Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LMUpkbtaSA-4VTqrtYB0Gj2xa48.roa
File: LMUpkbtaSA-4VTqrtYB0Gj2xa48.roa (raw, json)
Hash identifier: UQjg80FG5W41ylMRAuGx2TCdLv2n3wi4sATzlIkPWpo=
Subject key identifier: 2C:C5:29:91:BB:5A:48:0F:B8:55:3A:AB:B5:80:74:1A:3D:B1:6B:8F
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA1F3C21F9CF25AC8A203D9647D5C5C06
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LMUpkbtaSA-4VTqrtYB0Gj2xa48.roa
Signing time: Mon 27 Jul 2026 05:02:14 +0000
ROA not before: Mon 27 Jul 2026 05:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 89.30.173.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.245.0/24 maxlen: 24
213.189.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f3:c2:1f:9c:f2:5a:c8:a2:03:d9:64:7d:5c:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 27 05:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cc52991bb5a480fb8553aabb580741a3db16b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:1f:36:a8:17:94:50:7b:20:f8:c4:ba:92:
cf:e3:f7:e5:15:8d:6a:22:d3:1c:49:06:88:74:36:
23:db:75:46:05:a8:f6:53:4e:bb:7f:7c:0a:59:2a:
a5:b0:24:11:f4:2f:a3:23:fc:55:87:67:eb:37:56:
81:05:9a:e5:d1:41:fe:ab:bc:b4:84:5c:6f:f5:2e:
21:3d:ae:64:95:a5:a1:56:6e:60:a8:0c:5f:37:31:
a5:01:d4:0b:1d:36:70:75:f5:05:64:21:be:cd:30:
54:9e:d3:2a:9b:e5:78:8d:6b:b4:ac:25:b2:15:5c:
36:2d:c1:78:a9:19:69:58:46:37:26:e4:9b:02:45:
5b:72:8e:fb:6d:5c:f4:a8:7c:73:f1:24:8b:92:0d:
ac:5d:38:0e:01:20:8a:2b:c4:2f:aa:37:41:03:c3:
b9:92:b5:96:3c:62:c4:db:fb:4f:44:b0:d5:64:67:
03:90:f7:af:dd:8c:80:21:14:ce:c0:62:b1:9b:1d:
dc:70:ef:f9:b8:5c:d2:0f:c5:c3:95:7f:4b:cb:f8:
cc:c3:a2:42:88:75:f6:51:31:fd:79:99:54:18:0e:
ee:09:12:e5:df:95:ae:95:32:cc:a5:49:15:af:f1:
7b:4c:5f:37:00:22:eb:95:87:72:1c:36:4d:18:81:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:29:91:BB:5A:48:0F:B8:55:3A:AB:B5:80:74:1A:3D:B1:6B:8F
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LMUpkbtaSA-4VTqrtYB0Gj2xa48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.173.0/24
89.30.204.0/24
89.30.245.0/24
213.189.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3f:79:e2:d9:7e:77:dd:4e:ec:f6:0a:92:eb:cc:29:6b:a2:
79:96:26:ef:52:5e:5b:1c:a3:92:47:ad:e5:de:ab:ff:3d:de:
eb:84:9c:0b:50:f7:79:6d:23:81:93:b5:76:14:ad:6c:4b:c2:
38:96:de:1a:b7:a0:14:98:b7:cc:69:78:ae:71:ed:13:b1:f7:
32:1c:93:f6:49:0d:63:4b:9c:29:af:43:3a:9b:95:8d:94:8e:
57:50:16:8e:ff:a8:1d:c4:0d:97:22:c4:ac:0d:e7:39:cb:41:
93:09:3d:52:7b:d0:48:01:d4:d8:35:18:c0:f2:d1:16:7f:d3:
e3:b9:4a:5b:77:b7:cc:73:c1:0b:d2:5b:31:1a:4d:9d:26:b6:
87:42:0b:85:7a:40:ca:db:ae:ab:ee:f7:0b:64:ec:12:cb:a8:
14:9d:30:d1:ae:66:5e:d3:74:01:b3:17:0f:a2:f4:3a:87:29:
03:d9:94:0a:33:bb:ae:f5:0d:aa:e2:de:08:d6:95:80:9d:b7:
4d:2c:7b:77:fa:8d:f9:e1:57:f0:57:8a:45:0b:bc:a3:3b:80:
ff:69:04:be:73:46:c7:b2:21:95:1a:55:37:55:14:a7:89:b7:
ee:8f:30:d6:8b:2a:e2:8a:9d:23:2d:7a:6e:60:82:16:be:44:
ba:9d:8b:0c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+h88IfnPJayKID2WR9XFwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzI3MDUwMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2M1Mjk5MWJiNWE0ODBmYjg1NTNhYWJiNTgwNzQxYTNkYjE2YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuucfNqgXlFB7IPjEupLP4/flFY1q
ItMcSQaIdDYj23VGBaj2U067f3wKWSqlsCQR9C+jI/xVh2frN1aBBZrl0UH+q7y0
hFxv9S4hPa5klaWhVm5gqAxfNzGlAdQLHTZwdfUFZCG+zTBUntMqm+V4jWu0rCWy
FVw2LcF4qRlpWEY3JuSbAkVbco77bVz0qHxz8SSLkg2sXTgOASCKK8QvqjdBA8O5
krWWPGLE2/tPRLDVZGcDkPev3YyAIRTOwGKxmx3ccO/5uFzSD8XDlX9Ly/jMw6JC
iHX2UTH9eZlUGA7uCRLl35WulTLMpUkVr/F7TF83ACLrlYdyHDZNGIER4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCzFKZG7WkgPuFU6q7WAdBo9sWuPMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvTE1VcGtidGFTQS00VlRxcnRZQjBHajJ4YTQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWR6tAwQA
WR7MAwQAWR71AwQA1b0TMA0GCSqGSIb3DQEBCwUAA4IBAQCLP3ni2X533U7s9gqS
68wpa6J5libvUl5bHKOSR63l3qv/Pd7rhJwLUPd5bSOBk7V2FK1sS8I4lt4at6AU
mLfMaXiuce0TsfcyHJP2SQ1jS5wpr0M6m5WNlI5XUBaO/6gdxA2XIsSsDec5y0GT
CT1Se9BIAdTYNRjA8tEWf9PjuUpbd7fMc8EL0lsxGk2dJraHQguFekDK266r7vcL
ZOwSy6gUnTDRrmZe03QBsxcPovQ6hykD2ZQKM7uu9Q2q4t4I1pWAnbdNLHt3+o35
4VfwV4pFC7yjO4D/aQS+c0bHsiGVGlU3VRSnibfujzDWiyriip0jLXpuYIIWvkS6
nYsM
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:49 2026 by rpki-client