Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LVRA_0PeUi_w8Lae03JWvR1Laso.roa
File: LVRA_0PeUi_w8Lae03JWvR1Laso.roa (raw, json)
Hash identifier: bHGugeGzZmRT4qDNegG3KuKfYFNkdTUfaUvVjYgFK0Q=
Subject key identifier: 2D:54:40:FF:43:DE:52:2F:F0:F0:B6:9E:D3:72:56:BD:1D:4B:6A:CA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019F2317B630E974CE841052F7ABF9F8A4C0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LVRA_0PeUi_w8Lae03JWvR1Laso.roa
Signing time: Thu 02 Jul 2026 13:49:44 +0000
ROA not before: Thu 02 Jul 2026 13:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197314
IP address blocks: 192.36.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:17:b6:30:e9:74:ce:84:10:52:f7:ab:f9:f8:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 2 13:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d5440ff43de522ff0f0b69ed37256bd1d4b6aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:5f:f2:21:6b:59:19:42:fe:94:17:bd:d9:
fe:6d:aa:75:16:27:dd:ca:42:48:6c:69:e8:ad:a3:
82:c6:b4:e2:4c:5c:9a:c7:d4:e1:6c:62:3c:86:0a:
7c:a7:2f:52:07:a3:ce:a2:56:3f:e3:85:5b:05:0c:
cb:88:17:cc:d9:4f:e3:c8:ad:87:ef:3b:c5:ca:e9:
4d:2f:a5:57:24:7d:8f:7d:19:14:6c:db:f7:10:fd:
79:0b:0b:c5:d6:04:ec:eb:43:3c:11:80:f2:c0:be:
c1:63:68:0c:0b:7f:61:ac:46:cd:04:29:fa:e9:6b:
45:e7:0d:01:19:2d:6c:f4:40:a7:be:13:a6:e5:7b:
3c:bd:36:08:cf:59:61:d2:d0:26:aa:96:46:92:a9:
ce:e5:f5:fc:fc:e1:ec:b5:e2:e3:96:58:7c:6c:66:
46:f1:21:ae:cb:d9:ae:ef:0b:37:25:77:9b:29:8f:
ba:05:fb:f7:ec:7a:9c:f6:ac:fa:c9:d1:87:20:6f:
82:17:3b:02:5e:92:4d:c5:05:b6:e8:b4:e9:0c:9f:
a8:04:c2:27:da:77:72:31:d3:07:e0:8a:15:42:04:
de:02:f5:16:30:90:62:29:04:ca:2c:ed:cb:26:e7:
02:d2:37:ca:b5:f2:e2:f8:4a:37:ae:db:d8:a6:36:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:40:FF:43:DE:52:2F:F0:F0:B6:9E:D3:72:56:BD:1D:4B:6A:CA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LVRA_0PeUi_w8Lae03JWvR1Laso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.193.0/24
Signature Algorithm: sha256WithRSAEncryption
14:68:5d:a9:e4:b3:c2:59:76:c5:74:45:b5:ef:e2:80:ca:78:
43:45:5e:e4:82:94:64:9b:18:b6:c7:52:63:3a:43:48:44:d2:
22:83:7a:94:73:08:74:46:fc:67:f4:db:99:7b:c6:f1:90:b0:
aa:f7:13:29:ac:f0:67:fd:f9:4a:ed:02:1e:79:89:5f:22:ef:
1d:9e:72:b0:44:4f:d0:59:46:24:bd:02:16:7e:d4:ce:3b:20:
53:da:a2:eb:01:e3:84:d4:05:62:6c:f2:62:68:7b:ea:1f:e5:
22:0d:f7:6c:e8:6d:83:e9:1f:fe:95:b1:3b:05:fd:b5:86:16:
21:0d:ea:34:24:b1:68:80:af:15:0a:4d:a4:4a:5d:e8:3a:65:
75:31:8a:d9:53:6b:eb:86:89:bd:de:3b:df:7d:6a:44:80:23:
c7:b0:07:53:af:9e:71:60:04:03:e8:3b:5c:83:67:cc:51:8a:
e4:88:36:7b:01:99:66:8f:e6:26:3c:ae:4d:de:90:32:0c:cf:
c1:78:5b:a1:16:6c:a4:03:93:df:ee:dc:31:1e:dc:94:8f:70:
d3:b8:6e:ca:4e:89:e7:00:22:c9:20:bf:46:84:38:f3:4c:d4:
da:88:37:35:7b:6a:96:89:35:4d:65:8f:0e:eb:a4:a9:f1:20:
27:55:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:21 2026 by rpki-client