Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/LZQRNy_ENT-8O34qcLxuaQWSeHM.roa
File: LZQRNy_ENT-8O34qcLxuaQWSeHM.roa (raw, json)
Hash identifier: OON3viUqIKHDsT02HiaCa59c3M67rxH/jkpVWHuyTwU=
Subject key identifier: 2D:94:11:37:2F:C4:35:3F:BC:3B:7E:2A:70:BC:6E:69:05:92:78:73
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FF67E4B2C4B6F8404268EF18F54B32E90
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/LZQRNy_ENT-8O34qcLxuaQWSeHM.roa
Signing time: Wed 12 Aug 2026 15:01:39 +0000
ROA not before: Wed 12 Aug 2026 15:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219148
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:7e:4b:2c:4b:6f:84:04:26:8e:f1:8f:54:b3:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 12 15:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d9411372fc4353fbc3b7e2a70bc6e6905927873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:1a:f3:91:23:00:b1:b7:52:51:45:40:7d:
07:60:b3:eb:ae:bb:9e:97:60:49:fd:9d:78:9e:68:
b6:f7:1d:79:b9:cb:cd:6a:5d:58:65:cc:d1:32:fd:
b2:c6:66:bd:37:59:0e:39:93:88:0b:e2:c8:4a:47:
f9:d6:be:0e:0d:c7:02:a1:46:4d:ad:6f:12:ac:c3:
31:79:60:85:30:49:26:73:51:93:f5:57:c3:d7:36:
7b:8b:64:aa:5b:ba:1d:e6:fd:62:4b:5e:9d:51:ea:
91:30:30:05:54:1c:cd:14:b7:16:f3:7c:b4:d0:a9:
61:c4:2a:6a:0a:76:92:85:04:89:46:e9:7c:41:4a:
6a:85:fc:8b:6c:40:b0:02:7d:c0:c5:42:20:32:80:
ae:47:a8:7a:45:af:06:fa:6c:54:67:70:af:fc:b3:
df:64:7c:06:94:59:17:4b:25:b0:b6:06:40:37:c0:
33:79:c0:a9:f9:51:96:80:02:ae:07:8e:ef:a0:98:
ff:61:55:7a:b9:26:f7:3b:c6:eb:85:2d:27:8b:a6:
6c:f4:af:63:ee:d4:54:96:1e:79:70:93:71:3c:1c:
f9:58:71:d7:0d:3b:06:d4:6b:b4:38:ea:44:1a:e6:
ac:26:ea:c8:b7:af:3a:bd:31:f0:43:d2:10:f4:72:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:11:37:2F:C4:35:3F:BC:3B:7E:2A:70:BC:6E:69:05:92:78:73
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/LZQRNy_ENT-8O34qcLxuaQWSeHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ca:29:25:46:02:bf:2d:24:29:ab:1c:be:b7:80:f0:dd:5c:
9b:7e:f9:1f:96:6d:99:e8:45:29:98:89:89:ca:a1:8e:55:e4:
7b:b6:18:14:9f:ed:f3:a7:15:8c:66:13:17:5d:f9:8b:d3:10:
7c:5b:7e:74:9c:ea:12:6d:a4:41:08:04:2c:3d:d2:01:09:c2:
9e:c1:a0:ab:8b:76:a5:71:d0:0d:71:1b:75:11:28:0a:e6:b9:
04:f5:80:5c:f4:a7:e9:a7:fd:90:17:94:a2:f0:32:79:54:e2:
7f:f0:81:ee:9f:9f:51:7e:9d:8e:ab:cd:ec:a0:d3:07:ef:42:
0f:d9:96:00:f5:37:2c:a8:02:79:5e:b7:16:42:26:4a:b7:3a:
e0:aa:6e:ab:92:3a:27:3f:20:18:c1:b7:5f:a2:55:54:58:b8:
a2:2a:bc:c4:1e:3e:11:b4:1f:fc:bc:63:ad:42:4b:d3:f3:fa:
a2:d9:42:fb:91:57:94:3e:4a:c3:1c:f3:93:2b:59:db:51:79:
d9:d3:28:4e:ca:00:f8:e6:7a:aa:5c:13:e9:45:0a:2d:0f:5d:
1d:e6:d4:50:b8:51:6c:80:14:66:f4:0a:06:8b:6e:17:ba:7d:
de:00:d3:05:83:ae:25:ce:a0:e7:63:fe:77:7d:9e:f4:59:17:
e0:39:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:35 2026 by rpki-client