Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LtmQvCeXngTWhjl4vrk7lBmMAAY.roa
File: LtmQvCeXngTWhjl4vrk7lBmMAAY.roa (raw, json)
Hash identifier: 07LJKgW+ToL6JKQE9CSTTGnB271/hUwLN/v0haLSQsM=
Subject key identifier: 2E:D9:90:BC:27:97:9E:04:D6:86:39:78:BE:B9:3B:94:19:8C:00:06
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A013AA1245F0BDA12600F5113DDC4691DD
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LtmQvCeXngTWhjl4vrk7lBmMAAY.roa
Signing time: Tue 18 Aug 2026 06:58:28 +0000
ROA not before: Tue 18 Aug 2026 06:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 85.239.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:aa:12:45:f0:bd:a1:26:00:f5:11:3d:dc:46:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 18 06:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed990bc27979e04d6863978beb93b94198c0006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:c9:d8:19:2a:7f:6e:d5:c1:d2:30:3b:db:
66:01:c5:9e:3c:3f:59:1e:53:b8:9a:9e:c6:79:98:
81:8e:f8:48:53:b3:db:23:12:8c:bc:bf:02:01:ab:
b9:d4:a4:64:ed:08:01:df:39:07:5a:63:86:78:fb:
4a:58:55:20:76:38:3c:ea:b8:d2:54:29:82:da:00:
68:59:3e:09:d1:65:33:88:86:ac:cd:59:c8:05:ac:
3f:41:45:b0:bc:ce:f0:f0:3c:4d:c1:82:4e:dc:0e:
2d:a3:16:09:05:a7:f3:ba:7a:42:48:ab:2d:1a:13:
d6:24:9d:01:c7:29:ee:47:d6:59:33:00:fb:15:8d:
bb:70:ff:1b:7e:50:7b:ab:2f:ab:ef:f2:8e:ac:de:
fe:96:5c:ce:66:d4:59:e4:21:d4:f7:89:1e:37:8f:
a9:be:a7:2c:8b:dd:14:80:ec:f6:6c:19:30:b5:45:
26:5f:50:fa:18:a5:c9:21:d5:a0:f1:f6:93:bb:3d:
d1:fe:da:fd:8b:57:b2:9d:8a:24:e5:b4:b4:d1:c1:
af:c1:10:d9:b4:d6:99:fa:78:46:a6:6b:59:d7:ef:
b1:31:72:eb:d3:6f:80:be:42:98:b6:7e:4b:88:fd:
05:8e:5b:6c:a7:c7:5c:08:75:2e:02:58:1a:e9:77:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:90:BC:27:97:9E:04:D6:86:39:78:BE:B9:3B:94:19:8C:00:06
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LtmQvCeXngTWhjl4vrk7lBmMAAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8b:88:4d:d1:8d:35:72:15:a3:d7:e8:d9:a7:81:94:8a:7a:
13:d5:c8:53:7d:99:5e:1a:75:37:92:a6:88:1d:04:9d:c3:10:
74:d9:d1:d4:1a:77:05:56:b3:c0:b8:f3:92:9c:dd:d1:0b:a0:
ea:ec:1f:e8:52:91:d7:98:87:d4:64:08:31:13:25:12:dc:15:
b1:fa:b4:65:62:a7:76:a9:d6:53:0f:61:4c:e6:0a:c1:be:c8:
c0:b2:d7:1b:ef:c3:b4:ca:e8:1d:4e:18:14:fe:b9:34:67:44:
45:5c:32:85:e4:04:1d:83:8e:b0:df:13:73:0f:84:4e:e5:df:
49:a7:4e:55:cf:1e:0a:77:e8:c9:81:68:25:88:0c:6e:5f:68:
e9:f7:d5:aa:b1:fe:94:13:53:94:3f:c7:8a:bb:a4:44:42:dc:
b2:46:7c:2c:48:c0:fc:dd:3b:a8:2c:dd:41:96:fa:98:06:78:
43:b0:96:70:56:7f:53:bf:02:8a:27:e8:32:d8:5a:04:1a:25:
12:af:78:40:34:31:b0:ab:f3:80:c4:ee:30:4b:61:cc:aa:4c:
96:32:d8:2c:81:49:c8:ae:b3:a4:8c:4b:cc:c1:04:54:13:9e:
54:42:0d:0d:ca:ce:b4:b5:0b:9e:87:e9:52:92:9a:fe:f0:4b:
11:a0:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:29 2026 by rpki-client