Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/LccLg06oJH1WyqauVb234iW-aSA.roa
File: LccLg06oJH1WyqauVb234iW-aSA.roa (raw, json)
Hash identifier: nN939Pw1OX1Dw/xNao0tZG2DXrFK/g9xCZ0oiedK458=
Subject key identifier: 2D:C7:0B:83:4E:A8:24:7D:56:CA:A6:AE:55:BD:B7:E2:25:BE:69:20
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0474A1FAA96AD2A492B0BF00CA9F9DB58
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/LccLg06oJH1WyqauVb234iW-aSA.roa
Signing time: Fri 28 Aug 2026 07:33:55 +0000
ROA not before: Fri 28 Aug 2026 07:33:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 80.86.216.0/24 maxlen: 24
80.86.218.0/24 maxlen: 24
80.86.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:4a:1f:aa:96:ad:2a:49:2b:0b:f0:0c:a9:f9:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 28 07:33:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc70b834ea8247d56caa6ae55bdb7e225be6920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:42:0d:58:5b:67:4d:06:fc:05:05:c2:5f:
e6:03:79:76:8d:36:8f:d6:ed:ca:4c:64:13:86:cf:
37:0d:73:f7:e8:35:50:4f:05:c5:f9:9a:b6:f6:b0:
20:ce:59:bc:48:a2:d2:bc:09:2d:1e:ba:f0:b8:9c:
25:69:85:89:e4:d8:8f:72:59:87:31:8b:ae:31:b2:
10:d3:3e:6f:59:2b:70:14:be:70:a2:17:16:a6:4b:
4a:47:85:8b:61:47:4a:65:57:ac:d9:2c:b4:1d:7e:
79:29:62:17:cb:b2:2c:75:b5:13:ee:a7:8e:d7:6f:
ef:78:3f:a4:ab:14:92:9b:a0:ec:c9:65:78:03:42:
4c:30:57:29:04:26:90:d0:5f:1a:da:4c:f9:ff:c6:
d1:86:ce:ff:f0:ce:73:e2:e9:46:dc:f7:bb:90:c5:
02:2c:4a:49:d4:ca:00:f6:96:c1:4b:49:02:b4:ac:
2f:19:b7:c5:7b:f3:85:a3:ef:93:d2:2c:28:38:b9:
48:e1:82:b4:48:c3:5f:08:26:6a:3f:7b:f1:5b:b8:
e0:66:20:19:a2:6b:58:97:a7:df:20:df:78:15:f4:
c4:e4:a1:c4:e7:eb:66:99:40:cf:2c:cf:67:35:2a:
56:30:af:63:81:14:78:84:63:22:8e:65:b8:c7:e1:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:0B:83:4E:A8:24:7D:56:CA:A6:AE:55:BD:B7:E2:25:BE:69:20
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/LccLg06oJH1WyqauVb234iW-aSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.216.0/24
80.86.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:df:c4:00:9f:2b:57:54:cd:5f:2b:4c:af:bb:03:b4:bd:d0:
ff:b9:64:90:98:21:c7:ef:5f:de:cf:32:49:12:7b:07:6b:1d:
f0:79:e2:ea:3e:21:62:9d:64:92:59:51:bb:d6:69:6c:31:27:
4d:91:18:ce:ed:5c:49:ab:69:bc:bb:83:ca:41:ed:95:89:1c:
90:3d:59:00:b3:c4:d7:5b:b5:4a:1b:51:de:db:ae:ea:57:65:
87:55:a8:06:30:cb:c0:bc:f2:81:8b:80:5d:2d:eb:95:75:a6:
99:4c:06:3c:70:ab:df:31:6e:cd:b4:20:6e:54:af:c3:d5:dc:
36:e1:09:83:8a:8e:68:cb:55:8c:f6:44:ab:ff:a5:2d:bb:fe:
60:b6:bf:c7:e3:e2:9f:35:f9:44:06:8a:52:27:5b:9d:38:1f:
4c:d0:bb:38:bd:dd:1b:95:14:db:68:d3:b6:98:86:6d:5f:d9:
f6:53:68:a4:7f:76:50:f7:fb:d6:b5:a1:88:94:f6:a4:03:1b:
c9:2b:17:e6:fa:4e:7a:9a:4d:5e:6e:30:12:d6:dd:3c:8f:4d:
d2:7a:38:9a:e4:64:9a:d0:b5:3f:6e:25:a4:9b:98:ea:c7:bb:
6c:83:ea:d1:f8:d1:16:f0:2a:97:f6:29:54:0c:3d:e9:f0:f1:
1a:f9:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:23 2026 by rpki-client