Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LsZO06mVxb8lca_sFScDUk14V_k.roa
File: LsZO06mVxb8lca_sFScDUk14V_k.roa (raw, json)
Hash identifier: Ipju3Nut3mJvs/XrXCQjg70uo7+fS2mA0b66Mw3D0rs=
Subject key identifier: 2E:C6:4E:D3:A9:95:C5:BF:25:71:AF:EC:15:27:03:52:4D:78:57:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A049A9634E5B866CABC8F228FD7F25A21E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LsZO06mVxb8lca_sFScDUk14V_k.roa
Signing time: Fri 28 Aug 2026 18:37:12 +0000
ROA not before: Fri 28 Aug 2026 18:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399275
IP address blocks: 206.245.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:a9:63:4e:5b:86:6c:ab:c8:f2:28:fd:7f:25:a2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 28 18:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec64ed3a995c5bf2571afec152703524d7857f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:e9:6d:be:17:a1:12:1a:4a:fb:6b:fc:58:
23:d3:28:29:d5:ec:27:25:b0:70:2f:14:57:db:01:
e6:1a:6a:6d:9b:bc:ba:0a:92:5c:48:06:4f:32:a8:
a0:42:72:5e:26:6e:fa:30:22:cf:18:6d:07:25:20:
cc:9d:0f:5e:74:fd:bc:cb:e0:4d:60:1d:3a:60:39:
ed:2b:2c:07:36:1f:2f:95:b5:a1:25:6d:35:88:77:
cc:e8:55:8c:52:4f:91:2e:4c:58:19:89:37:be:c4:
e9:21:85:d6:4c:3c:61:bb:10:23:80:62:b1:3e:94:
53:6c:af:e0:2a:15:50:af:54:a1:96:da:f7:10:ca:
c1:65:ce:a4:c0:d9:a3:b0:7b:13:92:e1:63:78:b3:
d4:c3:42:61:24:88:b6:4c:d0:9b:d2:48:97:28:74:
73:b5:0c:5f:d4:42:48:17:f5:6a:7a:5c:63:4b:8a:
21:7b:eb:54:18:c3:97:d1:6d:f5:50:e2:f0:93:b6:
93:7b:91:ef:04:e9:f9:2a:07:91:40:71:8d:5f:7c:
0e:cd:cd:10:84:dd:2e:e3:64:7a:e9:47:ee:39:20:
b2:62:81:2b:c1:ee:0e:5a:fe:bb:f0:5b:d5:fc:25:
4f:10:64:72:fa:4e:c2:3d:dd:60:70:96:c5:7e:2d:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:4E:D3:A9:95:C5:BF:25:71:AF:EC:15:27:03:52:4D:78:57:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LsZO06mVxb8lca_sFScDUk14V_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.137.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b4:fd:f0:f6:de:f4:82:19:af:aa:87:38:4d:d0:02:e6:36:
f4:1d:49:9f:68:4d:c1:98:56:0c:2e:8d:f0:40:d0:35:8a:45:
a9:a5:38:a3:3b:33:36:50:72:1e:8c:cd:1d:55:ad:6d:38:37:
01:48:91:22:74:02:89:c3:bc:c1:2f:4d:46:07:8d:10:07:dd:
6b:e0:4e:fe:a0:20:bc:cf:53:ce:70:68:39:d3:d6:c3:a1:05:
64:15:c5:f0:2d:cd:1d:a5:5c:5e:71:1d:51:ac:90:67:31:a8:
7e:d6:40:75:36:bb:02:1d:3f:8e:32:8b:d6:fe:0d:d9:a9:b7:
7d:1f:7a:b8:7e:67:27:70:37:8a:24:a0:01:3e:91:d1:54:7e:
32:f8:3f:d0:64:b8:0b:cb:0e:5d:69:23:d5:09:42:c5:b7:75:
c3:3d:f7:cc:30:f8:03:3b:cc:3d:b8:5c:53:33:54:b4:a6:5c:
92:73:35:44:6c:31:d8:2b:34:10:db:38:3d:45:43:9e:f7:fa:
3d:bc:23:23:98:6b:4c:c1:c0:7b:e1:f5:f7:d3:b0:60:7b:a9:
74:5d:e6:3e:41:04:e7:4d:ba:45:1e:03:2f:73:88:0a:cf:d9:
69:6b:df:a6:f6:b1:72:c6:0f:7c:1d:fe:16:26:c5:fd:b9:dc:
0e:39:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:41 2026 by rpki-client