
OqaDjuVYL1YEBjkX/ckLP2E2N2wXTTfVlc5jEyXZ1qq+yxfQAu1Rlmm1XCsOmc/j
WZJx6yDRiUf5I6NDIn/wEQX4M+J0B3QulOx7bGK3YHbL7LdAAuOL+PvUj3mGECI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:26 2026 by rpki-client