Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/LpMnQmkW8eK1z14dUTCVF0MYEHc.roa
File: LpMnQmkW8eK1z14dUTCVF0MYEHc.roa (raw, json)
Hash identifier: P2Gc+4XzB+nZwbiFLhbDc9T1+zG9R61PeCv2JvqaWck=
Subject key identifier: 2E:93:27:42:69:16:F1:E2:B5:CF:5E:1D:51:30:95:17:43:18:10:77
Certificate issuer: /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial: 01A03882BEB929ECA135DB3C447FD5D8238B
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/LpMnQmkW8eK1z14dUTCVF0MYEHc.roa
Signing time: Tue 25 Aug 2026 10:41:27 +0000
ROA not before: Tue 25 Aug 2026 10:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 145.68.0.0/16 maxlen: 16
145.119.0.0/16 maxlen: 16
145.119.0.0/20 maxlen: 20
145.119.16.0/20 maxlen: 20
145.119.56.0/21 maxlen: 21
145.119.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:82:be:b9:29:ec:a1:35:db:3c:44:7f:d5:d8:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
Validity
Not Before: Aug 25 10:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e9327426916f1e2b5cf5e1d5130951743181077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:77:3a:4c:c6:62:08:c2:42:4e:fd:cf:83:
1e:3d:d0:17:fe:9b:93:f4:ec:da:54:db:94:92:aa:
df:26:bd:d1:9d:7a:3b:e5:3c:ba:8f:93:52:a2:98:
d8:f0:da:f5:32:3c:4c:0d:86:e3:71:e3:eb:26:49:
fe:2d:7c:94:73:30:44:4c:d8:0c:24:50:7b:e9:01:
31:8c:d6:fc:06:a8:8b:48:c7:cd:0f:a8:fa:67:5b:
db:46:f9:4c:8a:79:ef:e9:bb:48:19:a5:de:fb:d0:
11:43:6b:30:89:c7:0b:8d:b2:56:03:95:33:9b:ba:
6f:e4:40:44:9b:75:2c:35:29:64:39:05:ef:bf:e2:
ea:d6:ff:ef:3d:72:ac:4b:d3:76:7d:24:7b:3e:5b:
89:19:6c:c5:68:85:90:ea:8c:61:d5:73:36:48:df:
2c:2c:87:73:aa:64:3f:2b:18:09:d6:8f:d0:27:12:
d3:b4:43:04:e1:d9:37:b1:61:05:03:d4:98:85:5d:
3c:ed:7b:47:60:64:4e:b3:51:07:6e:0f:d2:f1:67:
45:a2:a0:4d:34:30:9b:b5:cf:15:9d:ed:ce:69:97:
b0:07:53:33:ae:90:ac:2f:aa:3b:cf:f0:64:48:65:
b3:e6:20:52:0d:99:f1:07:03:0c:70:ce:15:ef:02:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:27:42:69:16:F1:E2:B5:CF:5E:1D:51:30:95:17:43:18:10:77
X509v3 Authority Key Identifier:
keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/LpMnQmkW8eK1z14dUTCVF0MYEHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.68.0.0/16
145.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:1c:64:ee:6b:d5:6c:7c:60:45:d6:b7:84:02:84:b3:6d:2d:
8e:37:29:83:86:03:ff:8b:57:77:c1:5f:57:c1:c1:04:15:84:
be:bc:3c:b9:07:32:cf:5c:b9:c9:f4:11:e9:39:c2:29:81:f9:
f7:f2:ce:1f:dc:c6:06:06:ce:2c:5f:ca:f5:06:52:85:3e:8f:
b6:4d:8d:a6:ba:24:9e:6f:57:7c:01:cf:85:2a:a4:4c:c3:93:
49:65:ea:a1:ab:5d:ee:23:da:cb:15:29:b8:5d:59:51:d7:77:
d1:7d:18:12:11:41:6d:a6:c8:4b:99:89:db:75:d8:e2:f3:22:
a9:eb:33:3b:d1:58:2d:bd:22:2f:ae:ae:37:1c:ab:f5:39:3c:
de:0d:d7:5c:ae:34:32:bd:96:67:a7:1c:e0:00:75:44:16:41:
87:16:ce:1b:d6:42:4e:0b:6f:7e:9d:cc:46:4c:d2:b5:83:9f:
8b:3b:4c:cd:af:2d:ad:f4:54:ed:18:2b:7d:8a:95:26:0d:73:
89:c2:8a:c8:d3:5c:de:bc:f2:21:de:c9:ae:36:4e:4b:cc:a7:
ea:6d:17:b6:e5:91:e8:a7:d6:a8:9e:82:26:74:b9:24:a4:1b:
56:fc:eb:ec:4f:b6:c6:05:01:56:a0:e1:f9:e6:9b:70:11:0a:
0e:00:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:11 2026 by rpki-client