Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LriXu6oKCSbAu02PvGPFuSc9qmw.roa
File: LriXu6oKCSbAu02PvGPFuSc9qmw.roa (raw, json)
Hash identifier: lKHHgLohbHOdCK1S4Z74HxWN+ycdKyzhArPqyuPNa8g=
Subject key identifier: 2E:B8:97:BB:AA:0A:09:26:C0:BB:4D:8F:BC:63:C5:B9:27:3D:AA:6C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01A1881B8F05E2C13947EBFA9222DC45E7A4
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LriXu6oKCSbAu02PvGPFuSc9qmw.roa
Signing time: Thu 29 Oct 2026 14:41:09 +0000
ROA not before: Thu 29 Oct 2026 14:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 45.86.156.0/24 maxlen: 24
45.86.157.0/24 maxlen: 24
45.86.158.0/24 maxlen: 24
185.255.115.0/24 maxlen: 24
2a09:7900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:1b:8f:05:e2:c1:39:47:eb:fa:92:22:dc:45:e7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Oct 29 14:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb897bbaa0a0926c0bb4d8fbc63c5b9273daa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:1b:af:e7:56:13:e1:cc:47:23:c3:92:1f:
b1:d5:bc:31:b5:7a:57:e1:e5:fc:27:17:f3:c5:1c:
ad:5e:77:67:1e:c7:bf:28:2e:a9:ee:3d:b7:7e:79:
b2:75:e6:f5:b2:57:e4:b4:cb:34:46:1c:77:17:d6:
da:47:44:3b:a9:83:71:63:c5:9d:63:5f:2c:25:3e:
a0:58:75:d1:e8:83:7a:90:05:f8:3d:33:0f:f7:da:
63:17:c5:22:1f:c3:93:88:8a:a0:f2:9a:20:cb:3d:
27:a6:ca:31:39:00:dc:c4:43:33:db:23:88:54:22:
f5:59:7e:96:54:f2:ca:af:6a:cb:08:42:57:7f:5a:
f6:ee:1d:ee:0e:b3:1e:92:2b:52:0b:84:a9:63:e4:
6d:30:60:86:18:3d:ea:7e:b2:c3:20:6e:14:95:1d:
87:7d:70:11:ee:8f:08:7b:ee:d3:65:81:7d:2c:1a:
ee:b7:89:35:57:59:99:20:79:77:8e:21:64:79:88:
40:12:3c:cf:58:d0:6e:f2:7d:b6:a3:a1:9e:e6:64:
c1:91:a1:48:d8:6d:0d:fe:51:29:aa:e9:3b:f3:1c:
45:a1:83:29:75:7a:48:bb:7b:86:d2:dd:12:ce:70:
a9:3b:da:94:25:7f:22:45:c6:df:ad:1d:59:13:02:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B8:97:BB:AA:0A:09:26:C0:BB:4D:8F:BC:63:C5:B9:27:3D:AA:6C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LriXu6oKCSbAu02PvGPFuSc9qmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0-45.86.158.255
185.255.115.0/24
IPv6:
2a09:7900::/32
Signature Algorithm: sha256WithRSAEncryption
3a:2d:49:56:f5:af:b4:ed:9c:10:96:04:fb:90:ff:d0:56:de:
fb:55:d0:bb:f3:c0:7f:b4:29:b1:28:10:08:94:48:f5:a3:44:
a0:df:cd:2d:29:d6:c1:b1:9c:ee:72:84:fa:8c:84:c9:63:f9:
21:1f:f4:9b:2f:21:6b:6d:a4:bb:f6:1e:99:ef:38:26:bc:f0:
fa:b6:e0:4d:c3:a9:8e:f9:b4:99:f2:9c:18:be:73:7a:52:c1:
02:41:5d:23:6d:9c:cb:b7:9e:d1:05:ae:e2:e3:2b:0d:88:1e:
4d:2a:01:8f:0c:7b:c5:4d:6b:8a:bf:72:f0:4d:69:49:ed:39:
94:dc:1c:f4:65:e7:0d:d5:df:06:b0:f2:80:3f:d9:f7:bf:6a:
35:e1:1c:d2:7f:98:70:04:7a:0a:a6:c6:42:6c:93:9b:8e:db:
63:df:6a:1c:9f:e2:d3:97:2a:92:9c:1d:3c:83:7c:33:39:bb:
96:6b:9a:86:74:f3:8f:65:87:75:ad:be:1d:b4:84:2b:26:e3:
c5:dd:df:9c:02:da:05:29:8d:93:81:93:b6:f0:0e:bc:a9:92:
ff:f6:5f:41:d2:46:17:5f:bf:5b:87:bf:b4:47:3d:9e:52:7d:
cb:b6:1c:fe:24:4a:9b:d1:e8:79:62:91:77:86:62:da:62:fd:
b4:46:b9:3a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAaGIG48F4sE5R+v6kiLcReekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjYxMDI5MTQ0MTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWI4OTdiYmFhMGEwOTI2YzBiYjRkOGZiYzYzYzViOTI3M2RhYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxQbr+dWE+HMRyPDkh+x1bwxtXpX
4eX8JxfzxRytXndnHse/KC6p7j23fnmydeb1slfktMs0Rhx3F9baR0Q7qYNxY8Wd
Y18sJT6gWHXR6IN6kAX4PTMP99pjF8UiH8OTiIqg8pogyz0npsoxOQDcxEMz2yOI
VCL1WX6WVPLKr2rLCEJXf1r27h3uDrMekitSC4SpY+RtMGCGGD3qfrLDIG4UlR2H
fXAR7o8Ie+7TZYF9LBrut4k1V1mZIHl3jiFkeYhAEjzPWNBu8n22o6Ge5mTBkaFI
2G0N/lEpquk78xxFoYMpdXpIu3uG0t0SznCpO9qUJX8iRcbfrR1ZEwLVKwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFC64l7uqCgkmwLtNj7xjxbknPapsMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvTHJpWHU2b0tDU2JBdTAyUHZHUEZ1U2M5cW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAItVpwD
BAAtVp4DBAC5/3MwDQQCAAIwBwMFACoJeQAwDQYJKoZIhvcNAQELBQADggEBADot
SVb1r7TtnBCWBPuQ/9BW3vtV0LvzwH+0KbEoEAiUSPWjRKDfzS0p1sGxnO5yhPqM
hMlj+SEf9JsvIWttpLv2HpnvOCa88Pq24E3DqY75tJnynBi+c3pSwQJBXSNtnMu3
ntEFruLjKw2IHk0qAY8Me8VNa4q/cvBNaUntOZTcHPRl5w3V3waw8oA/2fe/ajXh
HNJ/mHAEegqmxkJsk5uO22Pfahyf4tOXKpKcHTyDfDM5u5ZrmoZ0849lh3Wtvh20
hCsm48Xd35wC2gUpjZOBk7bwDrypkv/2X0HSRhdfv1uHv7RHPZ5Sfcu2HP4kSpvR
6HlikXeGYtpi/bRGuTo=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:00 2026 by rpki-client