Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa
File: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (raw, json)
Hash identifier: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=
Subject key identifier: 2C:19:12:AB:94:7A:5D:66:CF:76:1E:2F:34:10:60:EC:80:E3:F8:3D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A03FBD07145D09B8B62F8EF22B8151B407
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa
Signing time: Wed 26 Aug 2026 20:22:27 +0000
ROA not before: Wed 26 Aug 2026 20:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218880
IP address blocks: 45.74.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:bd:07:14:5d:09:b8:b6:2f:8e:f2:2b:81:51:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 26 20:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c1912ab947a5d66cf761e2f341060ec80e3f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:54:8a:ba:36:db:85:2a:26:63:ca:7a:48:
c6:8b:f6:b4:4c:65:6f:9d:bf:f1:15:c8:6c:42:3f:
c0:b6:70:5f:68:0f:a9:92:d7:c5:55:7c:da:3b:b2:
51:a0:34:c8:7a:04:84:5b:25:5d:68:38:1b:cd:a9:
c3:ec:75:d8:1f:d4:aa:db:68:33:a8:25:3e:cd:04:
fe:1d:4b:74:e0:8c:41:2b:33:39:e3:8b:46:ae:69:
50:af:1a:57:7f:8c:23:39:a9:03:4c:b9:6d:d6:5f:
b9:89:d2:8f:c2:7e:87:eb:49:0a:a8:46:f1:c2:40:
9f:c2:ca:f6:19:24:4d:21:8d:cc:30:d7:32:7a:eb:
e9:3f:07:9e:09:f2:6b:72:92:ae:db:bf:0e:01:c9:
6d:31:90:82:f1:79:cc:8e:13:ce:68:14:d8:2b:0e:
10:46:54:98:72:f8:8a:3b:90:b3:e8:4f:dd:c2:3d:
f3:c1:4f:c3:8b:cb:b6:7e:1c:d1:1c:a4:82:53:40:
6a:fe:98:95:d6:69:dd:70:37:cd:6f:6f:80:81:cb:
86:50:76:2a:1c:85:09:80:32:c1:e1:a0:e1:d7:bf:
59:90:99:a6:4c:4d:2d:30:04:f0:0f:12:38:73:50:
e3:28:e8:95:c8:3f:c5:03:be:21:0c:78:f2:ea:82:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:12:AB:94:7A:5D:66:CF:76:1E:2F:34:10:60:EC:80:E3:F8:3D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.176.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dc:15:9e:fa:47:42:93:32:f6:06:89:bb:97:ee:fc:73:69:
f0:59:ef:21:50:2f:93:2b:f7:a4:47:8f:40:3c:7e:19:31:f9:
65:8d:eb:b9:13:ac:79:93:ae:ff:69:b5:0f:db:42:0f:27:5c:
0a:71:48:71:2b:da:2d:1c:7a:f9:61:06:87:06:4e:91:ba:08:
82:a8:5b:ba:23:bb:1f:11:6a:fe:c0:61:d4:86:84:49:7c:0b:
5a:21:1c:1a:e8:60:32:50:16:f4:6e:c5:19:2e:3e:e8:fb:b7:
d2:6b:7b:fb:0c:ed:10:f6:8a:d0:a7:70:e4:6f:ff:be:07:10:
e4:80:cc:c8:dc:ad:0e:89:17:c0:98:5a:78:48:d8:98:75:d0:
61:45:48:2d:a8:35:d0:59:86:6e:c5:a8:3a:81:a5:14:b0:0c:
ab:2a:42:a8:79:84:4f:a2:19:c8:17:d8:30:ba:8a:ec:99:bf:
3c:a1:74:fd:d5:06:fd:a4:98:64:36:6b:36:c1:b5:89:df:97:
53:a2:69:56:85:ed:d6:7f:31:d6:28:36:e5:db:87:a6:a7:0a:
af:6c:ab:18:94:8c:2a:ca:c8:1a:a2:d9:6d:1a:3c:28:b7:10:
b7:87:bb:55:d7:1a:e0:e7:eb:4f:69:ce:a7:5a:e3:c6:d2:ef:
f7:f7:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:27 2026 by rpki-client