Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmt4Yvhq-t9ux0l-bsoDcbCWb-Y.roa
File: lmt4Yvhq-t9ux0l-bsoDcbCWb-Y.roa (raw, json)
Hash identifier: wYkOWV633CCLHeztwY5p5h4edJ2q6cOXlnj12y7+Qsw=
Subject key identifier: 96:6B:78:62:F8:6A:FA:DF:6E:C7:49:7E:6E:CA:03:71:B0:96:6F:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A6E9BD71D39617D93B0BC48A21B7A56B8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmt4Yvhq-t9ux0l-bsoDcbCWb-Y.roa
Signing time: Mon 10 Nov 2025 16:31:38 +0000
ROA not before: Mon 10 Nov 2025 16:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:9b:d7:1d:39:61:7d:93:b0:bc:48:a2:1b:7a:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 10 16:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=966b7862f86afadf6ec7497e6eca0371b0966fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:b9:f6:eb:b5:47:fc:aa:3b:1c:62:13:c1:
8b:55:c6:b7:e6:26:19:77:92:76:ff:09:65:d9:31:
c0:12:6b:a6:ce:aa:b4:74:bd:c2:e1:13:4a:b0:2a:
72:0f:d3:85:af:e8:52:bc:33:15:de:b8:e1:c8:f4:
d3:16:f6:b6:05:a1:0c:1d:61:55:45:96:5b:f1:84:
1b:c1:87:11:cf:d8:19:a3:a0:e6:74:24:0b:e0:1f:
ed:2a:74:25:3b:0f:a4:01:12:b5:f0:95:68:a8:b2:
7f:a3:e5:0c:e1:21:a0:f9:72:2e:0d:1a:0e:c9:17:
d8:4b:c3:df:11:1a:31:e0:73:14:d1:48:eb:54:87:
44:a0:57:98:a1:54:85:6f:df:9a:d9:b2:43:f8:5f:
f3:75:24:c0:90:dd:f6:7e:5e:0d:c3:83:6a:50:20:
83:f4:00:44:d7:e2:11:42:4a:2e:6d:90:68:b5:5c:
05:53:ba:79:b3:49:36:f2:bf:80:b4:d7:eb:1f:63:
ba:5c:55:17:04:fb:9f:fa:47:2b:1b:32:39:df:08:
1d:1b:a0:ef:8c:88:c7:93:b9:40:6a:07:4b:0a:ba:
c0:5c:07:74:c8:d0:5a:f9:98:49:c3:6c:d7:ad:9c:
12:12:84:0c:bd:b0:93:c1:e9:ab:12:ac:df:f4:bd:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:78:62:F8:6A:FA:DF:6E:C7:49:7E:6E:CA:03:71:B0:96:6F:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lmt4Yvhq-t9ux0l-bsoDcbCWb-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:19:98:1b:f2:64:5a:54:59:71:34:ea:96:31:dd:34:fb:fe:
7d:07:53:ad:b0:b4:24:67:2a:d0:c3:aa:d4:f6:1f:05:6a:bc:
bf:1d:58:40:1c:08:ef:fb:e7:9a:56:66:c3:35:63:d2:3b:50:
59:93:e3:c5:24:95:02:2e:9d:f2:3c:d0:34:1d:36:b9:aa:7a:
ed:1d:03:ef:d7:00:41:54:ab:b1:b6:60:6f:82:3a:1d:14:2b:
6e:22:0e:0b:1b:7c:7d:d0:fd:33:dc:3e:ed:1b:90:82:5e:27:
1d:82:d9:27:ac:08:15:13:d5:d2:a5:fe:c0:64:9f:a2:f3:05:
d1:9e:53:82:16:ae:4c:cc:1a:e6:c9:cc:86:a6:42:31:2b:69:
a4:db:4d:c6:c6:47:26:eb:5e:eb:bb:1e:92:f9:dd:7f:e9:d9:
db:4e:40:ce:65:a7:bf:af:65:ec:c3:59:ff:36:11:9a:d5:2f:
f5:56:4b:54:a0:bc:ff:b4:1b:e0:71:0b:7f:7b:85:38:87:60:
13:01:e6:68:e7:eb:5a:fa:9f:9c:3b:d5:72:0a:23:25:2e:83:
2e:9e:17:22:17:0b:47:cd:53:8e:20:1f:dd:10:b6:90:cb:f8:
58:d5:7a:39:f0:77:59:35:f4:92:18:81:94:89:f5:52:f9:f0:
a8:57:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 04:57:31 2025 by rpki-client