Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LyxM5n03169NjpCg9eTGemOiI4U.roa
File: LyxM5n03169NjpCg9eTGemOiI4U.roa (raw, json)
Hash identifier: OxMtvjt0hxkKpHPWVixR/Sv/XT3e6q2kZT/FzIFhMX4=
Subject key identifier: 2F:2C:4C:E6:7D:37:D7:AF:4D:8E:90:A0:F5:E4:C6:7A:63:A2:23:85
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE8FCE8E0236909F3FEE26C35D2F5
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LyxM5n03169NjpCg9eTGemOiI4U.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 142.228.192.0/22 maxlen: 22
142.228.232.0/23 maxlen: 23
198.34.181.0/24 maxlen: 24
198.34.182.0/24 maxlen: 24
198.34.183.0/24 maxlen: 24
198.34.216.0/24 maxlen: 24
198.34.217.0/24 maxlen: 24
198.34.219.0/24 maxlen: 24
198.34.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e8:fc:e8:e0:23:69:09:f3:fe:e2:6c:35:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f2c4ce67d37d7af4d8e90a0f5e4c67a63a22385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:87:ed:db:19:20:ef:96:3b:d4:09:9b:e5:
ef:8f:7c:fc:b4:98:17:54:b5:90:f4:dc:73:4a:e6:
76:08:36:ff:76:34:44:9a:0d:3c:a5:ca:4a:e2:a3:
64:99:28:c5:e5:18:3e:b0:79:7e:67:b7:e5:2f:59:
26:a5:ce:6e:ad:2e:be:29:49:3f:a1:59:25:66:5a:
59:d9:aa:1a:ba:83:95:c0:93:d0:80:ba:d1:13:97:
1e:2e:45:9f:80:7b:b8:1f:16:2b:04:8d:d1:2e:97:
4d:3a:40:e0:bc:80:89:18:88:ee:d2:68:cd:21:db:
22:93:04:54:c9:f0:aa:4b:3e:37:25:c0:8d:fd:50:
23:ed:23:b8:87:a4:4f:d1:ff:d9:fb:31:f9:b6:f5:
98:6e:7b:fd:5d:01:93:1b:46:06:72:d9:65:e6:72:
f4:d5:17:7d:4f:71:ce:8b:75:39:14:dd:2b:63:32:
4f:33:ec:fa:fa:c1:9b:c5:05:c5:84:6a:6a:8f:81:
72:32:21:17:cc:2e:c9:19:6d:21:37:29:eb:e2:f0:
ed:08:99:5e:17:5d:79:1b:7f:2f:f4:7e:60:f7:37:
1b:f9:41:03:e2:ec:ee:cd:93:f2:be:1a:16:c7:3b:
87:a6:aa:b5:11:9a:ae:53:b3:3e:1e:fe:d5:32:da:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:4C:E6:7D:37:D7:AF:4D:8E:90:A0:F5:E4:C6:7A:63:A2:23:85
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/LyxM5n03169NjpCg9eTGemOiI4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.192.0/22
142.228.232.0/23
198.34.181.0-198.34.183.255
198.34.216.0/23
198.34.219.0-198.34.220.255
Signature Algorithm: sha256WithRSAEncryption
5f:27:75:82:2e:74:4a:ef:68:54:ba:1c:84:79:aa:2b:f5:72:
43:17:14:fa:e3:d9:0b:13:09:41:5f:89:fb:49:2a:1e:90:66:
09:f3:ea:0f:6a:4f:50:7c:4f:b6:a8:2c:69:47:ce:49:82:51:
7f:35:25:37:9a:66:91:4e:2c:98:e2:ab:c1:43:a2:a9:65:8e:
9c:95:50:44:57:ed:3d:21:b9:1d:b0:a5:a5:ba:bb:7c:c1:9d:
ed:d0:dc:fc:1e:e0:7a:85:45:75:4e:ac:f7:be:8a:0c:4d:79:
30:90:83:c4:73:70:7b:25:1d:0e:bf:7d:54:31:97:1c:45:b1:
02:2c:6a:9d:5e:c2:4b:3b:cd:a4:cb:fe:7e:68:1d:32:e2:2f:
ec:6c:08:a6:41:1d:28:7e:5e:fc:6f:8d:9c:10:11:b9:58:77:
ec:b5:c7:de:07:16:ac:8d:11:47:8d:39:bf:3f:d0:50:f6:dc:
13:00:29:5c:72:d2:4c:ca:41:03:75:29:d7:f7:31:53:81:60:
72:28:3d:da:33:77:1e:ff:33:41:56:fc:00:7e:8c:06:c6:fd:
88:ee:84:b3:bc:11:bb:ea:c6:c0:cf:f9:03:02:f8:01:3b:b6:
1f:78:a4:eb:33:36:47:ba:af:9d:f6:a3:7d:2f:db:09:3e:6d:
dc:a0:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:54 2026 by rpki-client