Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa
File: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (raw, json)
Hash identifier: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=
Subject key identifier: 2D:0D:EB:CF:7C:D5:A1:44:DE:77:93:80:3C:30:5B:AB:5B:40:43:3D
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019D05B4369AE83B4DAA34F9E16C14755EA7
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa
Signing time: Thu 19 Mar 2026 10:46:29 +0000
ROA not before: Thu 19 Mar 2026 10:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212165
IP address blocks: 45.87.245.0/24 maxlen: 24
45.87.246.0/24 maxlen: 24
45.87.247.0/24 maxlen: 24
91.230.95.0/24 maxlen: 24
178.159.36.0/24 maxlen: 24
185.224.212.0/24 maxlen: 24
195.245.249.0/24 maxlen: 24
2a10:9680::/32 maxlen: 32
2a10:9684::/32 maxlen: 32
2a10:9685::/32 maxlen: 32
2a11:e140::/32 maxlen: 32
2a12:7f40::/29 maxlen: 29
2a12:92c0::/29 maxlen: 29
2a12:b3c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:b4:36:9a:e8:3b:4d:aa:34:f9:e1:6c:14:75:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 19 10:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d0debcf7cd5a144de7793803c305bab5b40433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:54:59:e4:92:5d:98:88:dc:47:b3:0f:9c:
fa:60:4e:02:23:a0:6d:da:aa:6b:2b:cc:b2:bc:26:
56:f1:97:fb:1f:d5:f3:a9:0f:1a:93:ef:de:73:27:
1c:29:b7:e3:df:59:f3:87:ad:0a:f9:cd:34:40:7a:
d8:98:16:75:f1:d9:04:4b:73:75:11:93:8c:e6:c9:
f3:de:82:49:a2:1d:62:bd:56:a5:d9:53:c6:5b:23:
0d:ce:20:5b:82:b1:b5:13:46:42:67:62:84:e1:84:
e6:d0:5e:f1:f0:87:87:fb:c3:94:d6:fe:71:42:1a:
cd:d0:ac:ef:e2:39:1d:43:e5:6c:37:82:57:78:11:
c4:8e:12:e4:e8:3d:28:10:ad:af:67:4a:d5:f8:68:
b6:cb:61:a0:86:2d:3e:8b:ae:20:8b:84:8f:b2:3e:
78:dc:b6:5d:3a:da:7a:81:1f:23:3a:0e:14:94:36:
30:37:db:f3:2a:e1:97:f8:05:f2:53:72:5d:a1:2e:
fb:3b:7d:54:92:5d:02:54:10:82:3f:15:18:b3:60:
58:08:ef:23:36:b4:86:be:a0:7d:e1:4c:b5:b4:44:
8d:16:20:82:a8:23:31:52:8d:fc:1a:df:cb:c3:5b:
20:f6:78:44:56:72:88:4b:6e:3b:2e:dd:51:f4:36:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:EB:CF:7C:D5:A1:44:DE:77:93:80:3C:30:5B:AB:5B:40:43:3D
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.245.0-45.87.247.255
91.230.95.0/24
178.159.36.0/24
185.224.212.0/24
195.245.249.0/24
IPv6:
2a10:9680::/32
2a10:9684::/31
2a11:e140::/32
2a12:7f40::/29
2a12:92c0::/29
2a12:b3c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
49:7f:f9:00:a6:7e:af:56:26:dd:57:c0:34:c5:22:74:76:b9:
db:9d:ee:eb:11:38:df:7c:9b:1f:67:b4:ac:fe:fe:38:ff:6e:
64:4b:8c:db:ac:63:6b:80:cb:f3:80:a6:64:f9:f8:9f:6e:34:
fe:7a:32:e7:35:19:f3:51:6d:ad:84:a6:97:b3:17:99:de:1a:
52:06:84:15:f4:0a:95:ea:67:39:3b:f3:56:6e:52:9f:21:e5:
0a:a0:f3:fc:47:07:98:41:12:43:60:a2:0f:6f:b1:9f:ce:25:
1b:08:70:ba:34:55:1e:73:75:d2:fd:af:5a:a0:7c:16:a3:d8:
08:4a:52:58:e0:d0:2c:51:e6:f8:de:51:aa:47:09:39:6e:18:
98:55:73:af:c7:f5:c1:e6:cd:2b:83:dd:48:bd:34:3a:18:54:
c5:2b:2b:ea:81:4d:20:82:d5:f4:b8:ac:06:89:15:bc:ab:a3:
8e:01:40:66:06:fb:d8:89:94:9c:47:ae:02:34:10:a4:2c:e3:
61:91:40:39:9b:06:4a:88:ed:ef:67:a1:26:fb:91:1d:ed:96:
ae:23:c2:9b:0a:1e:9f:11:44:67:64:f7:bb:cb:19:db:ca:1a:
45:34:67:5a:f5:1c:b4:08:aa:b9:87:18:8f:d5:db:1c:e3:3b:
f6:2b:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:38:29 2026 by rpki-client