Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LY-SGD1QelkegCjsbPqapvkbjrY.roa
File: LY-SGD1QelkegCjsbPqapvkbjrY.roa (raw, json)
Hash identifier: +G5IWSVSGpsnSZ0xr2Vqp1qOX7FIheZx6e6G5kmMdLQ=
Subject key identifier: 2D:8F:92:18:3D:50:7A:59:1E:80:28:EC:6C:FA:9A:A6:F9:1B:8E:B6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A090CE3323678F105E0AE9625483E76C96
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LY-SGD1QelkegCjsbPqapvkbjrY.roa
Signing time: Fri 11 Sep 2026 14:10:27 +0000
ROA not before: Fri 11 Sep 2026 14:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:ce:33:23:67:8f:10:5e:0a:e9:62:54:83:e7:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 11 14:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d8f92183d507a591e8028ec6cfa9aa6f91b8eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:96:0f:1e:6b:40:7a:06:13:18:bc:cf:94:
c3:e9:74:7b:bc:4e:eb:12:76:48:b9:34:98:d1:f9:
5e:d7:87:9d:38:40:26:8d:60:a3:f9:15:d4:a2:8b:
6b:00:24:29:9d:bf:24:d0:5d:62:e5:62:1a:50:ad:
8a:16:9e:5b:a1:62:e1:97:88:af:98:cc:43:fe:dd:
25:d9:12:05:f4:27:14:c2:a1:81:6c:80:e6:22:fc:
15:9e:54:b6:6a:c9:3f:17:a1:c9:9d:86:58:a7:1b:
76:0b:df:3f:79:f2:06:88:41:ce:50:43:f2:9c:61:
68:dd:b1:f9:a1:ac:f3:7a:b8:d3:4b:97:7a:74:2c:
89:69:99:d0:16:55:63:22:75:04:ea:76:b2:cf:0f:
23:2b:9d:99:0f:b7:fe:c1:63:33:ab:6e:be:d4:00:
fa:ad:18:f9:c9:14:9c:74:cb:3d:fc:09:34:a8:be:
9f:48:13:34:cc:eb:49:8b:2e:b9:1f:6a:23:f5:62:
59:a1:af:4f:f4:38:0a:ca:9c:1f:dc:b6:27:c6:9d:
26:9e:a4:92:7b:96:45:4d:ee:9f:40:37:5c:8d:86:
1c:3b:b7:7d:0d:cb:71:51:e5:f5:66:21:ae:fc:d5:
b9:86:8e:57:a7:d9:15:39:0f:eb:71:22:06:98:04:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:92:18:3D:50:7A:59:1E:80:28:EC:6C:FA:9A:A6:F9:1B:8E:B6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LY-SGD1QelkegCjsbPqapvkbjrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.78.0/23
45.88.168.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
185.161.71.0/24
213.59.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:dd:ae:00:84:42:d1:a0:a2:3b:ff:5a:40:25:38:41:5e:a6:
50:5b:ac:66:7f:63:96:99:48:3b:dd:65:bd:c9:d0:5d:b7:da:
90:b5:74:a0:e4:6a:64:6b:37:d7:0b:a0:5a:62:91:00:90:c6:
eb:e2:d4:d9:83:da:c2:a5:30:cf:b2:84:67:93:c6:a8:47:7e:
0f:f6:ca:75:3d:4e:73:c1:b2:af:aa:6a:ad:4c:f0:bf:d3:ce:
8e:d5:a0:3a:82:47:7d:34:4d:b5:b2:4d:09:59:56:c0:8d:c3:
fd:e7:dd:27:20:dc:61:da:f9:3f:9a:e5:80:9f:d3:60:cf:5e:
ff:03:b5:eb:d2:10:94:78:a5:e0:53:54:e9:00:43:16:e3:a3:
35:e6:ab:3c:de:8e:50:43:07:e7:b7:ee:4c:b0:0d:95:fa:2f:
94:4a:c9:08:be:9d:c6:fa:9d:65:ab:06:3c:a7:83:97:37:cb:
63:30:a2:14:ab:66:be:ff:79:8b:c4:e7:c3:fd:5c:95:ce:0c:
f3:43:5c:68:50:48:0e:36:71:ca:79:eb:3d:3e:46:16:c3:ae:
8c:8f:cd:e1:7b:ab:c2:23:fa:ff:aa:95:6c:ea:e1:26:76:2b:
7d:05:50:ce:af:af:21:2c:d6:cf:2f:b8:2d:5d:74:0f:24:35:
df:60:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:34 2026 by rpki-client