Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LHVIAQ7EwHVD-VzbPKl1T75mO9c.roa
File: LHVIAQ7EwHVD-VzbPKl1T75mO9c.roa (raw, json)
Hash identifier: 0UvcWtHnI4DktgHVcZw2kgAPR3wRbEaFdRgMmKAUAig=
Subject key identifier: 2C:75:48:01:0E:C4:C0:75:43:F9:5C:DB:3C:A9:75:4F:BE:66:3B:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A168E5D27721D8E0ABEE1C20DEE32143D9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LHVIAQ7EwHVD-VzbPKl1T75mO9c.roa
Signing time: Fri 23 Oct 2026 13:14:14 +0000
ROA not before: Fri 23 Oct 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216213
IP address blocks: 195.40.186.0/23 maxlen: 23
212.135.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:e5:d2:77:21:d8:e0:ab:ee:1c:20:de:e3:21:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 23 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c7548010ec4c07543f95cdb3ca9754fbe663bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:5a:71:3d:df:21:ff:f3:8a:bd:2c:e2:9d:
59:e1:5d:60:df:a3:e9:26:06:3b:a5:23:35:ac:1f:
d0:20:16:1f:87:03:d7:58:43:30:49:51:d7:c8:a8:
8e:a1:aa:62:4d:11:f4:25:28:a6:9b:56:b0:1a:3e:
98:50:8e:78:3a:27:78:0b:b3:72:cc:5c:a8:06:c7:
dc:82:79:2c:b2:5c:8f:d3:08:7a:b0:c8:03:3a:09:
77:f9:14:b2:16:ff:eb:70:8b:a9:4b:b6:ae:ef:d8:
6b:50:6e:51:26:a0:f2:7a:16:d4:c4:25:a2:68:39:
8a:49:bf:65:bc:7e:60:d5:b7:b4:e1:85:71:e1:51:
ab:45:01:1d:4f:60:02:87:cf:1c:13:ca:81:ca:08:
b0:72:4d:1f:5c:20:cc:c5:d8:ac:26:24:15:5f:57:
27:07:a6:fa:8e:b5:0a:dc:77:6e:9d:d2:fe:b5:59:
ae:f9:cb:b4:6d:b4:54:96:b7:83:44:87:d4:29:4e:
c7:15:8f:1a:bf:01:c3:03:e2:f2:aa:dc:a1:cf:42:
44:52:bc:8e:dc:67:08:a1:3b:0f:ba:54:a9:bd:3b:
27:27:50:92:84:01:59:53:ee:95:7f:de:70:b5:9d:
4e:cb:aa:68:2e:a8:4a:ab:49:40:3c:e0:e2:a2:bb:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:48:01:0E:C4:C0:75:43:F9:5C:DB:3C:A9:75:4F:BE:66:3B:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LHVIAQ7EwHVD-VzbPKl1T75mO9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.186.0/23
212.135.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:3f:fd:eb:e9:0b:44:c6:a8:d6:a4:5e:45:a5:75:3d:75:03:
67:4b:a7:9f:0f:32:91:12:e4:ae:8e:14:b9:35:27:06:b2:56:
50:97:a1:4e:e0:06:3b:e5:a4:ae:d3:11:47:3d:c4:59:82:db:
13:da:18:44:c6:32:96:7e:d7:48:64:ce:25:ae:f9:2e:84:24:
90:c8:0b:fd:39:12:49:e4:74:d7:5d:7b:c7:1d:ef:e8:e0:07:
d6:93:88:b8:18:50:44:ee:5f:40:17:2d:98:f8:8c:dd:7f:c4:
34:89:6b:86:4d:4f:38:56:3b:7e:a6:13:43:86:b2:57:39:b3:
b3:ea:ac:5a:10:20:46:22:28:ea:9b:a9:2c:9f:59:83:b1:54:
2a:b9:42:dd:5c:38:66:93:80:4c:ae:b7:27:3f:79:a0:9c:f7:
5f:0a:1f:74:12:8b:3c:c6:23:f9:01:39:9d:ee:92:17:fd:72:
e4:79:c5:3f:85:ae:f1:74:57:93:fd:d3:67:89:9d:17:9b:25:
60:ff:31:d1:2b:c2:42:51:99:4f:3b:1b:bf:9d:1d:42:e8:01:
04:57:99:2a:eb:4e:70:f2:e3:a5:6a:97:43:be:42:6a:9c:19:
7d:05:f4:04:62:f4:5c:6f:82:e1:d3:64:43:11:e0:5f:e4:99:
69:44:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:53 2026 by rpki-client