Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LhvLktrMo9poJpg14Y8tEcMYEkc.roa
File: LhvLktrMo9poJpg14Y8tEcMYEkc.roa (raw, json)
Hash identifier: s592sNxgxxgdAH49s3mrulcRVpqeeTUHTwzgHGWMf94=
Subject key identifier: 2E:1B:CB:92:DA:CC:A3:DA:68:26:98:35:E1:8F:2D:11:C3:18:12:47
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D21503A2B9729C1803665285CAC829E52
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LhvLktrMo9poJpg14Y8tEcMYEkc.roa
Signing time: Tue 24 Mar 2026 19:26:39 +0000
ROA not before: Tue 24 Mar 2026 19:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 124.158.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:50:3a:2b:97:29:c1:80:36:65:28:5c:ac:82:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 24 19:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e1bcb92dacca3da68269835e18f2d11c3181247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:66:38:0e:28:00:9f:e7:08:5e:47:29:c5:
51:de:d2:5c:28:88:b4:17:92:96:8a:e4:ca:9c:8b:
b7:39:ed:fb:71:c5:c5:17:ad:53:df:0f:d0:04:e1:
75:39:42:70:f6:f0:e0:a7:aa:21:8a:f8:f6:44:a1:
19:9d:94:cc:11:a4:1e:51:da:d5:dd:15:0e:1d:bb:
46:97:a2:45:b8:9c:cb:2a:7b:44:39:63:b7:a8:c1:
f0:63:ed:2c:7f:33:69:f0:40:06:91:f6:c7:6f:4e:
de:c9:9e:09:0e:ce:8f:b1:f0:19:43:37:75:21:66:
38:b7:fd:80:f0:a3:b6:7a:62:81:95:2a:46:9b:e8:
03:cc:f6:69:de:56:e5:bd:0e:99:b5:93:55:60:25:
16:5c:52:83:03:b5:19:a6:b6:4e:eb:b9:37:64:65:
f6:47:bf:78:82:fa:f2:46:10:24:2d:f8:4a:44:2a:
5c:b0:58:04:f3:89:72:34:7f:2b:a0:82:6f:64:5a:
04:91:b8:7d:c5:96:51:00:27:b3:36:af:39:a0:67:
ef:bc:33:37:16:3e:95:65:70:bc:3d:1c:b2:ec:bd:
a0:57:f6:96:02:64:c3:11:b6:e3:41:56:9b:89:fe:
35:ee:6a:90:16:66:76:75:d9:d5:52:e3:11:ac:d7:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:CB:92:DA:CC:A3:DA:68:26:98:35:E1:8F:2D:11:C3:18:12:47
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LhvLktrMo9poJpg14Y8tEcMYEkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.112.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e9:3e:9b:6c:6b:3a:13:80:6c:58:9a:5b:c1:1b:4e:79:65:
0c:02:ad:e2:6e:4a:7a:fa:2b:a1:3a:6c:7d:45:46:4b:36:c3:
36:d0:3f:6c:78:70:55:66:f2:18:18:ef:4b:67:7d:ea:ff:8d:
8b:6c:a0:92:f3:99:ae:f4:be:78:73:23:bd:8d:30:60:b2:d3:
03:20:e4:24:e9:30:56:e4:2f:ce:95:36:28:22:90:d4:17:7b:
0b:ff:e4:a2:38:fe:67:95:f1:39:2a:1c:d9:54:11:9b:5d:8b:
bd:93:ac:3f:71:88:f3:17:3a:5d:b1:0c:63:63:c3:3f:0a:9b:
44:3f:c4:40:d5:2e:48:6b:1b:59:2c:2a:38:ce:a4:0f:85:d1:
6d:21:31:15:b9:9e:40:a3:8e:95:06:ca:c1:1f:5b:c8:de:0b:
e3:2c:cf:5d:e8:30:0b:fe:b8:4f:01:31:35:5a:3c:a1:56:84:
79:40:0b:7d:27:9e:4b:e0:b6:dc:46:a3:38:8e:c2:d9:16:eb:
c8:8f:e5:6d:3a:a0:54:33:78:e8:aa:88:e6:e5:30:f4:4e:06:
55:96:e5:a7:9c:33:2e:60:10:b6:41:1d:2b:58:30:ce:79:dc:
6c:d4:bd:9d:5a:c7:da:58:d5:ec:af:ea:f6:25:12:3d:dd:6d:
ec:8e:5b:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0hUDorlynBgDZlKFysgp5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwMzI0MTkyNjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTFiY2I5MmRhY2NhM2RhNjgyNjk4MzVlMThmMmQxMWMzMTgxMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8dmOA4oAJ/nCF5HKcVR3tJcKIi0
F5KWiuTKnIu3Oe37ccXFF61T3w/QBOF1OUJw9vDgp6ohivj2RKEZnZTMEaQeUdrV
3RUOHbtGl6JFuJzLKntEOWO3qMHwY+0sfzNp8EAGkfbHb07eyZ4JDs6PsfAZQzd1
IWY4t/2A8KO2emKBlSpGm+gDzPZp3lblvQ6ZtZNVYCUWXFKDA7UZprZO67k3ZGX2
R794gvryRhAkLfhKRCpcsFgE84lyNH8roIJvZFoEkbh9xZZRACezNq85oGfvvDM3
Fj6VZXC8PRyy7L2gV/aWAmTDEbbjQVabif417mqQFmZ2ddnVUuMRrNfwUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4by5LazKPaaCaYNeGPLRHDGBJHMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvTGh2TGt0ck1vOXBvSnBnMTRZOHRFY01ZRWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfJ5wMA0G
CSqGSIb3DQEBCwUAA4IBAQAV6T6bbGs6E4BsWJpbwRtOeWUMAq3ibkp6+iuhOmx9
RUZLNsM20D9seHBVZvIYGO9LZ33q/42LbKCS85mu9L54cyO9jTBgstMDIOQk6TBW
5C/OlTYoIpDUF3sL/+SiOP5nlfE5KhzZVBGbXYu9k6w/cYjzFzpdsQxjY8M/CptE
P8RA1S5IaxtZLCo4zqQPhdFtITEVuZ5Ao46VBsrBH1vI3gvjLM9d6DAL/rhPATE1
WjyhVoR5QAt9J55L4LbcRqM4jsLZFuvIj+VtOqBUM3joqojm5TD0TgZVluWnnDMu
YBC2QR0rWDDOedxs1L2dWsfaWNXsr+r2JRI93W3sjlub
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:54 2026 by rpki-client