Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxEun9_jlTUtb7GC5uaJglc488U.roa
File: lxEun9_jlTUtb7GC5uaJglc488U.roa (raw, json)
Hash identifier: QULcXdXU1FC04N/woz7iuSXCyi2r7pVjkrhZ/VknJu8=
Subject key identifier: 97:11:2E:9F:DF:E3:95:35:2D:6F:B1:82:E6:E6:89:82:57:38:F3:C5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF871023504096AD61744659BEEDED685
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxEun9_jlTUtb7GC5uaJglc488U.roa
Signing time: Wed 24 Jun 2026 07:03:36 +0000
ROA not before: Wed 24 Jun 2026 07:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402651
IP address blocks: 87.85.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:71:02:35:04:09:6a:d6:17:44:65:9b:ee:de:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 24 07:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97112e9fdfe395352d6fb182e6e689825738f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:9c:40:fb:bb:58:a7:c5:00:cb:5e:75:c1:
24:d9:ba:58:cf:20:27:17:9a:73:13:7c:dc:4c:4e:
d3:32:b7:a3:f3:b8:0f:b3:55:6d:e9:da:e4:57:cf:
23:23:63:7d:93:20:47:73:f2:79:1e:cf:83:40:2b:
d5:c5:1d:cd:b6:30:3b:c8:75:38:fb:fc:16:2c:5c:
b1:fb:5d:e7:57:3a:41:c5:04:d9:30:18:c9:d0:a9:
12:16:ef:f1:c6:cb:88:80:63:34:eb:06:07:46:e9:
d4:72:b2:06:10:04:26:bc:94:8f:50:51:d9:6a:4d:
ff:f1:f6:a6:fd:ea:a3:a1:66:33:95:17:c2:5e:7d:
d3:70:b2:ef:0f:2d:b4:6e:03:62:f6:09:ed:6a:e6:
b4:cf:c2:f2:31:2b:68:a9:8f:6e:73:65:ca:de:74:
b0:b6:89:2b:c3:85:78:4d:c8:44:7a:07:13:d0:32:
90:7d:b7:c4:af:4f:b2:19:4e:7b:26:de:ca:fb:97:
16:66:e8:62:f6:06:7e:04:3e:61:89:93:5e:3e:c6:
f9:4b:f8:96:c7:76:db:dd:cf:d6:66:1b:45:ea:de:
13:9d:b2:f8:f5:80:55:1c:d4:a5:e5:d7:6a:07:49:
95:d0:35:05:f9:be:54:2c:17:aa:c0:b8:0d:8d:50:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:2E:9F:DF:E3:95:35:2D:6F:B1:82:E6:E6:89:82:57:38:F3:C5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxEun9_jlTUtb7GC5uaJglc488U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:ea:45:3c:41:2a:a6:65:7e:c7:31:bf:2f:07:41:87:85:
a1:6d:72:6c:e5:0e:fa:66:8f:b3:59:7d:9c:d4:66:01:8b:49:
c3:91:fe:e2:6d:c1:e2:85:b2:54:0d:3f:44:10:a5:07:87:87:
a9:f2:44:74:99:bb:fb:5d:7c:b9:1d:89:6d:b1:71:95:96:9d:
a3:ad:f2:49:75:5f:57:d5:b0:2d:16:48:50:f2:68:7b:58:20:
d8:83:ef:61:b7:dd:fc:32:64:35:44:e8:c6:47:32:bf:cf:70:
79:4f:97:90:94:99:c4:4d:37:e3:dc:b4:b8:d7:dd:5d:82:ef:
25:bc:04:25:ef:18:d7:de:30:95:91:d3:52:d3:44:58:f5:86:
5e:4a:1b:9e:7b:fb:71:a4:10:7a:0c:93:98:d1:27:f9:90:22:
62:83:6b:53:b9:96:55:2c:8a:f9:ef:61:0f:79:3d:00:7c:c5:
71:51:7a:35:f7:ce:3a:1a:ff:f9:90:a9:71:8b:bb:79:c9:6f:
b4:e7:06:1e:bf:50:22:31:f2:91:7a:85:18:e1:44:66:89:75:
11:68:ed:de:d5:06:19:e2:64:dd:60:d3:6d:83:dc:c6:01:79:
39:15:4e:9b:f1:3b:a3:01:3e:82:f0:89:33:78:82:60:23:97:
01:1c:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client