Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LXLoDDkFQ6Eq-e9PSLxcNL1CWjE.roa
File: LXLoDDkFQ6Eq-e9PSLxcNL1CWjE.roa (raw, json)
Hash identifier: UP/S0T2fNsIataI6RSCXJsw8ziGyFwyIJrVoyNWrhrQ=
Subject key identifier: 2D:72:E8:0C:39:05:43:A1:2A:F9:EF:4F:48:BC:5C:34:BD:42:5A:31
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019E201AEFD9D0B3FCD2EC2F803CD1920136
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LXLoDDkFQ6Eq-e9PSLxcNL1CWjE.roa
Signing time: Wed 13 May 2026 06:51:36 +0000
ROA not before: Wed 13 May 2026 06:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:1a:ef:d9:d0:b3:fc:d2:ec:2f:80:3c:d1:92:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 13 06:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d72e80c390543a12af9ef4f48bc5c34bd425a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:32:ff:7a:c4:34:b6:9b:df:27:bc:ae:36:
6c:2b:3f:ff:62:19:0a:11:08:82:38:25:12:2c:49:
6c:42:92:72:a0:f3:a8:96:a5:08:9f:c8:99:b7:85:
c6:81:fd:48:cb:cb:b5:94:14:57:4c:52:1b:cc:0d:
0d:d4:1d:59:fd:c3:06:6e:a6:c9:77:58:3f:6f:84:
0b:21:f1:d4:c0:d3:56:7f:3a:6e:db:a6:ad:ba:41:
ae:52:86:26:c5:78:29:ef:e5:71:a3:cf:94:76:3d:
3c:fd:84:43:3d:7f:d9:48:50:78:4d:a8:7c:df:ad:
ae:0a:45:0b:00:a4:23:15:05:7d:df:2e:22:1b:f2:
38:4c:0f:25:89:03:78:8a:fd:58:c7:43:ec:63:bd:
a3:b3:4f:37:0f:19:b7:55:61:a0:86:d1:a2:a3:98:
89:f9:59:4e:ff:f1:13:b9:3b:3c:6c:e5:24:b0:d5:
e1:81:6b:07:ae:c0:a2:e1:a7:05:5c:48:f9:51:59:
35:14:5a:c6:7c:fc:f7:4e:c5:c4:71:22:d5:6f:8c:
b4:19:aa:bb:86:71:80:53:3e:3a:cc:64:c4:bb:e0:
ad:90:a6:05:ee:24:87:01:67:f6:6a:ae:df:ae:e7:
82:49:81:a4:17:f0:07:51:53:5e:5e:1d:17:36:34:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:E8:0C:39:05:43:A1:2A:F9:EF:4F:48:BC:5C:34:BD:42:5A:31
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LXLoDDkFQ6Eq-e9PSLxcNL1CWjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
85:66:3c:52:95:67:6e:75:b2:54:30:08:0c:87:45:90:67:24:
3a:49:8e:87:5d:5a:96:7c:6c:6c:93:3d:b2:66:1c:83:ac:34:
cd:c8:a4:83:1f:a5:e5:e7:b6:d6:ca:ba:6b:84:6c:1d:2f:68:
c8:00:b8:0b:3b:79:b4:15:e2:75:6c:ee:fc:a1:57:5d:6d:d7:
ef:f4:40:d5:4f:06:fe:de:00:3d:50:37:67:8b:96:bf:28:93:
36:86:f0:bb:21:68:e4:e8:15:12:ce:10:39:45:c2:83:33:a9:
d4:c5:af:b7:a4:02:4a:0e:fa:9f:1a:6a:f2:60:ac:4f:df:50:
96:3a:db:ec:4b:28:e3:1d:61:d0:55:1e:b8:50:dc:55:a3:a0:
80:bc:11:29:ac:8b:47:ca:37:bd:ee:4d:9f:da:93:ff:8e:c1:
98:d1:00:d4:97:a8:3b:1d:71:dd:8d:dd:6c:fe:f9:ce:dc:b4:
f2:31:19:ee:25:36:89:60:1b:84:2c:6c:8e:a1:ef:11:0b:ba:
b4:71:04:c4:b7:15:6b:e7:c1:7a:27:9b:9e:c4:4c:b3:ed:2b:
00:af:40:79:95:2e:52:5a:e2:b5:6e:79:29:1f:01:15:31:52:
7f:2c:8c:29:08:53:5b:5c:5f:aa:b5:7d:55:a3:0e:4c:99:7c:
e3:93:96:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4gGu/Z0LP80uwvgDzRkgE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjYwNTEzMDY1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDcyZTgwYzM5MDU0M2ExMmFmOWVmNGY0OGJjNWMzNGJkNDI1YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHwy/3rENLab3ye8rjZsKz//YhkK
EQiCOCUSLElsQpJyoPOolqUIn8iZt4XGgf1Iy8u1lBRXTFIbzA0N1B1Z/cMGbqbJ
d1g/b4QLIfHUwNNWfzpu26atukGuUoYmxXgp7+Vxo8+Udj08/YRDPX/ZSFB4Tah8
362uCkULAKQjFQV93y4iG/I4TA8liQN4iv1Yx0PsY72js083Dxm3VWGghtGio5iJ
+VlO//ETuTs8bOUksNXhgWsHrsCi4acFXEj5UVk1FFrGfPz3TsXEcSLVb4y0Gaq7
hnGAUz46zGTEu+CtkKYF7iSHAWf2aq7frueCSYGkF/AHUVNeXh0XNjRUeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1y6Aw5BUOhKvnvT0i8XDS9QloxMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvTFhMb0REa0ZRNkVxLWU5UFNMeGNOTDFDV2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVEcMA0G
CSqGSIb3DQEBCwUAA4IBAQCFZjxSlWdudbJUMAgMh0WQZyQ6SY6HXVqWfGxskz2y
ZhyDrDTNyKSDH6Xl57bWyrprhGwdL2jIALgLO3m0FeJ1bO78oVddbdfv9EDVTwb+
3gA9UDdni5a/KJM2hvC7IWjk6BUSzhA5RcKDM6nUxa+3pAJKDvqfGmryYKxP31CW
OtvsSyjjHWHQVR64UNxVo6CAvBEprItHyje97k2f2pP/jsGY0QDUl6g7HXHdjd1s
/vnO3LTyMRnuJTaJYBuELGyOoe8RC7q0cQTEtxVr58F6J5uexEyz7SsAr0B5lS5S
WuK1bnkpHwEVMVJ/LIwpCFNbXF+qtX1Vow5MmXzjk5Yj
-----END CERTIFICATE-----
Generated at Fri May 15 08:17:22 2026 by rpki-client