Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/LUBe_FPe1Ds_x9xKtOJcPT7TO7w.roa
File: LUBe_FPe1Ds_x9xKtOJcPT7TO7w.roa (raw, json)
Hash identifier: HULmBbfxQT7lgWRIuvGImVwSPf7gRellTot7MQ2P7lQ=
Subject key identifier: 2D:40:5E:FC:53:DE:D4:3B:3F:C7:DC:4A:B4:E2:5C:3D:3E:D3:3B:BC
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A22E6364BDC7E69F20137A43DA67D7
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/LUBe_FPe1Ds_x9xKtOJcPT7TO7w.roa
Signing time: Thu 01 Oct 2026 08:43:38 +0000
ROA not before: Thu 01 Oct 2026 08:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213439
IP address blocks: 91.82.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a2:2e:63:64:bd:c7:e6:9f:20:13:7a:43:da:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d405efc53ded43b3fc7dc4ab4e25c3d3ed33bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:09:3c:81:4e:2a:57:85:97:b7:9c:e8:b0:
f4:17:7e:fd:31:d3:63:da:39:2a:84:05:52:05:77:
22:11:ae:d7:e6:53:5b:c2:47:79:bb:e2:b5:c0:cf:
77:97:86:db:77:3a:77:74:53:d2:a5:9c:9b:88:84:
96:fa:5b:19:28:0f:b4:9b:a0:5f:9c:b2:8c:a7:43:
5f:82:d8:f6:60:a2:12:fe:12:df:a6:db:a3:29:da:
6a:c1:57:76:c8:ce:5e:f4:de:e7:64:6a:ed:2e:aa:
b0:8b:9a:93:3a:9a:96:79:df:7d:05:e5:96:f3:da:
a3:d0:23:75:ca:46:a0:cb:ed:d9:ea:f4:67:24:43:
76:60:6c:29:b5:b8:a3:d9:45:32:4d:e8:18:59:42:
86:6b:27:40:24:9a:a8:be:2f:5a:14:1f:33:e9:31:
4c:7a:23:98:91:02:5a:74:ce:45:95:19:08:d0:c9:
5d:27:d9:2e:3a:80:1c:57:2c:ff:74:63:66:d9:20:
71:97:c9:0e:92:b7:db:03:2a:2a:cb:96:b4:c1:cf:
ae:48:1c:1d:c2:f2:cd:29:91:12:82:1b:f6:16:c4:
b5:b4:c6:33:88:c1:f2:b6:3f:55:d4:36:14:68:1c:
7d:64:05:c3:3f:93:50:aa:fa:9d:85:7d:22:04:4b:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:5E:FC:53:DE:D4:3B:3F:C7:DC:4A:B4:E2:5C:3D:3E:D3:3B:BC
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/LUBe_FPe1Ds_x9xKtOJcPT7TO7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.82.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:df:58:86:48:4e:78:ba:9f:01:11:8a:13:3c:81:ea:55:ff:
23:df:a5:88:9d:3b:3e:ef:24:3b:8c:10:da:f4:79:af:03:33:
82:4e:34:2b:f7:53:a1:41:c2:f0:26:68:92:ec:1d:dc:b3:91:
22:a0:1a:39:41:9c:09:0e:2a:66:65:71:7b:13:fb:a2:48:40:
16:eb:6d:b8:04:30:b6:dd:66:42:23:2d:d0:c3:f5:aa:de:01:
4c:2e:07:c5:43:5e:d7:05:ac:66:48:35:c4:72:6f:ce:75:62:
cf:58:67:e0:05:a9:22:14:17:05:3f:ba:66:0a:c1:9c:b2:41:
33:35:ef:d8:1c:19:dc:c1:2e:21:8d:4d:a8:58:8e:c1:71:43:
9e:54:42:05:17:f0:58:d1:e1:51:a8:a0:6d:15:0f:31:85:82:
6d:62:94:72:2d:e0:56:4e:c3:da:7a:02:40:21:03:bb:ef:6b:
c8:9d:8f:14:c1:11:2a:e6:cb:a3:02:86:8b:3b:3c:f8:47:96:
0b:8e:1e:df:4e:0e:67:42:e9:58:7f:68:65:50:91:10:11:5a:
f0:ba:77:1c:8a:28:a8:ae:c8:ff:af:cf:53:a5:20:b7:eb:98:
be:37:ab:d4:07:4a:30:8b:6f:4b:94:69:d2:cd:86:d8:4f:27:
c5:c8:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:56 2026 by rpki-client