Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkVMq21PrEjVILLfyW1i_oB-oTQ.roa
File: LkVMq21PrEjVILLfyW1i_oB-oTQ.roa (raw, json)
Hash identifier: EHjg53tdil/VCDYZTAmVcMnIrNjsyQ3aFna7TedU9xw=
Subject key identifier: 2E:45:4C:AB:6D:4F:AC:48:D5:20:B2:DF:C9:6D:62:FE:80:7E:A1:34
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A07AD22C98EAA119991442E870604710EC
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkVMq21PrEjVILLfyW1i_oB-oTQ.roa
Signing time: Mon 07 Sep 2026 07:43:09 +0000
ROA not before: Mon 07 Sep 2026 07:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 147.90.42.0/24 maxlen: 24
147.90.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:d2:2c:98:ea:a1:19:99:14:42:e8:70:60:47:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 7 07:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e454cab6d4fac48d520b2dfc96d62fe807ea134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:31:f5:1c:31:95:3f:60:73:f7:4f:e0:ce:
71:9e:d0:28:47:dc:a9:bb:1f:7f:09:96:aa:c2:b4:
1e:5f:4d:45:90:3e:5e:3e:09:80:df:27:79:82:3e:
02:70:f8:94:e4:2e:bc:6b:83:72:ff:ad:3d:79:61:
a4:ff:09:5b:fe:f3:36:73:87:cb:fa:52:a7:3b:7e:
f9:7e:e1:dd:79:5c:55:1c:50:36:be:87:cd:e5:73:
66:7a:8d:b0:69:81:a8:83:7e:1e:7b:34:e5:97:be:
37:3e:cf:08:be:1d:3b:9c:21:51:61:eb:eb:7f:ac:
95:ea:56:56:3a:d0:27:66:d9:20:98:23:0e:ed:30:
78:53:ef:fb:80:f3:45:ea:25:64:7d:cf:ce:91:ba:
4a:b8:1f:65:b6:ab:85:49:b3:36:ed:36:17:ba:92:
b9:60:a1:38:f2:f5:92:80:bb:02:c0:94:c7:55:7d:
3a:77:81:6f:ea:e4:57:e0:92:7f:4b:f0:09:05:ca:
55:81:bd:fc:f0:fd:32:ab:a1:f5:39:e3:30:74:e6:
f6:e4:a2:79:0a:fd:cc:33:52:5e:bb:20:fa:c9:20:
18:57:d9:6d:5a:47:fe:ec:45:97:75:ce:59:3f:f8:
86:fe:d9:aa:90:b4:4e:3b:7b:56:d3:a3:c2:9a:38:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:4C:AB:6D:4F:AC:48:D5:20:B2:DF:C9:6D:62:FE:80:7E:A1:34
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LkVMq21PrEjVILLfyW1i_oB-oTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.42.0/24
147.90.64.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c3:f1:5c:22:52:ea:0b:72:d0:77:6d:7a:f7:94:cc:12:82:
f4:8a:2a:27:78:d1:e3:77:46:d7:08:67:a5:31:83:74:29:e2:
53:4c:06:84:cb:84:5e:f6:4f:0b:18:78:7a:5d:ae:49:fe:14:
00:b1:d5:7c:ae:fe:43:0b:1a:97:73:fa:9a:39:85:f1:f8:be:
95:01:cd:76:0f:35:47:b0:7d:a8:e2:76:36:f9:8d:93:df:bb:
35:29:8a:80:e3:30:1b:76:40:b5:d4:81:c5:8f:31:05:60:23:
86:c5:db:77:e3:43:98:03:ae:e6:7d:04:8d:c0:17:cf:4e:64:
e3:b2:9c:13:6f:df:3e:3d:38:1d:d0:6a:9b:92:04:73:0e:b7:
4f:40:71:29:ae:35:64:52:9f:ca:b8:48:54:29:9f:29:6e:3b:
94:73:d0:de:9c:3a:2b:06:76:ae:79:02:46:ee:7a:58:a8:25:
22:89:ae:74:f5:cc:65:8b:16:bc:e6:02:93:0d:7e:ab:66:11:
3e:4c:31:27:ca:53:4b:52:30:fa:84:4f:47:e0:56:44:75:43:
ae:31:e3:a7:cb:b0:7b:35:1d:3e:a3:d3:18:93:66:ea:d1:ca:
ed:2c:be:22:e3:70:52:19:9a:be:1e:f2:18:7e:74:40:fd:13:
bd:58:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:58 2026 by rpki-client