Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LmmhI1Z3bNWasqW3KYfLikF4t-g.roa
File: LmmhI1Z3bNWasqW3KYfLikF4t-g.roa (raw, json)
Hash identifier: uSBHG/9Uy3S7auLYGJFCjkn17D9/u94iRRv7BQ0qdiA=
Subject key identifier: 2E:69:A1:23:56:77:6C:D5:9A:B2:A5:B7:29:87:CB:8A:41:78:B7:E8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F4AB6D46E24DC81F72C6DB6EC3D3D03EE
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LmmhI1Z3bNWasqW3KYfLikF4t-g.roa
Signing time: Fri 10 Jul 2026 06:28:43 +0000
ROA not before: Fri 10 Jul 2026 06:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197324
IP address blocks: 2a0e:4005:fe00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:b6:d4:6e:24:dc:81:f7:2c:6d:b6:ec:3d:3d:03:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 10 06:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e69a12356776cd59ab2a5b72987cb8a4178b7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:82:24:08:81:e6:d0:4e:2e:60:c2:98:e9:
04:36:5a:38:80:f9:3c:7a:52:18:b7:17:01:5a:63:
97:2d:f7:c0:78:ae:f6:0d:fe:ec:9f:f3:c9:e5:6b:
22:97:34:be:cd:1f:a9:05:2c:8e:e5:db:dc:31:68:
b5:4b:da:4c:e1:40:6d:16:97:61:d7:95:8c:f3:be:
9b:73:fc:25:bc:18:c1:b7:eb:9c:39:d4:b5:38:6a:
7a:11:9c:18:45:9f:92:68:29:1b:c3:2b:67:87:f9:
12:09:11:a2:0b:9b:75:53:fa:cb:5c:eb:66:a0:82:
ae:54:df:ee:0d:bc:2b:88:fe:3d:7c:fd:90:20:c3:
c1:ee:3b:bb:a6:8e:16:2d:7e:c1:32:58:6b:61:52:
79:83:19:15:a2:05:c1:07:b8:eb:64:d5:14:94:ed:
26:11:03:a0:89:9f:9f:0e:cc:dd:d2:a7:b2:d5:a5:
ca:04:7e:53:c8:8f:7a:e8:61:d8:ce:d6:66:62:a6:
df:2f:03:4f:84:ab:dc:ea:05:35:86:6a:63:ad:0e:
4a:48:21:d3:55:ec:24:a6:f8:3c:9c:2b:48:33:5c:
4d:ef:f8:ca:06:f6:68:39:d1:15:48:d4:60:a7:dd:
47:be:fe:88:25:b1:71:f6:19:35:4d:71:d4:75:0a:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:A1:23:56:77:6C:D5:9A:B2:A5:B7:29:87:CB:8A:41:78:B7:E8
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/LmmhI1Z3bNWasqW3KYfLikF4t-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
bd:cb:ab:fd:68:eb:8b:bb:6b:0b:c3:f3:ac:16:dc:60:36:aa:
8f:e4:8c:29:4b:2d:e7:b5:3a:4e:c8:c0:d3:1a:64:ed:8a:41:
b3:d4:1a:d6:04:61:15:bb:9a:e0:6b:a6:8c:33:fd:6d:04:cb:
8d:b2:8f:7b:47:43:3a:80:21:5e:13:5c:af:b3:23:d8:9f:16:
84:64:f2:b4:c8:d1:6e:39:b5:a3:10:1c:28:33:e2:b2:8f:be:
72:49:54:35:db:d4:3c:ca:9c:1c:ca:7a:6c:14:d0:f8:65:e0:
df:b0:20:ec:de:a1:bc:38:d4:14:4c:0f:80:ad:ed:ea:eb:15:
da:98:e2:9b:69:1d:01:86:c3:be:47:b5:6c:7f:c5:3d:f6:b3:
c4:24:f3:41:e9:ac:50:20:77:9f:65:b0:0f:e6:c4:7a:e7:ca:
0e:c1:69:43:1e:70:aa:2a:99:ad:8d:9c:3b:d8:98:28:66:0b:
d2:c3:09:01:5d:ae:36:12:17:46:57:f6:1c:9f:c9:18:54:07:
fa:dd:46:6e:07:b3:6d:f3:c0:87:53:cf:89:6b:f1:aa:42:bd:
19:62:30:c6:9f:db:3e:db:f2:5a:bb:56:05:21:6f:46:83:59:
1f:02:81:6e:6f:7e:38:e3:82:0d:35:f0:b9:b8:5d:6c:a9:c9:
dd:7d:42:61
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ9KttRuJNyB9yxttuw9PQPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNzEwMDYyODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTY5YTEyMzU2Nzc2Y2Q1OWFiMmE1YjcyOTg3Y2I4YTQxNzhiN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFaCJAiB5tBOLmDCmOkENlo4gPk8
elIYtxcBWmOXLffAeK72Df7sn/PJ5WsilzS+zR+pBSyO5dvcMWi1S9pM4UBtFpdh
15WM876bc/wlvBjBt+ucOdS1OGp6EZwYRZ+SaCkbwytnh/kSCRGiC5t1U/rLXOtm
oIKuVN/uDbwriP49fP2QIMPB7ju7po4WLX7BMlhrYVJ5gxkVogXBB7jrZNUUlO0m
EQOgiZ+fDszd0qey1aXKBH5TyI966GHYztZmYqbfLwNPhKvc6gU1hmpjrQ5KSCHT
Vewkpvg8nCtIM1xN7/jKBvZoOdEVSNRgp91Hvv6IJbFx9hk1TXHUdQqRGQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFC5poSNWd2zVmrKltymHy4pBeLfoMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvTG1taEkxWjNiTldhc3FXM0tZZkxpa0Y0dC1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5ABf4w
DQYJKoZIhvcNAQELBQADggEBAL3Lq/1o64u7awvD86wW3GA2qo/kjClLLee1Ok7I
wNMaZO2KQbPUGtYEYRW7muBrpowz/W0Ey42yj3tHQzqAIV4TXK+zI9ifFoRk8rTI
0W45taMQHCgz4rKPvnJJVDXb1DzKnBzKemwU0Phl4N+wIOzeobw41BRMD4Ct7err
FdqY4ptpHQGGw75HtWx/xT32s8Qk80HprFAgd59lsA/mxHrnyg7BaUMecKoqma2N
nDvYmChmC9LDCQFdrjYSF0ZX9hyfyRhUB/rdRm4Hs23zwIdTz4lr8apCvRliMMaf
2z7b8lq7VgUhb0aDWR8CgW5vfjjjgg018Lm4XWypyd19QmE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:57 2026 by rpki-client