Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/lkbj_rHQ3odPB7yMiampsN-UZno.roa
File: lkbj_rHQ3odPB7yMiampsN-UZno.roa (raw, json)
Hash identifier: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=
Subject key identifier: 96:46:E3:FE:B1:D0:DE:87:4F:07:BC:8C:89:A9:A9:B0:DF:94:66:7A
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019ED9DC8460CF9EF025D910A8EEDE40D325
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/lkbj_rHQ3odPB7yMiampsN-UZno.roa
Signing time: Thu 18 Jun 2026 08:32:48 +0000
ROA not before: Thu 18 Jun 2026 08:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60824
IP address blocks: 129.233.192.0/24 maxlen: 24
129.233.193.0/24 maxlen: 24
129.233.194.0/23 maxlen: 23
129.233.194.0/24 maxlen: 24
129.233.195.0/24 maxlen: 24
129.233.196.0/24 maxlen: 24
153.96.28.0/22 maxlen: 22
153.96.32.0/21 maxlen: 21
153.96.60.0/24 maxlen: 24
153.96.70.0/23 maxlen: 23
153.96.70.0/24 maxlen: 24
153.96.71.0/24 maxlen: 24
153.96.72.0/22 maxlen: 22
153.96.88.0/22 maxlen: 22
153.96.114.0/23 maxlen: 23
153.96.128.0/22 maxlen: 22
153.96.204.0/23 maxlen: 23
153.96.206.0/24 maxlen: 24
192.41.227.0/24 maxlen: 24
192.44.7.0/24 maxlen: 24
192.44.14.0/24 maxlen: 24
192.44.16.0/24 maxlen: 24
192.44.19.0/24 maxlen: 24
192.44.22.0/24 maxlen: 24
192.44.27.0/24 maxlen: 24
192.107.235.0/24 maxlen: 24
192.107.236.0/24 maxlen: 24
194.113.96.0/22 maxlen: 22
2a03:db80:4810::/48 maxlen: 48
2a03:db80:4814::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:dc:84:60:cf:9e:f0:25:d9:10:a8:ee:de:40:d3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jun 18 08:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9646e3feb1d0de874f07bc8c89a9a9b0df94667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:57:59:99:9d:10:8a:f1:67:73:ae:3f:a1:
e8:5e:8f:b6:fb:6a:c4:f7:8e:90:6f:11:d7:b7:11:
92:c5:91:2c:f4:f8:71:02:85:b9:cf:5e:5a:6c:8a:
38:38:e5:28:73:a8:49:c1:62:f2:01:e4:a6:d2:9d:
31:72:f2:a6:a1:d7:c5:da:8d:b3:11:d7:4f:fa:87:
31:d2:4a:8c:73:cd:27:1b:4a:72:f2:67:75:b7:78:
17:79:a0:af:47:f7:dd:e1:3b:b7:bd:c5:d8:a7:4c:
c3:9e:ec:84:4f:64:13:df:4d:58:4b:8f:1d:f8:d0:
04:ac:4c:ab:0e:08:02:9c:d7:2a:9d:f2:e3:89:f1:
60:8d:af:2b:ca:3f:9a:0b:b2:27:49:41:a0:6b:f5:
0d:29:68:e4:1d:2f:79:aa:e2:6e:cb:78:29:f3:1e:
77:6a:fd:d1:68:aa:a2:5d:bd:65:24:2e:0e:ee:d0:
ba:63:04:5c:b2:4d:93:39:92:d7:76:fd:4a:7c:4e:
fc:16:ed:7c:15:0c:f6:5c:a4:1c:44:10:ea:2f:74:
cf:5d:b9:34:93:81:9a:06:dc:89:52:96:e9:09:46:
6e:b1:5d:b6:cf:79:54:f8:29:5b:83:e9:52:cb:fb:
19:3b:2f:d6:59:8b:de:d5:11:51:d3:0b:6f:55:b2:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:E3:FE:B1:D0:DE:87:4F:07:BC:8C:89:A9:A9:B0:DF:94:66:7A
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/lkbj_rHQ3odPB7yMiampsN-UZno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.192.0-129.233.196.255
153.96.28.0-153.96.39.255
153.96.60.0/24
153.96.70.0-153.96.75.255
153.96.88.0/22
153.96.114.0/23
153.96.128.0/22
153.96.204.0-153.96.206.255
192.41.227.0/24
192.44.7.0/24
192.44.14.0/24
192.44.16.0/24
192.44.19.0/24
192.44.22.0/24
192.44.27.0/24
192.107.235.0-192.107.236.255
194.113.96.0/22
IPv6:
2a03:db80:4810::/48
2a03:db80:4814::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7c:d0:8f:0e:df:55:c1:c7:31:17:54:f3:07:75:dd:cb:b5:
ac:69:0d:83:be:c2:b8:a4:45:25:ed:14:fe:02:9d:f1:85:1d:
fa:26:cb:03:e9:0e:e1:68:04:a7:6a:0e:19:b2:e8:b1:21:23:
08:89:9f:94:93:e6:f6:74:3e:45:a3:f5:a1:17:3d:78:46:28:
f4:11:9e:49:c2:70:61:1a:80:b0:2f:d6:0b:05:73:e4:7e:06:
26:8f:40:d3:10:76:a2:b4:80:31:48:83:1e:f0:62:81:37:b6:
dc:cb:19:dd:73:f2:8c:8e:fa:57:b2:03:9d:30:0c:e8:49:ed:
6b:39:e0:63:93:d1:3d:a3:09:bf:ef:ad:19:d9:d3:ea:f0:4a:
02:3a:d6:24:39:dc:97:5b:72:13:84:c8:07:63:d5:b2:55:75:
fd:d2:9c:33:5e:84:3e:05:d1:49:f5:09:43:e7:3b:98:12:b8:
78:a2:f5:fb:ae:fb:95:88:a0:86:e5:7d:18:35:98:2f:08:b6:
37:dd:ef:1a:5f:1e:34:8a:9d:0c:13:62:78:6a:6f:1c:1c:59:
d4:5c:ef:2f:21:3c:dc:b3:22:1b:d7:c1:91:da:10:e7:35:15:
93:02:c6:9b:fa:02:af:e9:8b:5a:97:a2:19:4a:22:46:ef:38:
7d:0b:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:12 2026 by rpki-client