Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/LXQjHzeIEtAnNTCnTqX-LuMg4LM.roa
File: LXQjHzeIEtAnNTCnTqX-LuMg4LM.roa (raw, json)
Hash identifier: yhnz3LWej2FHw89JjP62vsOqeBVajdgcdmggLBfvZvY=
Subject key identifier: 2D:74:23:1F:37:88:12:D0:27:35:30:A7:4E:A5:FE:2E:E3:20:E0:B3
Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Certificate serial: 019B7D5B6F2EA4F1D7EAE703CACD90EDC8C1
Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/LXQjHzeIEtAnNTCnTqX-LuMg4LM.roa
Signing time: Fri 02 Jan 2026 06:18:22 +0000
ROA not before: Fri 02 Jan 2026 06:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210449
IP address blocks: 146.19.224.0/24 maxlen: 24
178.211.141.0/24 maxlen: 24
2a12:1080::/29 maxlen: 29
2a13:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:6f:2e:a4:f1:d7:ea:e7:03:ca:cd:90:ed:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Validity
Not Before: Jan 2 06:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d74231f378812d0273530a74ea5fe2ee320e0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:b4:8a:e6:bd:41:0e:02:46:9d:75:8e:c5:
e2:de:21:be:ac:73:2e:93:cc:ca:b8:a4:7d:0c:96:
c9:7e:d9:e4:2e:7b:ed:26:22:e5:3e:4b:17:b8:ae:
80:55:19:e8:20:b6:a1:64:98:b8:19:50:c3:9b:98:
78:3f:fd:90:45:50:2a:6c:c7:4d:bb:f5:f7:27:d7:
d7:99:24:86:6a:05:bd:3c:7f:1b:4f:c6:65:d3:be:
7e:9c:b7:4a:92:b8:ba:07:70:02:45:c3:6f:ec:2d:
84:14:ae:96:4d:25:00:59:80:ef:70:3e:83:fe:77:
29:c2:a1:16:69:18:80:f6:07:2d:f3:7f:eb:d9:e8:
30:d8:ad:ee:36:07:ec:7b:07:3c:86:8c:56:14:a8:
4b:74:b2:5c:e1:83:8e:0a:5b:9b:f0:52:ca:01:41:
e3:dd:56:6a:10:24:bc:0a:8e:df:c2:26:b0:f9:ab:
ff:02:45:36:b5:58:ce:66:30:02:e2:73:9e:c5:27:
21:94:fc:af:27:0c:bc:17:2a:f3:76:07:f9:05:11:
ef:66:0d:db:48:31:31:f1:49:c7:7e:be:1f:03:4d:
47:54:42:44:34:c4:28:bf:7a:f7:dd:fe:54:ea:bd:
d6:53:19:b7:a2:03:24:51:6a:96:75:44:e4:a0:af:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:23:1F:37:88:12:D0:27:35:30:A7:4E:A5:FE:2E:E3:20:E0:B3
X509v3 Authority Key Identifier:
keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/LXQjHzeIEtAnNTCnTqX-LuMg4LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.224.0/24
178.211.141.0/24
IPv6:
2a12:1080::/29
2a13:7600::/29
Signature Algorithm: sha256WithRSAEncryption
5f:a2:32:5d:9b:15:ac:0d:1d:6e:65:04:4e:d5:3e:6b:c3:b0:
d9:9c:35:32:ed:04:95:db:13:04:b1:68:cf:e5:92:d8:bb:0e:
2d:07:c4:a8:7a:44:df:09:fc:2b:29:70:f1:d3:af:2e:4f:87:
71:93:35:cf:1a:ff:28:fb:70:5e:95:25:18:4c:50:e7:50:1b:
78:f5:99:34:ca:9f:ab:db:d5:d8:7a:6b:c4:86:81:8a:51:e2:
30:b5:e8:a8:31:e5:de:22:00:8c:8d:28:9c:ef:8c:7e:d7:ca:
b6:a0:c0:6d:cd:c9:2b:b9:7e:ba:d1:e0:e1:d0:24:42:f7:ce:
5b:8c:a7:63:1c:8e:f6:94:62:68:04:2e:40:d5:5e:43:d5:7a:
57:64:ad:44:0f:2d:4f:e4:8a:fb:85:02:de:38:10:1c:8e:43:
c7:63:93:a7:60:91:77:d7:71:fd:35:cb:fa:a6:b8:b7:35:9d:
ae:69:bc:cb:38:a0:20:90:13:4c:59:24:75:5e:cd:6e:c4:1f:
24:76:55:7a:a3:de:c2:d2:3e:20:f5:b6:96:1c:ff:34:15:3f:
f8:d5:7a:db:72:62:6f:3e:70:03:ce:fc:c2:ea:62:22:23:f8:
32:a2:82:7f:71:ce:29:63:fb:a0:22:32:4c:79:fb:33:50:e2:
81:a8:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:02:07 2026 by rpki-client