Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LacV_1SWurxvt-xHCGeI3nY488g.roa
File: LacV_1SWurxvt-xHCGeI3nY488g.roa (raw, json)
Hash identifier: 0t7zXc37UF6BJv5vLAdCCy2H/5E8X03kxcpwWaA1+S8=
Subject key identifier: 2D:A7:15:FF:54:96:BA:BC:6F:B7:EC:47:08:67:88:DE:76:38:F3:C8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1681514D55E284284569A675B8D2C0BC8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LacV_1SWurxvt-xHCGeI3nY488g.roa
Signing time: Fri 23 Oct 2026 09:26:14 +0000
ROA not before: Fri 23 Oct 2026 09:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 82.108.214.0/24 maxlen: 24
87.83.114.0/24 maxlen: 24
87.86.93.0/24 maxlen: 24
212.134.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:15:14:d5:5e:28:42:84:56:9a:67:5b:8d:2c:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 23 09:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2da715ff5496babc6fb7ec47086788de7638f3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:9b:c4:36:5c:f5:d8:df:1d:86:dc:63:41:
27:02:70:7a:ea:77:ee:7e:39:dd:8d:1c:0d:33:9f:
10:8b:77:96:23:80:1d:2f:ab:c7:02:9f:7e:9a:0a:
ce:9d:45:87:f1:93:57:27:d5:35:0a:2c:e0:7e:18:
e6:2b:d7:56:8a:23:e0:09:a7:3c:c1:72:23:90:fd:
7f:31:ac:1e:42:b3:ca:b2:43:0a:6f:67:5f:16:88:
ee:9d:bc:39:09:b4:0b:a5:41:7b:9f:60:8f:e9:30:
b3:70:fe:08:23:93:e7:27:e6:48:47:dd:aa:46:4e:
50:dc:af:d7:27:a0:88:a3:b3:f7:88:6b:ab:ea:7b:
46:51:2b:92:7d:76:14:b0:9f:ae:9c:47:68:d7:96:
0e:f1:0f:d4:61:d0:cb:f2:62:13:01:6b:cb:4e:63:
a5:c3:f3:17:1d:e2:a5:25:1b:0e:19:5b:77:c1:01:
19:2c:f0:f2:ee:ae:e6:6f:d9:c8:82:61:7d:b1:ac:
79:5d:91:d5:61:be:2a:f3:95:cb:e8:db:e1:ad:19:
1c:5b:72:33:77:16:ca:a9:42:40:fd:cc:56:b4:b3:
d2:e7:93:3d:4b:7d:6e:3c:2c:cb:4d:ac:f3:be:da:
a2:cc:c9:b2:46:75:1a:b3:1c:45:62:0a:a4:b7:f4:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:15:FF:54:96:BA:BC:6F:B7:EC:47:08:67:88:DE:76:38:F3:C8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LacV_1SWurxvt-xHCGeI3nY488g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.214.0/24
87.83.114.0/24
87.86.93.0/24
212.134.158.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5c:e6:a7:e5:52:3f:0d:9e:fd:f4:8a:23:27:f3:4b:0c:d6:
46:0b:c4:24:66:98:51:c5:8a:29:f3:32:2d:05:ae:2b:f1:51:
63:c6:22:98:7f:9d:a0:b0:8d:fb:d2:2b:00:57:fe:ba:87:d3:
e9:7c:a6:72:c1:13:6b:70:df:48:57:36:46:0d:5e:ba:7c:5f:
c9:25:56:81:bd:cd:2f:01:23:ba:b2:5f:9e:4e:5c:93:c9:23:
b8:0e:37:93:16:88:16:60:13:54:9f:c6:4c:2c:b8:3c:09:17:
e9:af:64:e2:01:b6:d8:92:7a:b8:42:60:d7:ea:9b:51:50:2a:
3f:9d:f2:c7:a9:a6:76:b3:82:86:2f:44:ff:00:2f:c2:f8:a4:
52:19:a4:8a:41:96:80:e0:37:23:bc:03:f2:45:52:7e:d1:1f:
9d:17:af:1e:86:d5:45:ba:8c:d1:59:f7:75:36:d9:9e:d9:ca:
b0:5b:d0:81:d3:07:68:7a:b7:e5:b6:6e:af:55:ed:4f:ed:fa:
43:00:b7:26:03:4c:aa:a4:61:ab:93:65:fb:21:ec:fb:e3:be:
03:a9:9b:ac:b5:02:d0:f5:73:62:34:fe:1b:aa:e2:19:80:34:
32:8d:28:72:bc:49:6b:d7:42:84:0e:56:a3:cd:c1:e5:dc:c9:
99:b2:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:02:38 2026 by rpki-client