Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LVM1havmDmPRxuWXSVuK5vWcrMU.roa
File: LVM1havmDmPRxuWXSVuK5vWcrMU.roa (raw, json)
Hash identifier: 1Q8Ng00cIb+XpO6Bt/XfVfRrOBlQXbhfb7FY0cuThKc=
Subject key identifier: 2D:53:35:85:AB:E6:0E:63:D1:C6:E5:97:49:5B:8A:E6:F5:9C:AC:C5
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FEF3B090DB03A4463004861A025C9983C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LVM1havmDmPRxuWXSVuK5vWcrMU.roa
Signing time: Tue 11 Aug 2026 05:10:51 +0000
ROA not before: Tue 11 Aug 2026 05:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 83.147.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:3b:09:0d:b0:3a:44:63:00:48:61:a0:25:c9:98:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 11 05:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d533585abe60e63d1c6e597495b8ae6f59cacc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:8a:52:84:d6:a5:29:96:35:72:e0:05:4e:
4b:54:e7:db:78:da:9e:53:a0:10:84:5d:a2:d3:68:
5a:e1:4d:6f:08:e3:96:50:59:44:93:fc:54:a9:ee:
9c:b7:fe:30:77:a5:78:cd:93:a0:66:8b:19:50:aa:
7d:92:41:3e:a5:fe:27:c1:6f:52:0b:1d:0a:de:72:
33:4d:87:5a:5f:6a:7a:9c:fe:23:70:22:c0:e9:05:
a7:37:f9:64:d8:f1:8c:04:b5:26:eb:fe:9d:9b:37:
7c:05:44:8f:ed:4f:be:f1:0d:8c:92:cd:8b:54:45:
c3:cd:14:81:98:c7:f9:df:15:d1:f2:6d:57:9d:20:
c3:0b:f1:b2:68:de:9c:be:ef:63:f6:6d:b8:83:a5:
e3:3c:5d:cb:1b:cd:16:88:ab:51:6a:1b:f7:47:11:
e8:6a:3b:18:2d:d6:19:42:db:70:b0:28:fe:43:c7:
0e:3d:21:56:ea:dd:17:69:9b:b3:e5:8a:d0:21:3c:
30:a9:9a:70:b1:68:29:c5:27:88:d5:cb:ec:73:26:
5f:8a:63:ba:3c:04:05:77:5c:19:c8:88:a4:c4:3d:
24:e0:41:2b:f8:71:99:e9:e8:c5:f6:3e:81:54:9c:
0e:16:07:21:cd:59:cd:36:11:31:9e:a8:34:01:ad:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:35:85:AB:E6:0E:63:D1:C6:E5:97:49:5B:8A:E6:F5:9C:AC:C5
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LVM1havmDmPRxuWXSVuK5vWcrMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.27.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8f:83:97:8c:23:a0:cb:f4:45:98:1d:05:01:06:14:2c:15:
cf:9a:74:e4:ff:cf:bb:4f:83:f3:8d:de:77:73:26:5f:6c:cd:
fd:d2:07:cd:c8:8b:94:23:68:f6:08:30:d4:42:7b:b1:d1:77:
04:1b:11:3d:5c:36:24:90:94:ab:77:3d:fd:01:74:f7:e6:66:
04:0a:87:65:60:7c:3c:1a:2b:bd:5c:80:19:7e:3f:a1:88:98:
53:66:d5:e9:73:2c:0c:95:16:9f:f8:b8:9d:e1:8c:89:b4:04:
f6:73:51:32:d6:30:f6:43:c1:11:e2:42:62:44:70:af:28:35:
29:e9:31:db:25:af:07:74:b5:f0:d7:ad:e8:cc:4e:07:45:bb:
ff:64:5e:9c:de:23:7d:29:8f:40:c4:35:76:f0:ab:14:7a:fa:
bd:3d:20:fb:7b:72:f6:f3:98:d5:db:c4:bd:4b:73:e6:f0:82:
db:16:76:b9:1f:84:90:6a:0a:df:ab:a0:fb:87:a4:77:27:80:
6d:36:aa:9d:74:e5:5a:e7:9d:e5:74:26:75:89:b6:aa:15:0a:
fd:3c:1a:6a:ef:13:25:b2:2d:29:b7:da:22:dc:27:23:d2:d0:
75:dd:08:2e:6e:21:6e:62:90:57:e3:4a:49:f2:32:90:21:52:
2e:82:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:34:37 2026 by rpki-client