Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxlv_EwSRcG1p0EnV_7cdQzZbGk.roa
File:                     lxlv_EwSRcG1p0EnV_7cdQzZbGk.roa (raw, json)
Hash identifier:          HDUZqK5wozVAR0KMV8WtZy7GmlSeHPdLW1gAwF1TA7E=
Subject key identifier:   97:19:6F:FC:4C:12:45:C1:B5:A7:41:27:57:FE:DC:75:0C:D9:6C:69
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019EFB1850440B04E9E4B27480ECC95DF237
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxlv_EwSRcG1p0EnV_7cdQzZbGk.roa
Signing time:             Wed 24 Jun 2026 19:25:35 +0000
ROA not before:           Wed 24 Jun 2026 19:25:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207449
IP address blocks:        212.212.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:18:50:44:0b:04:e9:e4:b2:74:80:ec:c9:5d:f2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jun 24 19:25:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97196ffc4c1245c1b5a7412757fedc750cd96c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:e4:64:c3:56:85:5d:2e:fa:ee:c1:3c:fd:
                    f3:68:4d:fb:9f:73:a6:bb:77:50:71:de:ca:2f:e7:
                    03:be:55:d3:70:60:11:b9:26:b4:ea:11:0b:67:81:
                    30:34:c9:e2:71:bf:90:ab:a0:0f:32:7d:ac:ff:50:
                    4d:94:01:e7:24:59:3e:1f:89:fc:cd:19:6b:9c:4d:
                    48:b6:79:08:a6:66:c4:99:c0:aa:77:90:a5:21:04:
                    ba:86:15:51:e8:22:31:f8:ed:72:31:6e:28:c8:c4:
                    06:cf:2b:9e:c7:a6:3a:51:63:53:6c:b8:f2:f8:42:
                    27:fc:21:89:e6:f6:41:4f:6a:db:fb:d0:d5:8e:18:
                    73:98:49:8d:e8:f5:b5:bf:ef:ed:07:7c:72:ae:2c:
                    50:a0:27:45:51:d3:60:fc:fa:f9:ac:8e:51:c1:ef:
                    49:53:28:d0:73:34:2f:f6:73:40:63:24:ea:de:62:
                    70:2d:82:5b:0f:ed:bb:a7:f9:87:0d:0f:18:1f:36:
                    3d:dd:9a:d8:73:91:4c:c8:9f:70:4c:da:98:a6:c1:
                    5a:ef:7a:ec:b7:f4:ed:49:9a:4c:71:7e:44:42:cc:
                    d4:e1:37:f4:c5:88:b0:9f:fa:3b:c2:d6:f7:89:9c:
                    0a:0b:6b:bf:43:df:14:1d:67:4d:3c:fd:d7:2c:7e:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:19:6F:FC:4C:12:45:C1:B5:A7:41:27:57:FE:DC:75:0C:D9:6C:69
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lxlv_EwSRcG1p0EnV_7cdQzZbGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.212.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:23:de:fc:41:95:7c:a6:ad:ad:91:8f:80:66:1d:a9:ee:e9:
         80:26:59:53:4f:9b:e5:db:15:ae:06:b5:10:c3:b7:20:e9:64:
         26:13:a6:77:48:ff:02:9a:6f:59:ba:04:42:55:a4:8b:2c:18:
         8e:3f:a4:3e:e0:11:76:78:6f:21:2e:31:63:69:eb:87:b8:2e:
         5c:25:a7:d9:e4:68:be:a3:68:ab:ce:7a:36:e0:6f:27:8e:95:
         b4:37:1b:ad:69:2b:44:b6:52:79:1b:fa:32:72:04:7d:33:dc:
         80:36:67:e4:25:2c:69:ac:38:3f:c6:0c:83:31:bd:ae:92:16:
         4b:37:bf:b9:d3:0b:28:d1:aa:5c:41:11:ee:4e:22:2a:2a:17:
         3b:dd:35:c4:d8:9c:97:63:16:d8:0d:85:8c:7a:08:50:73:64:
         e5:24:a4:1e:bd:df:0a:22:a0:47:e7:6b:8e:c2:5d:3e:20:59:
         f3:73:f5:7b:ca:94:1d:01:92:80:7b:e9:dc:59:2a:92:bb:1b:
         fc:97:c7:56:1d:4f:aa:01:de:0c:a3:dd:43:af:c8:8f:eb:f0:
         34:e8:6d:8b:5b:1e:8c:6f:cf:58:8e:78:50:cc:ad:cd:87:fd:
         1c:76:49:ab:b0:f1:80:e4:2b:72:42:41:3b:1e:37:b1:13:51:
         ea:2d:bd:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ77GFBECwTp5LJ0gOzJXfI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjI0MTkyNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE5NmZmYzRjMTI0NWMxYjVhNzQxMjc1N2ZlZGM3NTBjZDk2YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3fkZMNWhV0u+u7BPP3zaE37n3Om
u3dQcd7KL+cDvlXTcGARuSa06hELZ4EwNMnicb+Qq6APMn2s/1BNlAHnJFk+H4n8
zRlrnE1ItnkIpmbEmcCqd5ClIQS6hhVR6CIx+O1yMW4oyMQGzyuex6Y6UWNTbLjy
+EIn/CGJ5vZBT2rb+9DVjhhzmEmN6PW1v+/tB3xyrixQoCdFUdNg/Pr5rI5Rwe9J
UyjQczQv9nNAYyTq3mJwLYJbD+27p/mHDQ8YHzY93ZrYc5FMyJ9wTNqYpsFa73rs
t/TtSZpMcX5EQszU4Tf0xYiwn/o7wtb3iZwKC2u/Q98UHWdNPP3XLH62wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcZb/xMEkXBtadBJ1f+3HUM2WxpMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbHhsdl9Fd1NSY0cxcDBFblZfN2NkUXpaYkdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1NQaMA0G
CSqGSIb3DQEBCwUAA4IBAQA5I978QZV8pq2tkY+AZh2p7umAJllTT5vl2xWuBrUQ
w7cg6WQmE6Z3SP8Cmm9ZugRCVaSLLBiOP6Q+4BF2eG8hLjFjaeuHuC5cJafZ5Gi+
o2irzno24G8njpW0NxutaStEtlJ5G/oycgR9M9yANmfkJSxprDg/xgyDMb2ukhZL
N7+50wso0apcQRHuTiIqKhc73TXE2JyXYxbYDYWMeghQc2TlJKQevd8KIqBH52uO
wl0+IFnzc/V7ypQdAZKAe+ncWSqSuxv8l8dWHU+qAd4Mo91Dr8iP6/A06G2LWx6M
b89YjnhQzK3Nh/0cdkmrsPGA5CtyQkE7HjexE1HqLb2f
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client