Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LvgidXrxtIiAu0yVoRsHHjsfBQw.roa
File: LvgidXrxtIiAu0yVoRsHHjsfBQw.roa (raw, json)
Hash identifier: 8Cwh7lIwcy5jvX9RqspE8J9V6aLgP7GPAXrR8gOIsp8=
Subject key identifier: 2E:F8:22:75:7A:F1:B4:88:80:BB:4C:95:A1:1B:07:1E:3B:1F:05:0C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019ED702D8622A73B247534B3DED9CA013C9
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LvgidXrxtIiAu0yVoRsHHjsfBQw.roa
Signing time: Wed 17 Jun 2026 19:15:48 +0000
ROA not before: Wed 17 Jun 2026 19:15:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 130.49.4.0/24 maxlen: 24
130.49.7.0/24 maxlen: 24
130.49.13.0/24 maxlen: 24
130.49.18.0/24 maxlen: 24
130.49.19.0/24 maxlen: 24
130.49.23.0/24 maxlen: 24
130.49.26.0/24 maxlen: 24
130.49.28.0/24 maxlen: 24
130.49.33.0/24 maxlen: 24
130.49.34.0/24 maxlen: 24
130.49.38.0/24 maxlen: 24
130.49.41.0/24 maxlen: 24
130.49.43.0/24 maxlen: 24
130.49.48.0/24 maxlen: 24
130.49.49.0/24 maxlen: 24
130.49.54.0/24 maxlen: 24
130.49.56.0/24 maxlen: 24
130.49.59.0/24 maxlen: 24
130.49.63.0/24 maxlen: 24
130.49.64.0/24 maxlen: 24
130.49.69.0/24 maxlen: 24
130.49.71.0/24 maxlen: 24
130.49.74.0/24 maxlen: 24
130.49.82.0/24 maxlen: 24
130.49.83.0/24 maxlen: 24
130.49.88.0/24 maxlen: 24
130.49.90.0/24 maxlen: 24
130.49.93.0/24 maxlen: 24
130.49.97.0/24 maxlen: 24
130.49.98.0/24 maxlen: 24
130.49.103.0/24 maxlen: 24
130.49.105.0/24 maxlen: 24
130.49.109.0/24 maxlen: 24
130.49.116.0/24 maxlen: 24
130.49.118.0/24 maxlen: 24
130.49.123.0/24 maxlen: 24
130.49.124.0/24 maxlen: 24
138.249.29.0/24 maxlen: 24
138.249.30.0/24 maxlen: 24
138.249.31.0/24 maxlen: 24
138.249.36.0/24 maxlen: 24
138.249.38.0/24 maxlen: 24
138.249.39.0/24 maxlen: 24
138.249.44.0/24 maxlen: 24
138.249.45.0/24 maxlen: 24
138.249.47.0/24 maxlen: 24
138.249.48.0/24 maxlen: 24
138.249.49.0/24 maxlen: 24
138.249.50.0/24 maxlen: 24
138.249.51.0/24 maxlen: 24
138.249.53.0/24 maxlen: 24
138.249.55.0/24 maxlen: 24
138.249.57.0/24 maxlen: 24
138.249.60.0/24 maxlen: 24
138.249.61.0/24 maxlen: 24
138.249.62.0/24 maxlen: 24
138.249.64.0/24 maxlen: 24
138.249.65.0/24 maxlen: 24
138.249.66.0/24 maxlen: 24
138.249.67.0/24 maxlen: 24
138.249.68.0/24 maxlen: 24
138.249.69.0/24 maxlen: 24
138.249.70.0/24 maxlen: 24
138.249.71.0/24 maxlen: 24
138.249.72.0/24 maxlen: 24
138.249.73.0/24 maxlen: 24
138.249.74.0/24 maxlen: 24
138.249.76.0/24 maxlen: 24
138.249.78.0/24 maxlen: 24
138.249.79.0/24 maxlen: 24
138.249.80.0/24 maxlen: 24
138.249.81.0/24 maxlen: 24
138.249.82.0/24 maxlen: 24
138.249.83.0/24 maxlen: 24
138.249.85.0/24 maxlen: 24
138.249.87.0/24 maxlen: 24
138.249.89.0/24 maxlen: 24
138.249.92.0/24 maxlen: 24
138.249.93.0/24 maxlen: 24
138.249.94.0/24 maxlen: 24
138.249.95.0/24 maxlen: 24
138.249.96.0/24 maxlen: 24
138.249.97.0/24 maxlen: 24
138.249.99.0/24 maxlen: 24
138.249.100.0/24 maxlen: 24
138.249.101.0/24 maxlen: 24
138.249.114.0/24 maxlen: 24
138.249.247.0/24 maxlen: 24
155.212.33.0/24 maxlen: 24
155.212.40.0/24 maxlen: 24
155.212.42.0/24 maxlen: 24
155.212.47.0/24 maxlen: 24
155.212.48.0/24 maxlen: 24
155.212.52.0/24 maxlen: 24
155.212.54.0/24 maxlen: 24
155.212.57.0/24 maxlen: 24
155.212.61.0/24 maxlen: 24
155.212.62.0/24 maxlen: 24
155.212.68.0/24 maxlen: 24
155.212.69.0/24 maxlen: 24
155.212.73.0/24 maxlen: 24
155.212.76.0/24 maxlen: 24
155.212.78.0/24 maxlen: 24
155.212.83.0/24 maxlen: 24
155.212.84.0/24 maxlen: 24
155.212.88.0/24 maxlen: 24
155.212.90.0/24 maxlen: 24
155.212.93.0/24 maxlen: 24
155.212.97.0/24 maxlen: 24
155.212.98.0/24 maxlen: 24
155.212.103.0/24 maxlen: 24
155.212.105.0/24 maxlen: 24
155.212.112.0/24 maxlen: 24
155.212.116.0/24 maxlen: 24
155.212.118.0/24 maxlen: 24
155.212.123.0/24 maxlen: 24
155.212.124.0/24 maxlen: 24
170.168.205.0/24 maxlen: 24
170.168.213.0/24 maxlen: 24
170.168.214.0/24 maxlen: 24
170.168.222.0/24 maxlen: 24
170.168.229.0/24 maxlen: 24
170.168.231.0/24 maxlen: 24
170.168.239.0/24 maxlen: 24
170.168.249.0/24 maxlen: 24
193.108.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:02:d8:62:2a:73:b2:47:53:4b:3d:ed:9c:a0:13:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jun 17 19:15:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef822757af1b48880bb4c95a11b071e3b1f050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:29:1e:71:69:c0:48:96:5a:72:7a:94:d8:
68:a0:a4:b1:44:2a:02:44:5a:23:94:54:9f:c8:bf:
84:77:3d:e4:d2:85:4e:d3:05:8d:84:aa:26:60:e1:
8c:11:5e:d4:02:c9:91:a8:f8:bf:e3:da:13:04:c7:
9c:d6:c7:b7:32:c9:ce:fa:54:82:0a:a5:94:15:0b:
80:f6:ab:79:0b:05:8f:2a:34:83:e7:2e:1b:75:aa:
b1:1f:34:0f:21:48:46:c9:af:e0:74:b8:94:94:24:
d4:5b:7d:fa:37:0d:4d:99:a7:5f:66:a6:45:00:3d:
bb:42:3c:d0:6c:e8:1a:25:3e:af:3a:92:7c:ad:4a:
1f:06:db:ce:7b:6b:83:3a:cf:57:bd:8c:27:aa:8a:
d5:7b:a1:42:7b:f9:4a:64:ff:fc:30:b7:26:7a:6c:
2d:81:f5:31:ed:75:dc:11:78:7d:02:87:1f:f2:bd:
ed:d4:4a:38:17:9b:31:1c:7e:56:9e:02:ed:bc:f1:
51:d1:eb:27:13:66:d6:d8:14:5e:9b:82:27:e1:82:
70:73:14:fd:16:d9:6f:58:5d:57:5e:ad:50:8f:a2:
6b:24:0d:52:0f:4a:0d:8e:b9:cf:84:de:02:98:34:
fb:66:4f:23:ed:12:43:43:de:f5:f5:0d:84:c5:41:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:22:75:7A:F1:B4:88:80:BB:4C:95:A1:1B:07:1E:3B:1F:05:0C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LvgidXrxtIiAu0yVoRsHHjsfBQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.4.0/24
130.49.7.0/24
130.49.13.0/24
130.49.18.0/23
130.49.23.0/24
130.49.26.0/24
130.49.28.0/24
130.49.33.0-130.49.34.255
130.49.38.0/24
130.49.41.0/24
130.49.43.0/24
130.49.48.0/23
130.49.54.0/24
130.49.56.0/24
130.49.59.0/24
130.49.63.0-130.49.64.255
130.49.69.0/24
130.49.71.0/24
130.49.74.0/24
130.49.82.0/23
130.49.88.0/24
130.49.90.0/24
130.49.93.0/24
130.49.97.0-130.49.98.255
130.49.103.0/24
130.49.105.0/24
130.49.109.0/24
130.49.116.0/24
130.49.118.0/24
130.49.123.0-130.49.124.255
138.249.29.0-138.249.31.255
138.249.36.0/24
138.249.38.0/23
138.249.44.0/23
138.249.47.0-138.249.51.255
138.249.53.0/24
138.249.55.0/24
138.249.57.0/24
138.249.60.0-138.249.62.255
138.249.64.0-138.249.74.255
138.249.76.0/24
138.249.78.0-138.249.83.255
138.249.85.0/24
138.249.87.0/24
138.249.89.0/24
138.249.92.0-138.249.97.255
138.249.99.0-138.249.101.255
138.249.114.0/24
138.249.247.0/24
155.212.33.0/24
155.212.40.0/24
155.212.42.0/24
155.212.47.0-155.212.48.255
155.212.52.0/24
155.212.54.0/24
155.212.57.0/24
155.212.61.0-155.212.62.255
155.212.68.0/23
155.212.73.0/24
155.212.76.0/24
155.212.78.0/24
155.212.83.0-155.212.84.255
155.212.88.0/24
155.212.90.0/24
155.212.93.0/24
155.212.97.0-155.212.98.255
155.212.103.0/24
155.212.105.0/24
155.212.112.0/24
155.212.116.0/24
155.212.118.0/24
155.212.123.0-155.212.124.255
170.168.205.0/24
170.168.213.0-170.168.214.255
170.168.222.0/24
170.168.229.0/24
170.168.231.0/24
170.168.239.0/24
170.168.249.0/24
193.108.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8a:6d:cc:8f:e6:79:74:db:dd:96:fd:62:02:75:85:c2:74:
f9:30:0e:5c:45:f1:4b:31:94:0a:10:e7:ff:cb:7f:03:cb:79:
55:ba:25:c1:8f:86:1d:0d:b4:a7:8c:3d:3c:a3:a7:0b:84:98:
f1:53:5c:b0:f1:b8:90:7f:d0:22:74:28:7a:89:e2:aa:75:50:
a8:e4:3c:fb:b2:94:2e:9f:f8:74:ff:86:83:ea:ba:a6:12:3b:
55:e3:20:14:cb:a3:c0:e6:f8:e3:76:9b:6e:69:92:df:83:ce:
91:28:d6:5b:52:3d:6e:1e:4a:8a:99:78:fe:f5:40:82:a4:42:
aa:2c:30:28:48:73:96:f1:72:4a:94:54:6f:75:43:68:3e:a5:
e1:7a:16:3d:41:f8:ef:4f:7e:8d:17:11:7d:d3:9a:17:0b:b8:
97:bd:b1:45:4e:64:46:c6:7f:a2:ee:e1:5d:69:b5:23:8a:5d:
f8:c5:75:7d:7d:cd:8b:9a:89:c6:0c:8d:9f:b1:23:ce:7d:27:
8f:65:38:f0:ed:6f:de:a2:10:98:11:db:58:fe:38:90:76:41:
9e:3e:d2:64:25:23:c6:13:34:9c:46:51:26:dc:68:9c:58:b0:
5d:8e:2b:4b:0d:bb:f1:98:5d:54:e5:ab:78:3d:f2:55:39:95:
fb:42:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:13:52 2026 by rpki-client