Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lbM3HE18tP1n-8xfwSm36I3Kjwc.roa
File: lbM3HE18tP1n-8xfwSm36I3Kjwc.roa (raw, json)
Hash identifier: /lryypZYZIxOV9l6lRHbqYF9Oz+FGrmF3FgDwOxoEYQ=
Subject key identifier: 95:B3:37:1C:4D:7C:B4:FD:67:FB:CC:5F:C1:29:B7:E8:8D:CA:8F:07
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019EF4DAB9875F8B61CA1F38621B7BEAAED9
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lbM3HE18tP1n-8xfwSm36I3Kjwc.roa
Signing time: Tue 23 Jun 2026 14:20:35 +0000
ROA not before: Tue 23 Jun 2026 14:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 87.232.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:da:b9:87:5f:8b:61:ca:1f:38:62:1b:7b:ea:ae:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jun 23 14:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b3371c4d7cb4fd67fbcc5fc129b7e88dca8f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:37:70:22:31:51:0b:cd:62:8b:8f:2f:2a:
dc:99:4c:12:b0:6e:ae:26:7e:15:a9:c9:70:a1:9f:
20:71:9e:e7:dd:26:5d:e8:09:02:f4:0b:e4:9e:6a:
bf:e1:bc:33:76:4a:78:1a:94:38:2f:94:05:bf:4f:
27:88:64:88:ad:0c:2d:60:2a:6f:c5:1a:7b:ec:45:
2e:9c:a8:be:fc:de:66:af:be:60:bb:81:36:5b:72:
35:45:97:b0:78:47:77:72:84:d6:eb:30:1c:02:8c:
4a:59:e4:3b:2a:a6:e9:36:56:35:2c:4e:43:ea:a6:
3e:48:8a:cd:84:e7:9e:d7:98:f7:63:ec:be:37:c5:
8c:e4:8f:f7:cb:84:c6:b0:76:df:a2:2a:7d:f9:21:
47:49:87:bf:43:da:8a:dd:c6:b1:78:78:36:0a:e1:
fc:90:7f:97:a1:71:30:84:65:a9:c3:2a:05:c4:fa:
51:81:3c:4e:02:fd:66:6b:6a:7d:4c:54:98:2f:e8:
a5:55:e4:40:18:cc:8d:b8:7a:03:44:aa:ef:41:70:
fe:e6:cb:da:a6:d4:42:bf:4b:90:29:11:bc:bb:f4:
3e:be:83:96:b9:02:56:72:dc:84:84:03:73:eb:85:
7d:d3:b8:41:ba:16:52:7b:82:bc:38:f6:ed:94:21:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:37:1C:4D:7C:B4:FD:67:FB:CC:5F:C1:29:B7:E8:8D:CA:8F:07
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lbM3HE18tP1n-8xfwSm36I3Kjwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.72.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3a:7b:bf:3f:55:54:78:99:0e:a1:a7:66:b1:82:32:34:fa:
b4:9a:25:b6:b4:27:6b:91:cc:a9:a5:3a:b4:02:01:d8:6a:80:
0b:8f:e7:c2:14:73:18:94:52:80:87:fa:c9:7a:23:3f:22:82:
97:5f:72:82:76:1d:e4:4b:ae:6d:46:ef:9d:7d:60:ff:93:61:
74:15:f6:e7:3a:19:9f:6f:52:d0:61:48:a7:ec:df:87:59:60:
53:f0:f6:18:ee:2f:a9:0f:d9:b7:b1:5e:53:11:4b:87:3d:6c:
75:9a:ad:fb:9a:51:cf:f5:47:56:1b:9f:77:01:62:7a:c3:b9:
e5:50:c9:e9:ff:93:df:4b:e8:31:f9:ac:c6:55:08:e9:ed:c4:
2d:98:e0:93:df:f8:a1:89:93:0a:ce:41:25:37:cb:4f:42:06:
f6:2f:49:2e:7b:80:be:eb:b8:c0:20:0d:f8:28:c4:48:10:d6:
68:de:c4:69:51:7e:e6:04:b0:cf:9b:fc:75:b0:0f:1e:b2:39:
9a:fb:2f:15:c6:32:d6:49:03:3b:b8:d1:99:15:b4:13:99:e0:
5a:a1:bc:de:ec:e8:f3:37:55:cc:11:02:a4:c3:04:28:3a:8d:
7b:1c:05:de:d4:0c:d4:0e:70:82:9f:5e:ce:4a:ce:40:7c:d2:
6a:a6:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:15 2026 by rpki-client