Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lvs4svHaKeZjhXOn1dk-UUWs6LQ.roa
File: lvs4svHaKeZjhXOn1dk-UUWs6LQ.roa (raw, json)
Hash identifier: YSpgVZ5Q76ZKUaexoC6rE7TUlV8BkUSqUs8YhxdYDYs=
Subject key identifier: 96:FB:38:B2:F1:DA:29:E6:63:85:73:A7:D5:D9:3E:51:45:AC:E8:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0C3ED5D823024A62FFE950D42C7A4AD27
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lvs4svHaKeZjhXOn1dk-UUWs6LQ.roa
Signing time: Mon 21 Sep 2026 12:25:08 +0000
ROA not before: Mon 21 Sep 2026 12:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218688
IP address blocks: 193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:ed:5d:82:30:24:a6:2f:fe:95:0d:42:c7:a4:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 21 12:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96fb38b2f1da29e6638573a7d5d93e5145ace8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:a6:01:cc:87:ee:b7:19:d0:b8:71:f7:51:
de:f7:5d:e9:7e:ca:fa:57:61:d1:fa:f4:da:d7:47:
82:77:98:68:ad:df:d6:1e:d7:77:b8:db:b4:42:e4:
da:5b:89:05:f7:1f:21:f8:fd:f4:15:63:8e:2a:7e:
7b:b3:3f:e1:1d:38:19:98:3f:54:3b:a8:f7:0b:f3:
14:05:fa:48:5c:b2:94:54:76:4d:61:d8:fa:41:2c:
a3:83:22:90:f1:cf:0a:1c:ca:b2:e2:f4:4c:6c:99:
3d:c2:fd:5e:e1:34:b8:bf:99:0b:d2:f0:34:56:e8:
57:ff:e6:da:a9:7c:7a:d2:dc:e1:f6:72:42:5c:2f:
f9:16:37:3f:d2:5c:6c:d7:7d:8d:f4:43:a1:7b:13:
e7:09:57:a7:a8:a1:ce:93:02:73:58:38:d3:ff:b6:
0a:0c:32:7f:d1:2d:de:ca:85:98:d1:7d:4a:d0:16:
cb:fb:df:7e:ab:d2:5d:23:64:4d:85:94:48:a1:05:
3b:d6:20:5b:c2:71:87:c5:c7:ce:84:e6:46:43:68:
bb:e8:c8:48:62:c6:7d:03:54:c2:6d:e7:42:1a:b6:
f9:04:7a:cb:90:8c:d4:f6:91:d1:15:9e:33:5f:d7:
63:df:71:92:bf:f3:b7:f3:99:2c:5e:ee:b4:81:8b:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:38:B2:F1:DA:29:E6:63:85:73:A7:D5:D9:3E:51:45:AC:E8:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lvs4svHaKeZjhXOn1dk-UUWs6LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.56.0/23
Signature Algorithm: sha256WithRSAEncryption
70:2e:cc:31:da:1b:73:04:38:80:ea:46:e9:35:d7:00:05:8a:
8f:3c:15:9f:fd:66:83:4f:71:aa:7e:13:c7:f9:5f:24:0f:3b:
b5:f7:f7:11:dd:1b:f9:4b:f3:15:91:8f:ae:9f:30:6b:b2:30:
45:b1:fd:5e:91:36:b3:68:3e:00:00:20:53:9a:3f:18:c7:a0:
1f:8d:87:81:e6:1d:3a:4b:9d:cd:11:26:87:aa:61:4a:19:de:
89:2e:5e:e4:d9:0e:89:07:db:c7:fd:d2:63:ff:51:ee:6d:3e:
0a:18:7a:b1:de:6b:8b:b2:93:48:a6:b1:05:a0:4f:7b:e0:57:
00:b6:fe:bd:c5:23:6e:20:43:b4:ac:f5:cf:fa:be:be:3f:ba:
92:68:5a:57:eb:b6:52:88:ea:0e:f1:f8:8e:c5:a2:db:67:6c:
33:ee:0d:43:52:47:5b:17:73:4f:c9:c6:2f:56:d1:f0:f5:44:
4d:88:f4:f7:64:a9:30:22:2b:41:c1:8d:c9:ab:4c:b1:a0:15:
63:5e:1b:c4:09:ba:6c:f9:1b:41:8d:b3:be:f2:b1:24:e6:8d:
da:00:cc:ff:8e:9e:8d:bf:f0:ed:e9:38:d7:37:93:bc:23:c6:
13:cd:53:bd:19:cd:00:52:ff:ab:b2:a8:b9:a9:62:68:31:ce:
7d:16:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:22 2026 by rpki-client