Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Lmm0bhGpnwM1D8VhJsqmXBKFmv8.roa
File: Lmm0bhGpnwM1D8VhJsqmXBKFmv8.roa (raw, json)
Hash identifier: I4pmd5evgBs7lcuFXCV7sIIiqHtpGqShOmOao3i1gkM=
Subject key identifier: 2E:69:B4:6E:11:A9:9F:03:35:0F:C5:61:26:CA:A6:5C:12:85:9A:FF
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A179548806458EA99B3EE0648DBB824B53
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Lmm0bhGpnwM1D8VhJsqmXBKFmv8.roa
Signing time: Mon 26 Oct 2026 17:49:05 +0000
ROA not before: Mon 26 Oct 2026 17:49:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 213.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:54:88:06:45:8e:a9:9b:3e:e0:64:8d:bb:82:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 26 17:49:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e69b46e11a99f03350fc56126caa65c12859aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:dc:8b:ff:41:f3:29:8c:50:e9:6c:28:ba:
f4:3c:df:e0:9a:12:44:c9:d8:97:b6:bc:26:39:ae:
15:35:22:04:49:f7:5b:d1:b7:85:dd:23:12:90:28:
30:11:b4:03:76:49:ff:43:f8:cf:a7:9c:d9:ee:8e:
47:c2:8c:bf:74:ae:1c:3b:8c:10:4e:ab:4b:ea:ef:
4c:9c:9a:62:37:38:a0:b7:41:9a:f9:d0:1a:ee:88:
8b:2a:a5:21:2d:7b:52:fa:a0:48:a6:9f:e1:de:0b:
cc:03:c2:2b:83:0b:2b:e5:41:1b:d0:ac:ee:bb:29:
c2:a8:6a:a1:6a:58:14:5b:bb:03:6f:ce:14:7d:13:
32:08:37:7c:73:79:7b:de:5f:6b:56:45:21:ec:46:
fd:a7:1f:b8:3e:70:c2:f5:94:1a:fb:4e:6a:5e:56:
b2:98:81:e1:0c:c0:67:a5:50:8c:52:11:55:87:90:
42:d7:68:95:a9:45:30:d7:25:cc:ea:7d:60:8f:3c:
37:09:ab:dd:db:c5:11:29:1d:b5:b8:48:5f:d1:dd:
8c:00:1b:5e:ba:fe:09:d9:15:62:0b:a7:48:ea:6e:
84:dc:da:b3:09:8a:eb:fd:77:7d:9d:6c:20:00:c0:
f1:6e:20:c1:f4:30:ca:8c:d7:2d:fa:e0:90:64:e2:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:B4:6E:11:A9:9F:03:35:0F:C5:61:26:CA:A6:5C:12:85:9A:FF
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Lmm0bhGpnwM1D8VhJsqmXBKFmv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
59:24:72:4c:c9:4f:16:09:3e:e3:02:71:7b:9f:db:f5:98:12:
c6:c9:61:79:ea:7e:41:f1:cf:46:9e:26:f0:10:bf:7c:a6:55:
05:75:a2:a2:29:76:17:55:2a:7f:cc:e0:c9:5c:71:cb:c0:f9:
8a:b8:67:e4:41:93:cc:49:8e:ef:18:d6:30:31:59:37:36:ee:
19:ab:94:d7:5a:78:81:c1:0c:de:3c:c1:ca:82:5a:28:2f:5b:
32:c4:bf:4b:6f:93:05:9a:fd:6d:80:8d:0b:21:0c:41:25:d4:
50:82:32:20:33:21:cf:b2:ca:59:d2:f3:7c:4a:1c:b7:c3:56:
32:95:3f:b4:a3:bc:50:79:35:ea:80:df:15:62:6a:ab:d0:59:
50:47:e8:42:fb:e9:35:a6:3e:5e:0e:f6:57:a1:7c:36:d8:3d:
9a:e9:58:4f:f1:ed:e7:cd:19:1e:85:c7:9a:41:9a:c9:d7:d2:
e7:92:1f:1d:1e:f3:08:08:fe:ec:47:fb:7b:1f:1c:2f:92:19:
ef:70:f6:4f:bc:75:e5:cc:2b:c3:39:cc:e8:bc:2d:6c:b4:be:
87:74:69:7d:d8:1f:f4:42:28:f2:21:e9:b2:6a:dd:a8:d6:d1:
3e:a0:55:f4:21:cc:ed:71:9d:9a:a2:c6:96:d4:30:c0:90:60:
07:21:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:52:05 2026 by rpki-client