Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LjY-t72m1MNYhSVFqsDzcUpS9Ew.roa
File: LjY-t72m1MNYhSVFqsDzcUpS9Ew.roa (raw, json)
Hash identifier: pKCAkeMdNiokjlFkpdSzkKqDy6aQ7krxBpOM7Co8c1I=
Subject key identifier: 2E:36:3E:B7:BD:A6:D4:C3:58:85:25:45:AA:C0:F3:71:4A:52:F4:4C
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A058797FB507EF9400C25799DD34612618
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LjY-t72m1MNYhSVFqsDzcUpS9Ew.roa
Signing time: Mon 31 Aug 2026 15:39:12 +0000
ROA not before: Mon 31 Aug 2026 15:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200081
IP address blocks: 45.140.166.0/24 maxlen: 24
2a0e:4001:1000::/36 maxlen: 36
2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:79:7f:b5:07:ef:94:00:c2:57:99:dd:34:61:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 31 15:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e363eb7bda6d4c358852545aac0f3714a52f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:d7:a5:13:92:77:41:0b:c1:d6:1e:da:b3:
07:7a:4f:78:1d:15:55:66:8c:ee:38:e0:ae:40:76:
cc:c2:8c:ce:b2:b4:e2:34:b2:f9:0a:e1:62:db:0c:
0f:d2:9b:5f:4b:d0:40:99:5e:f4:b4:66:e5:65:ba:
0b:ed:e7:b5:cc:a6:50:12:20:33:7b:a6:f9:ab:f8:
49:fe:48:00:13:07:62:04:72:b0:23:37:3e:68:db:
6b:fb:e2:11:9b:be:f5:0e:bd:fe:67:f7:ae:a7:af:
9f:e7:c0:f6:85:4a:e8:3a:00:ff:49:8f:47:67:a9:
23:de:4e:3e:50:22:d5:45:b5:f1:cb:c0:12:39:2a:
bc:6e:75:ec:b6:dc:96:82:c4:2f:29:fa:61:f9:1f:
f8:dc:ce:79:43:d2:e5:c8:ef:95:bb:c2:6d:fa:be:
a6:13:16:a8:97:4c:0b:43:e7:9e:76:53:3d:31:e4:
a5:59:bd:2e:c6:ae:bf:6f:ff:b5:c1:a6:5e:0b:2d:
ad:52:68:cb:ca:70:af:4c:7e:19:78:82:e6:44:f2:
fe:9b:97:23:50:a7:44:46:8b:4d:8c:02:3c:35:1a:
7a:67:8e:de:5c:be:e2:a6:ce:05:2d:0a:19:42:f2:
8f:4f:54:fb:3d:05:af:a5:92:53:a4:3f:6d:30:10:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:3E:B7:BD:A6:D4:C3:58:85:25:45:AA:C0:F3:71:4A:52:F4:4C
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LjY-t72m1MNYhSVFqsDzcUpS9Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.166.0/24
IPv6:
2a0e:4001:1000::/36
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
86:95:ac:29:dc:6c:ca:f3:ba:12:3b:a2:d3:58:fb:32:d3:e0:
cc:6f:58:7c:f6:d2:68:54:ad:de:26:32:3e:fa:ab:c6:dd:ea:
2e:18:d7:68:5f:5c:5a:f1:f8:eb:63:6c:02:d7:11:d1:81:79:
dc:f6:67:c6:be:a2:0d:90:b2:f2:1e:64:e9:1d:bd:00:5b:eb:
89:dc:a6:32:a6:77:7e:a2:b1:70:36:59:9d:58:11:37:2b:21:
80:60:0e:78:e7:69:5b:0a:79:0e:2e:da:c7:a9:20:4f:bc:cd:
6d:40:08:d5:64:90:87:b1:c5:ff:9e:5f:5f:52:d0:fe:fb:39:
af:7b:5c:99:5c:6a:93:e1:f9:6f:fe:65:bd:f5:b1:83:08:67:
e2:e5:72:a8:89:46:75:8d:39:ae:28:c7:86:9a:c2:49:8e:60:
a7:1f:29:6a:16:4b:ed:e9:e5:70:73:16:27:97:0d:a2:79:49:
ab:33:62:a1:40:a7:1f:79:b4:cd:02:55:0a:16:da:f0:d5:d9:
94:09:2c:17:df:1d:64:35:77:70:5c:18:2d:56:26:f2:96:cb:
38:d1:47:de:4c:04:7b:5a:0d:f5:35:5b:b8:aa:6f:ec:98:53:
76:04:d7:cb:cd:33:69:14:7a:ee:8f:a7:37:c5:8f:1a:59:ac:
53:e9:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:26 2026 by rpki-client