Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/lvaBEefREte9megKsuTphpZWEYI.roa
File: lvaBEefREte9megKsuTphpZWEYI.roa (raw, json)
Hash identifier: gtzJ7Yq4UBIaiaj1g0GucnUUIgufu6zUuc3MZU4/efU=
Subject key identifier: 96:F6:81:11:E7:D1:12:D7:BD:99:E8:0A:B2:E4:E9:86:96:56:11:82
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019E8A4178E61A80CAD894E69A978075824F
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/lvaBEefREte9megKsuTphpZWEYI.roa
Signing time: Tue 02 Jun 2026 21:33:26 +0000
ROA not before: Tue 02 Jun 2026 21:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216024
IP address blocks: 85.137.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:41:78:e6:1a:80:ca:d8:94:e6:9a:97:80:75:82:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Jun 2 21:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96f68111e7d112d7bd99e80ab2e4e98696561182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:3a:77:0d:df:be:77:cd:01:dd:df:e3:e8:
2e:73:c3:55:31:6e:c5:58:dc:43:ac:39:bd:d2:90:
70:b6:dc:36:41:bd:99:0f:c2:8e:fc:5a:03:57:49:
a4:c8:30:97:fb:d8:52:d8:e3:ef:a0:aa:0a:b1:2b:
25:93:ed:0d:c5:d5:3d:ed:c8:af:8d:dc:35:3d:74:
35:52:15:8f:bd:cd:9f:ba:14:e1:83:24:22:d1:4d:
f0:7f:03:40:0e:3a:d8:30:c6:b7:c2:82:eb:f4:13:
a9:40:b3:5b:ff:97:c9:0a:da:34:d9:e9:3e:a5:9a:
c4:5d:b2:c8:fd:5c:ae:9c:f1:2f:90:35:2b:7e:1d:
dd:a8:30:80:d5:d0:ec:08:df:ea:27:1a:07:03:10:
1e:5d:2b:cd:8d:9f:46:85:83:0b:4c:0d:42:79:36:
56:2f:0e:19:92:e1:5e:32:54:e3:e9:24:da:16:0c:
ef:59:63:b5:7f:2b:fb:62:76:2a:fa:83:a4:65:1a:
6c:ec:6a:20:b3:71:b5:f5:ae:aa:fc:04:03:cd:f6:
68:50:1a:0a:37:a7:a9:53:84:32:38:e2:6b:bc:78:
5c:5d:fe:10:55:ea:70:9a:82:e8:64:8a:ce:a1:aa:
64:80:89:eb:e1:63:d1:22:e2:20:fa:70:f5:8b:65:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:81:11:E7:D1:12:D7:BD:99:E8:0A:B2:E4:E9:86:96:56:11:82
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/lvaBEefREte9megKsuTphpZWEYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:15:27:35:c9:11:b0:e1:8a:8d:a3:3b:b6:cd:f5:6f:02:91:
93:28:4c:16:20:06:e7:e7:35:b3:c1:c6:f4:fe:48:0b:76:4a:
10:c5:95:91:a2:2b:ba:b7:73:82:ad:f6:3e:22:25:2a:a2:a6:
d3:77:af:7a:98:42:2a:98:8d:a9:ab:0a:f2:1c:85:d9:8c:e3:
2a:b1:1d:d8:00:8b:99:ac:75:20:82:3b:7f:d5:8d:ae:64:cb:
4f:1f:33:65:7f:0b:4b:01:ba:73:c2:22:7f:91:99:3e:96:fc:
9d:ec:fe:96:ec:39:93:c7:c5:46:20:aa:16:88:82:55:85:66:
91:c0:6f:33:da:b2:86:4e:5b:92:12:d5:ec:fa:d7:e4:69:5a:
51:9d:9f:5c:17:79:96:40:aa:a7:ea:b0:da:f9:80:57:a8:d9:
cc:ee:db:f7:47:bb:7d:d3:34:49:6b:fb:0d:fd:2b:48:6a:75:
8e:26:74:5b:5e:07:ce:60:32:7f:c6:26:0e:80:d5:7d:40:2e:
cc:1d:9d:9b:65:6b:c5:6b:0c:1a:fd:60:d3:77:b9:6a:8b:38:
c1:58:ba:0d:6b:80:ec:e7:39:f6:82:3a:77:90:58:2c:44:f9:
e8:b5:51:e2:b4:7a:f6:b4:9e:78:46:ee:95:d8:5d:28:03:6a:
26:16:b8:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6KQXjmGoDK2JTmmpeAdYJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwNjAyMjEzMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmY2ODExMWU3ZDExMmQ3YmQ5OWU4MGFiMmU0ZTk4Njk2NTYxMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xg6dw3fvnfNAd3f4+guc8NVMW7F
WNxDrDm90pBwttw2Qb2ZD8KO/FoDV0mkyDCX+9hS2OPvoKoKsSslk+0NxdU97civ
jdw1PXQ1UhWPvc2fuhThgyQi0U3wfwNADjrYMMa3woLr9BOpQLNb/5fJCto02ek+
pZrEXbLI/VyunPEvkDUrfh3dqDCA1dDsCN/qJxoHAxAeXSvNjZ9GhYMLTA1CeTZW
Lw4ZkuFeMlTj6STaFgzvWWO1fyv7YnYq+oOkZRps7Gogs3G19a6q/AQDzfZoUBoK
N6epU4QyOOJrvHhcXf4QVepwmoLoZIrOoapkgInr4WPRIuIg+nD1i2WenwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJb2gRHn0RLXvZnoCrLk6YaWVhGCMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvbHZhQkVlZlJFdGU5bWVnS3N1VHBocFpXRVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYkYMA0G
CSqGSIb3DQEBCwUAA4IBAQB+FSc1yRGw4YqNozu2zfVvApGTKEwWIAbn5zWzwcb0
/kgLdkoQxZWRoiu6t3OCrfY+IiUqoqbTd696mEIqmI2pqwryHIXZjOMqsR3YAIuZ
rHUggjt/1Y2uZMtPHzNlfwtLAbpzwiJ/kZk+lvyd7P6W7DmTx8VGIKoWiIJVhWaR
wG8z2rKGTluSEtXs+tfkaVpRnZ9cF3mWQKqn6rDa+YBXqNnM7tv3R7t90zRJa/sN
/StIanWOJnRbXgfOYDJ/xiYOgNV9QC7MHZ2bZWvFawwa/WDTd7lqizjBWLoNa4Ds
5zn2gjp3kFgsRPnotVHitHr2tJ54Ru6V2F0oA2omFrjy
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:42 2026 by rpki-client