Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LmMx--qBV_mOFQfnfqU96MU2vOA.roa
File: LmMx--qBV_mOFQfnfqU96MU2vOA.roa (raw, json)
Hash identifier: 5xY9BD/vgFjnAZ6DmOxHE3CqPKyiqsETXKSOlzf6ymg=
Subject key identifier: 2E:63:31:FB:EA:81:57:F9:8E:15:07:E7:7E:A5:3D:E8:C5:36:BC:E0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F767173A8A2C28A923B3890C92C9FDC76
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LmMx--qBV_mOFQfnfqU96MU2vOA.roa
Signing time: Sat 18 Jul 2026 18:16:14 +0000
ROA not before: Sat 18 Jul 2026 18:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 89.33.194.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:71:73:a8:a2:c2:8a:92:3b:38:90:c9:2c:9f:dc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 18 18:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e6331fbea8157f98e1507e77ea53de8c536bce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:d6:ca:4a:e9:da:ef:b7:84:e1:53:1b:79:
8d:fb:b9:54:30:8e:c1:fc:55:94:10:df:4d:f3:8a:
d1:d6:ad:da:c4:b3:b3:99:08:13:0b:4b:76:6b:fd:
91:de:8c:70:52:e8:f8:0f:4b:05:6c:25:a3:32:66:
0f:ee:99:2f:21:9b:05:b0:bd:ee:55:65:0d:83:7f:
ce:57:8c:ea:9f:2a:05:59:64:47:28:76:75:39:9e:
c0:40:a5:dc:de:11:66:92:d6:56:bf:8a:27:73:a9:
9c:9a:bd:e3:18:33:d3:78:c0:b4:9a:1b:25:47:8f:
b3:15:ed:82:88:eb:03:24:f4:6b:ee:74:3d:c1:e3:
d5:60:a1:fe:6b:8d:bf:df:17:00:f8:76:f4:89:df:
ee:d0:c0:59:0a:3a:fd:3d:d5:27:c1:2c:44:cb:76:
48:d2:5e:f7:e2:8a:c1:ee:ba:4d:53:0f:c1:f5:c8:
7f:4a:b9:12:49:f7:38:89:1f:4c:5b:8e:a0:24:c1:
94:10:c0:b9:9a:bc:ae:ba:57:e4:be:a3:59:37:ce:
09:95:26:a9:ce:8f:04:54:f7:5e:49:c0:24:a3:d5:
41:80:a9:ed:fe:c8:fe:61:7e:90:e4:0f:dc:af:23:
15:c0:21:69:a8:f0:bc:fa:88:9d:1e:08:b0:66:04:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:31:FB:EA:81:57:F9:8E:15:07:E7:7E:A5:3D:E8:C5:36:BC:E0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LmMx--qBV_mOFQfnfqU96MU2vOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
29:78:5f:52:4c:ef:7d:4b:b2:95:a8:f7:0c:15:40:d5:4d:97:
a6:8d:f3:9f:3e:92:76:07:65:b9:a6:4a:88:99:8d:78:4c:8b:
a7:e5:2d:37:c3:29:fa:ef:f1:a8:85:e4:2a:91:13:e2:02:dd:
84:ec:03:d9:30:4f:90:fb:2d:24:26:fc:7c:97:d6:27:7a:83:
0c:a0:53:26:f0:f7:0b:1f:10:0e:8e:5f:54:26:7e:f0:62:e6:
63:a3:2f:20:2f:77:02:f2:9e:58:d3:97:45:76:15:38:d6:d6:
03:ef:ec:23:b4:18:f9:e2:52:3c:c0:ad:61:cf:26:c5:78:4d:
82:8b:81:dc:0e:f3:c3:be:f4:e6:4b:ba:38:f7:4d:8d:ba:83:
05:bb:a6:ec:ff:68:a7:35:2d:57:3d:97:91:a8:39:89:4d:47:
83:86:ef:90:83:ca:b1:53:cd:c8:d7:26:ca:8a:05:9f:ff:64:
f8:0a:67:05:6d:d3:5e:7e:89:ad:da:77:dd:e5:a4:2f:c3:56:
1e:62:f3:95:18:df:a8:c7:51:d4:de:0f:fa:c4:65:b7:b3:9e:
44:f5:bd:c5:28:a9:a0:84:39:6f:98:42:18:ef:7a:16:e5:c3:
1a:98:ad:f7:aa:c0:de:d0:c1:b3:f4:90:e3:d6:26:b5:53:f8:
58:0a:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:06 2026 by rpki-client