Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgRsepsbaNY4sXGEwiBWebVOt8I.roa
File: LgRsepsbaNY4sXGEwiBWebVOt8I.roa (raw, json)
Hash identifier: 8JwGgS1iAW1uqOejwfWwBuOv/y2R9v+7o0DRjMasf/g=
Subject key identifier: 2E:04:6C:7A:9B:1B:68:D6:38:B1:71:84:C2:20:56:79:B5:4E:B7:C2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F14BD950D6D67723A3F9733802A41A832
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgRsepsbaNY4sXGEwiBWebVOt8I.roa
Signing time: Mon 29 Jun 2026 18:56:36 +0000
ROA not before: Mon 29 Jun 2026 18:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 189.75.182.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:bd:95:0d:6d:67:72:3a:3f:97:33:80:2a:41:a8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 29 18:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e046c7a9b1b68d638b17184c2205679b54eb7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:0c:4f:a6:37:d4:fc:2c:35:e8:26:f1:20:
75:10:1e:a4:3c:a4:75:90:59:77:9d:47:10:f1:6b:
32:b0:b9:c7:14:44:95:a5:dd:48:42:bd:da:44:12:
0d:23:9f:5d:de:e7:4d:28:23:97:61:45:1a:06:46:
75:d0:aa:09:4c:80:f7:6f:73:6f:41:f3:d4:76:90:
b0:00:4e:40:9c:c4:6c:72:72:f0:95:c7:1d:23:ad:
56:0a:dc:df:ef:db:a2:41:b1:f8:bd:1f:38:a4:03:
08:a2:10:23:c5:46:6c:75:78:35:33:ce:a7:14:e2:
e9:6a:83:ab:be:fe:15:db:4f:cf:aa:92:e8:60:b9:
8d:8f:e5:f8:9f:0e:8c:c3:83:5d:f6:56:ee:da:25:
dd:98:ee:19:08:a8:3b:40:95:58:e2:1d:d5:60:6d:
9d:63:4a:ee:5c:e4:dd:ed:b1:1c:b2:f1:fd:aa:cf:
55:b6:c6:24:19:a4:38:55:69:ba:e2:a8:9d:93:1b:
f4:fb:cb:46:14:df:d2:c6:bb:fe:ff:e9:e3:dd:b1:
20:78:92:8f:91:fe:00:68:9e:cd:ce:d1:84:a0:06:
7a:b5:9b:4f:3d:6c:a2:07:c6:c9:d4:18:90:91:c2:
f9:ae:6e:b3:01:42:8e:59:f3:c5:e2:6e:75:01:2e:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:6C:7A:9B:1B:68:D6:38:B1:71:84:C2:20:56:79:B5:4E:B7:C2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LgRsepsbaNY4sXGEwiBWebVOt8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.182.0/24
191.219.21.0/24
200.102.181.0/24
200.165.29.0/24
200.181.81.0/24
200.181.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:24:74:1c:f6:96:a7:cf:4b:f0:9d:d0:a3:ff:17:6f:8b:ea:
41:00:aa:6a:ea:b7:b2:0d:a2:dd:33:f1:20:30:cd:66:a7:6f:
58:0d:f3:23:d0:a5:73:09:83:92:68:74:ea:25:45:73:38:83:
ef:61:d5:87:27:19:69:6e:68:a0:32:eb:7a:76:c5:85:0c:fc:
62:c7:3b:45:bc:4b:55:55:99:c3:48:0c:3a:bd:d9:a3:da:2f:
42:dd:c0:84:23:b5:e6:7d:50:a9:c8:f8:ed:46:55:33:05:49:
38:07:a7:13:a3:ea:01:3c:7a:23:c5:20:7f:a5:fd:83:54:8c:
d9:be:c0:aa:05:ab:c7:df:73:b1:cb:8d:49:43:41:3c:e5:71:
ef:cf:a3:4c:60:1a:8e:b6:de:8b:44:66:50:73:63:35:75:3c:
18:dd:f6:c7:c1:b2:72:25:25:24:50:02:60:b8:c9:de:18:63:
cb:fb:3d:7e:41:d8:bb:c0:aa:d9:45:09:b3:a8:2d:ee:b4:11:
69:07:2d:93:28:c6:45:3b:c4:c0:57:3c:ab:83:18:bf:11:0b:
ce:35:24:6a:72:bb:d6:dd:33:3b:96:f4:cc:73:44:92:b6:1f:
68:a5:36:c9:12:d8:2a:85:12:8e:49:a7:b2:77:71:b0:19:96:
a1:9e:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:23 2026 by rpki-client