Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/LDS1YWjD86IXDHwiDyYizlLQQJ0.roa
File: LDS1YWjD86IXDHwiDyYizlLQQJ0.roa (raw, json)
Hash identifier: p58RlPZiCl5HhwC1+r2kH86yb/BlzYcWhfxWQdG7jog=
Subject key identifier: 2C:34:B5:61:68:C3:F3:A2:17:0C:7C:22:0F:26:22:CE:52:D0:40:9D
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A152B9DC136F64AAEC59E829F5054C3A89
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/LDS1YWjD86IXDHwiDyYizlLQQJ0.roa
Signing time: Mon 19 Oct 2026 05:54:34 +0000
ROA not before: Mon 19 Oct 2026 05:54:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 158.173.34.0/24 maxlen: 24
158.173.42.0/24 maxlen: 24
158.173.43.0/24 maxlen: 24
158.173.65.0/24 maxlen: 24
158.173.66.0/24 maxlen: 24
158.173.106.0/24 maxlen: 24
158.173.107.0/24 maxlen: 24
158.173.121.0/24 maxlen: 24
158.173.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:b9:dc:13:6f:64:aa:ec:59:e8:29:f5:05:4c:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Oct 19 05:54:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c34b56168c3f3a2170c7c220f2622ce52d0409d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:26:e2:66:91:b9:0f:1e:de:1a:71:fd:18:
cd:bd:ff:2b:73:4b:0d:d8:d2:0a:a1:1b:6d:25:95:
0a:b6:d7:c7:63:2e:ab:e8:e4:7d:4c:f6:34:4c:46:
fb:cc:45:72:2b:f4:6d:f2:ed:13:fd:21:06:81:ac:
5b:f7:b4:fb:e6:10:8b:ad:2c:7e:80:42:d8:eb:99:
85:94:f5:a3:eb:4e:90:40:d2:4d:3f:e4:a3:4b:56:
6f:ca:e1:15:51:a4:34:42:73:e0:e1:34:24:92:0b:
58:57:86:65:0b:18:24:0f:14:6a:31:a5:c6:16:78:
af:4e:91:5d:06:c2:ea:08:d2:63:c3:9b:04:5f:04:
0b:78:73:ad:b6:85:58:64:4a:1f:03:87:9b:66:36:
06:27:61:c3:1c:f7:a8:02:1f:16:89:9f:04:a3:07:
d1:24:0a:a3:46:96:35:35:5b:28:eb:5c:94:d7:4a:
ba:ae:90:d6:a3:e8:88:e2:21:f6:d6:01:da:1e:44:
07:e2:e1:cb:aa:f7:4e:fd:bb:b9:90:6b:d6:be:35:
b9:03:0e:28:d6:36:2d:38:00:fc:a5:a9:40:8a:6f:
5c:bd:5f:5b:45:6f:ec:6a:da:1e:37:28:bc:66:e3:
55:5c:d0:36:87:17:9e:db:0b:1e:36:53:9d:3f:06:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:B5:61:68:C3:F3:A2:17:0C:7C:22:0F:26:22:CE:52:D0:40:9D
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/LDS1YWjD86IXDHwiDyYizlLQQJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.34.0/24
158.173.42.0/23
158.173.65.0-158.173.66.255
158.173.106.0/23
158.173.121.0/24
158.173.127.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7d:81:2e:10:00:62:9c:5a:3d:82:5a:24:87:af:d1:05:10:
27:4f:4a:1a:88:fc:0d:ec:58:30:5f:eb:e2:a9:b4:a2:1f:71:
9d:12:2a:24:41:7c:ab:70:f2:98:ea:99:a6:66:bb:3f:50:48:
bc:8f:3b:f3:c2:bd:2b:ea:ca:85:08:a0:8a:42:24:9e:c4:f8:
d3:ca:6c:dc:d0:3a:30:b4:ad:d2:69:ae:e0:74:eb:a7:b1:1f:
55:3e:7d:7a:8b:f2:cc:2d:2c:7c:d8:5d:28:59:38:a2:28:7f:
ad:e1:bf:31:19:15:7c:95:ee:84:bd:eb:68:23:d4:ca:b0:44:
9d:0d:ae:55:31:cd:ab:90:c7:26:46:2a:32:84:f3:99:49:76:
ad:c9:aa:41:60:f5:58:49:ed:ac:85:63:43:8a:6f:32:f4:18:
d2:d3:47:27:59:8d:91:53:45:70:19:51:97:4e:7b:83:f4:03:
31:4e:25:49:da:8e:85:8f:eb:42:4f:64:11:5f:0c:03:3a:9b:
df:d0:6e:48:96:cc:d8:1a:5e:ac:66:1f:d5:4d:57:a2:0f:3c:
1b:7c:4b:a8:c1:2a:3f:90:ed:d3:23:f7:27:71:70:82:9f:c4:
09:73:ed:3e:15:e8:77:b1:b5:fa:91:2c:c0:81:b4:4b:91:64:
6d:8f:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:38 2026 by rpki-client