Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Lpu_4CJjjRoRpBzZuN-ljfAmj3g.roa
File: Lpu_4CJjjRoRpBzZuN-ljfAmj3g.roa (raw, json)
Hash identifier: LSyaosWcUjzb0ZpO921H3XJwm8c6SUFJDG48MYaBQZU=
Subject key identifier: 2E:9B:BF:E0:22:63:8D:1A:11:A4:1C:D9:B8:DF:A5:8D:F0:26:8F:78
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 01A1688D020E279FA4A08D61D9873B6176F5
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Lpu_4CJjjRoRpBzZuN-ljfAmj3g.roa
Signing time: Fri 23 Oct 2026 11:37:13 +0000
ROA not before: Fri 23 Oct 2026 11:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200137
IP address blocks: 91.210.154.0/24 maxlen: 24
185.84.30.0/23 maxlen: 23
2a04:e100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:8d:02:0e:27:9f:a4:a0:8d:61:d9:87:3b:61:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Oct 23 11:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e9bbfe022638d1a11a41cd9b8dfa58df0268f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:fa:87:48:81:1c:d1:25:e5:cf:26:ac:0c:
fc:35:4f:8c:6b:bf:ff:6b:6a:7d:5a:8f:af:a0:d0:
fc:34:be:8b:4d:c4:5b:19:af:a5:01:38:20:fd:5f:
02:f8:b8:aa:11:12:bc:92:44:c6:b0:34:cb:d0:df:
9a:1e:0c:f8:bf:9b:62:8b:b9:d3:75:50:6a:8d:24:
25:96:4a:59:1d:e8:6e:71:c8:87:f5:26:a9:14:15:
d6:35:e2:e2:c3:8b:47:b7:c0:0a:e1:44:ae:89:da:
b8:b4:2b:cb:7a:c2:ef:a1:66:00:99:8b:00:f1:6b:
65:7f:09:ad:dc:15:06:c2:55:2b:2b:f1:a5:5a:ec:
be:5c:87:f0:92:83:c0:31:2f:92:d6:47:bd:f8:0b:
bc:0b:72:66:48:47:bc:d5:13:eb:2e:6a:51:fa:05:
4a:6a:f0:4c:6e:08:89:3a:54:57:a0:db:d9:43:47:
34:05:0c:2b:37:e3:8d:1b:4a:00:7b:b4:66:37:6c:
33:7c:fc:ae:bc:39:31:92:ed:5c:12:aa:32:9c:f1:
8e:c1:63:a8:a9:70:9e:c8:47:17:01:8a:a8:d3:96:
d8:a3:e8:18:2a:2e:80:d2:f2:1a:6b:65:e3:dd:47:
d8:ed:2b:3b:2b:4e:f8:bc:24:6b:14:29:25:bc:ba:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:BF:E0:22:63:8D:1A:11:A4:1C:D9:B8:DF:A5:8D:F0:26:8F:78
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Lpu_4CJjjRoRpBzZuN-ljfAmj3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.154.0/24
185.84.30.0/23
IPv6:
2a04:e100::/29
Signature Algorithm: sha256WithRSAEncryption
39:58:45:ad:47:c5:18:12:00:01:70:bb:26:da:db:c4:b1:31:
3f:4c:1a:b5:80:60:a5:0f:78:71:d5:f1:77:0f:38:87:f4:d2:
86:d6:80:e1:2c:d1:f7:1d:78:4b:3b:5f:e1:24:32:7a:d4:07:
24:61:41:2d:8c:eb:1e:2f:84:d1:bd:66:b7:2b:27:18:61:a2:
3a:a6:10:e6:f1:8d:6f:e2:1e:6c:41:0e:8a:7a:55:1a:13:2b:
ec:c7:b2:c0:a1:0c:d6:6e:fd:d0:79:b8:21:92:ae:a3:a3:3f:
c3:85:fb:21:9e:42:ca:5a:e2:8f:07:b7:eb:f6:c7:9f:89:3e:
b7:24:c4:98:2f:cb:33:6d:ad:d1:0a:b9:38:ee:0f:bb:91:07:
57:b9:b3:d0:8e:79:d5:57:42:92:e0:02:01:b9:11:51:53:73:
b8:65:89:ff:27:57:61:05:53:a8:39:b3:ad:c8:03:01:23:47:
fb:d2:53:83:49:7c:62:02:4c:4e:0a:49:62:7b:ce:1e:72:52:
0c:85:68:a6:e1:75:2d:60:6d:ea:9d:44:c6:87:a7:81:82:b8:
a1:8d:01:c4:ee:0d:3a:0c:3f:2a:6e:1f:ce:6f:2b:ea:6f:28:
3e:4d:f5:02:22:ab:cd:af:55:4f:76:9c:81:57:4b:e8:fa:24:
b3:cf:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:41:42 2026 by rpki-client