Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/lhqgMr3fW-UrkGol2GTesMnoeyc.roa
File: lhqgMr3fW-UrkGol2GTesMnoeyc.roa (raw, json)
Hash identifier: 936oI2/+0qC0VwnPF8cXkFjDlSaACFG5lvhzmGVlCxc=
Subject key identifier: 96:1A:A0:32:BD:DF:5B:E5:2B:90:6A:25:D8:64:DE:B0:C9:E8:7B:27
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 01A179A42D8BB64C1B4B6336A7514BDFBF1A
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/lhqgMr3fW-UrkGol2GTesMnoeyc.roa
Signing time: Mon 26 Oct 2026 19:16:05 +0000
ROA not before: Mon 26 Oct 2026 19:16:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 82.112.170.0/24 maxlen: 24
82.112.171.0/24 maxlen: 24
82.112.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:a4:2d:8b:b6:4c:1b:4b:63:36:a7:51:4b:df:bf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Oct 26 19:16:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=961aa032bddf5be52b906a25d864deb0c9e87b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:12:5d:c0:15:32:c3:8a:2f:57:ad:0c:4c:
83:c7:1e:9c:0e:aa:3b:89:88:9a:9d:15:9a:e7:24:
a3:49:2e:34:54:9f:7b:23:de:55:c2:fa:2f:d1:75:
bc:77:59:e5:39:7a:03:d3:9f:fa:0d:90:d6:e3:0e:
ca:b0:47:0b:b7:ab:4f:76:7a:97:1a:8d:6b:0a:b4:
4a:40:e6:1e:d9:48:18:17:a8:01:0f:a8:32:08:62:
86:e1:2f:14:22:92:45:7b:9f:29:f7:af:b5:42:f7:
15:ce:28:d3:49:3b:3c:18:ff:ef:57:b4:85:47:87:
48:6e:6f:4b:24:d4:83:1a:15:92:4e:e1:71:7f:31:
ba:33:57:ad:38:06:cb:28:ac:5d:2f:89:59:c5:36:
ca:69:07:8e:22:67:64:b3:76:8e:19:89:0a:86:fe:
fa:53:9f:4c:f9:21:aa:bb:8b:05:f3:d5:4e:c4:57:
e3:c1:5b:97:cb:8a:2d:b8:89:9b:fe:a5:b7:7f:57:
7c:52:91:81:50:14:4e:55:9f:8e:47:ce:68:44:28:
64:bd:5f:e1:cf:00:77:59:ae:19:e4:e1:00:63:61:
97:10:c2:e2:6a:5f:83:b4:21:d3:87:19:b4:30:c3:
fd:cd:62:87:aa:6c:f0:23:3f:2c:e2:cc:68:11:1b:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:A0:32:BD:DF:5B:E5:2B:90:6A:25:D8:64:DE:B0:C9:E8:7B:27
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/lhqgMr3fW-UrkGol2GTesMnoeyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.170.0-82.112.172.255
Signature Algorithm: sha256WithRSAEncryption
18:72:a7:7f:4e:0d:73:72:86:81:7d:a4:3a:d3:1a:2a:f4:82:
14:8b:95:46:8e:de:89:b2:4d:31:a2:1a:d1:c2:e6:bb:51:c5:
b3:b8:dd:0c:cc:f7:36:89:60:42:2a:6c:00:cb:be:9d:72:d3:
28:54:bb:b8:42:da:7f:85:e3:d5:df:12:f3:d4:ba:78:de:1b:
c3:2e:be:55:98:dd:3b:3e:93:f4:88:b0:1b:36:8f:76:da:69:
20:37:50:b0:f8:5b:a6:36:21:fa:b5:41:c9:35:00:6a:1e:f8:
4b:8b:47:c1:ea:29:e7:1c:68:0e:41:75:87:6f:98:6d:0f:a3:
82:d3:da:fe:78:26:71:e0:e6:cb:e9:01:8a:af:2c:52:9c:2b:
1a:4e:b8:f4:4e:7c:64:a6:74:c0:c3:0d:77:13:b5:ea:b0:dc:
03:4c:62:0e:11:e6:1e:a3:4b:d0:93:b6:f3:dd:3b:49:a9:1f:
a7:5e:35:88:97:08:01:0d:b3:7b:81:01:85:bd:a3:8f:80:bd:
c7:13:79:90:9f:32:90:a3:78:63:d4:d1:7b:60:f0:e1:f8:cc:
3c:9f:b6:7f:5d:7c:c1:84:fb:74:ac:08:0f:d9:19:d0:a3:1f:
7b:f9:79:87:10:67:7f:a1:8e:bf:0a:16:bc:8f:9c:a5:26:ec:
74:6e:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:07 2026 by rpki-client