Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/LHrB9S_5wN9q4TKss5lhMnzZWUE.roa
File: LHrB9S_5wN9q4TKss5lhMnzZWUE.roa (raw, json)
Hash identifier: gT83cdmafD/JVl5E5X2iRmun1/6JhaCWrmB+yXrCpBw=
Subject key identifier: 2C:7A:C1:F5:2F:F9:C0:DF:6A:E1:32:AC:B3:99:61:32:7C:D9:59:41
Certificate issuer: /CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Certificate serial: 01A0618BB32AED65F1474384351653F2ACA1
Authority key identifier: 4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/LHrB9S_5wN9q4TKss5lhMnzZWUE.roa
Signing time: Wed 02 Sep 2026 09:55:40 +0000
ROA not before: Wed 02 Sep 2026 09:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214874
IP address blocks: 194.106.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:8b:b3:2a:ed:65:f1:47:43:84:35:16:53:f2:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Validity
Not Before: Sep 2 09:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c7ac1f52ff9c0df6ae132acb39961327cd95941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:25:b1:83:9d:54:90:d1:90:b4:a4:98:82:
3d:44:be:75:8f:35:62:6e:9b:eb:a3:e8:ae:4f:b8:
4e:4b:66:66:1a:ef:5c:81:0d:f4:69:c9:1f:6c:c5:
2a:f2:7c:bb:53:87:92:64:d4:b4:25:da:ff:f8:81:
80:37:43:9e:61:3f:b6:ca:93:6d:86:63:33:41:6b:
49:3b:44:e7:5b:a3:2d:62:2e:1e:65:57:17:ce:7e:
6f:f2:a6:74:55:90:56:22:31:05:eb:38:27:00:a9:
32:35:3c:52:bf:49:fc:74:74:f9:03:02:a8:63:d1:
c1:12:31:3a:f7:f2:28:10:d8:86:ca:80:3c:d5:8c:
ea:39:18:f9:69:7d:a6:08:5a:2d:8d:46:32:b9:77:
10:28:70:b4:fd:23:8c:ad:e1:31:2b:99:22:cd:c6:
e4:8d:0f:0c:66:08:be:0e:2d:0a:9d:35:9a:59:c2:
b7:80:60:c5:e0:f7:df:b2:9f:88:59:6c:d5:a2:5a:
d4:36:5e:be:cf:eb:28:3f:03:f3:d1:de:35:f6:0a:
bc:3c:ad:cc:29:47:f4:a5:d5:bb:7d:b0:87:35:15:
91:66:19:b1:4c:20:3c:b7:6e:69:56:95:c7:04:fe:
6c:db:6d:ac:37:ee:8d:99:5f:fe:35:10:d5:3f:80:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:C1:F5:2F:F9:C0:DF:6A:E1:32:AC:B3:99:61:32:7C:D9:59:41
X509v3 Authority Key Identifier:
keyid:4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/LHrB9S_5wN9q4TKss5lhMnzZWUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.212.0/23
Signature Algorithm: sha256WithRSAEncryption
09:a4:c6:4f:d3:ca:8a:e2:eb:47:a5:af:d1:35:1c:b2:95:59:
96:04:6d:4a:10:0a:fe:b0:df:d8:99:a8:b4:2b:58:b9:11:ec:
c4:58:2a:61:ec:a9:a0:fe:2a:ad:bb:22:49:d4:2d:bc:b3:fb:
85:ef:fd:72:c0:e3:a3:18:5e:a5:c5:66:fd:01:13:1e:cf:02:
7d:37:ee:20:00:8f:c7:c8:79:f7:3a:70:a2:bf:82:0b:a7:db:
2e:72:73:97:ce:12:2a:45:51:26:da:64:69:6b:2f:7f:5a:1d:
1f:23:ff:cb:a5:e2:f1:ba:85:78:07:9a:a5:af:37:32:c6:b1:
e6:1e:97:4a:1f:82:b2:a7:68:ef:4a:ce:91:94:b9:c7:0e:0f:
b0:af:50:36:0d:bb:95:33:77:a6:8c:25:bd:1e:6f:b5:c1:63:
fa:b8:51:d6:90:f7:12:82:1e:d2:99:0a:e1:d3:b4:07:d3:bf:
29:1f:20:1b:d7:60:67:af:34:30:e7:aa:f2:bb:81:35:30:a0:
28:ce:cb:89:d9:4c:b4:d2:9e:06:7c:c0:67:82:d9:95:f1:cf:
6e:4e:ef:4d:ca:79:59:d2:16:41:cf:8f:04:0b:6c:e6:ed:62:
fb:44:cc:cd:a6:92:b8:e6:8c:87:9f:aa:61:cb:eb:02:61:10:
1b:f8:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:39 2026 by rpki-client