Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa
File: LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa (raw, json)
Hash identifier: CQgt++gkgy+WEbrupETBLg1kBxLwM/XThjq4nhpIKss=
Subject key identifier: 2C:5C:F3:8C:56:92:CF:A2:BF:2E:7D:62:22:63:A2:D0:61:2F:8E:5E
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 01A12CA72A3AD609E462593D614FF48DF02F
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa
Signing time: Sun 11 Oct 2026 20:28:35 +0000
ROA not before: Sun 11 Oct 2026 20:28:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206328
IP address blocks: 185.189.128.0/24 maxlen: 24
185.189.129.0/24 maxlen: 24
185.189.130.0/24 maxlen: 24
185.189.131.0/24 maxlen: 24
2a0b:e780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:a7:2a:3a:d6:09:e4:62:59:3d:61:4f:f4:8d:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Oct 11 20:28:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c5cf38c5692cfa2bf2e7d622263a2d0612f8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:e2:1a:bd:b0:1d:53:2c:5e:87:fa:8f:1c:
96:71:6c:70:a7:a2:53:c5:06:04:da:81:3f:43:72:
9b:79:3a:77:95:d5:3d:37:90:9a:a6:cc:f6:13:d2:
c7:06:db:04:17:7d:10:05:81:7b:49:df:bd:a7:e0:
c7:35:b2:96:a5:3f:46:a3:be:be:43:82:07:ce:aa:
9a:1f:af:a0:e4:0c:fa:57:34:9d:45:ac:0b:95:3b:
f2:7d:bf:28:34:f9:33:1f:5e:ce:51:20:76:b5:f1:
0b:00:0b:83:ae:f6:0f:0a:fc:79:73:73:32:20:43:
21:30:01:56:31:29:de:51:4a:c8:2c:e6:c7:9b:8d:
a2:2c:6f:6e:f3:2a:54:62:0a:00:b0:5d:28:94:a0:
49:38:4b:f9:c1:ee:4e:86:11:e0:7b:5d:86:2d:88:
99:cd:67:44:9b:ec:9b:2f:e8:6d:82:eb:d4:d3:35:
8a:28:14:31:bd:c3:56:c8:18:1b:36:de:17:fb:6c:
f2:7d:19:1f:bf:47:28:84:0c:bc:ff:a0:e8:5b:a9:
fe:72:ed:f8:82:de:09:0e:a9:fc:8c:a4:a5:56:06:
cc:7f:60:96:bb:dd:84:12:8e:7b:81:42:f6:c4:0a:
30:f4:ee:f7:6f:c1:ac:83:61:97:01:96:59:d8:2b:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:F3:8C:56:92:CF:A2:BF:2E:7D:62:22:63:A2:D0:61:2F:8E:5E
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/LFzzjFaSz6K_Ln1iImOi0GEvjl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.128.0/22
IPv6:
2a0b:e780::/29
Signature Algorithm: sha256WithRSAEncryption
55:58:bd:1d:d8:77:fc:a6:63:24:79:be:53:3a:33:f7:6e:31:
70:51:89:0b:41:a1:fa:5b:0b:f2:e0:a4:6b:7e:bb:58:bd:e2:
a0:f1:52:1e:21:4f:ae:2e:2b:f8:e5:ea:d3:43:00:6b:aa:72:
a7:f0:bb:6a:24:6f:ed:d2:8f:bc:1c:02:64:63:45:2a:c4:8a:
07:cc:ed:c4:48:b9:41:56:a7:b7:88:9f:3f:83:56:68:01:01:
a2:50:d6:e9:88:c9:f8:16:da:1e:db:a6:30:fd:6a:64:37:8b:
54:30:6c:71:53:7e:57:9d:47:26:c2:70:e1:85:38:f8:c1:51:
82:39:11:d0:65:bf:fd:74:21:cc:26:da:f1:58:d7:d7:93:5a:
6c:32:31:48:04:9a:87:05:1f:72:ea:db:f3:61:06:22:91:a1:
3f:dd:80:43:0e:17:0c:0b:af:42:6c:ee:5c:9d:2c:a9:72:db:
2d:21:65:20:bf:1b:74:00:da:ce:3b:0e:72:58:77:55:91:47:
93:b3:b1:68:d2:4e:7e:3c:2b:fe:54:10:ba:45:5c:4b:c6:9c:
98:0a:49:42:15:d9:d3:a2:d8:81:90:d2:47:25:4e:97:6e:b2:
e2:a4:bc:a9:1a:15:30:e1:67:97:ba:fa:aa:ad:15:42:13:e3:
af:e7:0a:da
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaEspyo61gnkYlk9YU/0jfAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjYxMDExMjAyODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzVjZjM4YzU2OTJjZmEyYmYyZTdkNjIyMjYzYTJkMDYxMmY4ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0XiGr2wHVMsXof6jxyWcWxwp6JT
xQYE2oE/Q3KbeTp3ldU9N5Capsz2E9LHBtsEF30QBYF7Sd+9p+DHNbKWpT9Go76+
Q4IHzqqaH6+g5Az6VzSdRawLlTvyfb8oNPkzH17OUSB2tfELAAuDrvYPCvx5c3My
IEMhMAFWMSneUUrILObHm42iLG9u8ypUYgoAsF0olKBJOEv5we5OhhHge12GLYiZ
zWdEm+ybL+htguvU0zWKKBQxvcNWyBgbNt4X+2zyfRkfv0cohAy8/6DoW6n+cu34
gt4JDqn8jKSlVgbMf2CWu92EEo57gUL2xAow9O73b8Gsg2GXAZZZ2CuPawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCxc84xWks+ivy59YiJjotBhL45eMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvTEZ6empGYVN6NktfTG4xaUltT2kwR0V2amw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub2AMA0E
AgACMAcDBQMqC+eAMA0GCSqGSIb3DQEBCwUAA4IBAQBVWL0d2Hf8pmMkeb5TOjP3
bjFwUYkLQaH6Wwvy4KRrfrtYveKg8VIeIU+uLiv45erTQwBrqnKn8LtqJG/t0o+8
HAJkY0UqxIoHzO3ESLlBVqe3iJ8/g1ZoAQGiUNbpiMn4Ftoe26Yw/WpkN4tUMGxx
U35XnUcmwnDhhTj4wVGCORHQZb/9dCHMJtrxWNfXk1psMjFIBJqHBR9y6tvzYQYi
kaE/3YBDDhcMC69CbO5cnSypctstIWUgvxt0ANrOOw5yWHdVkUeTs7Fo0k5+PCv+
VBC6RVxLxpyYCklCFdnTotiBkNJHJU6XbrLipLypGhUw4WeXuvqqrRVCE+Ov5wra
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:30 2026 by rpki-client