Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/LAFUbVGxsC4edh4sIhfcxrw7NuQ.roa
File: LAFUbVGxsC4edh4sIhfcxrw7NuQ.roa (raw, json)
Hash identifier: kpQrlTgYRkj2fA4vKHfuxJT80EtO7gl5wkExE0P/HMI=
Subject key identifier: 2C:01:54:6D:51:B1:B0:2E:1E:76:1E:2C:22:17:DC:C6:BC:3B:36:E4
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0199379FFCB36366EC35538DB3F87E1F2DD8
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/LAFUbVGxsC4edh4sIhfcxrw7NuQ.roa
Signing time: Thu 11 Sep 2025 07:14:15 +0000
ROA not before: Thu 11 Sep 2025 07:14:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.66.0/24 maxlen: 24
217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:8::/48 maxlen: 48
2a03:32c0:9::/48 maxlen: 48
2a03:32c0:22::/48 maxlen: 48
2a03:32c0:23::/48 maxlen: 48
2a03:32c0:1000::/48 maxlen: 48
2a03:32c0:1001::/48 maxlen: 48
2a03:32c0:1002::/48 maxlen: 48
2a03:32c0:1003::/48 maxlen: 48
2a03:32c0:1004::/48 maxlen: 48
2a03:32c0:1005::/48 maxlen: 48
2a03:32c0:1006::/48 maxlen: 48
2a03:32c0:1007::/48 maxlen: 48
2a03:32c0:1008::/48 maxlen: 48
2a03:32c0:1009::/48 maxlen: 48
2a03:32c0:2000::/48 maxlen: 48
2a03:32c0:2001::/48 maxlen: 48
2a03:32c0:2002::/48 maxlen: 48
2a03:32c0:2003::/48 maxlen: 48
2a03:32c0:2004::/48 maxlen: 48
2a03:32c0:2005::/48 maxlen: 48
2a03:32c0:2006::/48 maxlen: 48
2a03:32c0:2007::/48 maxlen: 48
2a03:32c0:2008::/48 maxlen: 48
2a03:32c0:2009::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:3008::/48 maxlen: 48
2a03:32c0:3009::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:4003::/48 maxlen: 48
2a03:32c0:4004::/48 maxlen: 48
2a03:32c0:4005::/48 maxlen: 48
2a03:32c0:4006::/48 maxlen: 48
2a03:32c0:4007::/48 maxlen: 48
2a03:32c0:4008::/48 maxlen: 48
2a03:32c0:4009::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:5003::/48 maxlen: 48
2a03:32c0:5004::/48 maxlen: 48
2a03:32c0:5005::/48 maxlen: 48
2a03:32c0:5006::/48 maxlen: 48
2a03:32c0:5007::/48 maxlen: 48
2a03:32c0:5008::/48 maxlen: 48
2a03:32c0:5009::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:6002::/48 maxlen: 48
2a03:32c0:6003::/48 maxlen: 48
2a03:32c0:6004::/48 maxlen: 48
2a03:32c0:6005::/48 maxlen: 48
2a03:32c0:6006::/48 maxlen: 48
2a03:32c0:6007::/48 maxlen: 48
2a03:32c0:6008::/48 maxlen: 48
2a03:32c0:6009::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:7008::/48 maxlen: 48
2a03:32c0:7009::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:8008::/48 maxlen: 48
2a03:32c0:8009::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:9008::/48 maxlen: 48
2a03:32c0:9009::/48 maxlen: 48
2a03:32c0:9010::/48 maxlen: 48
2a03:32c0:9011::/48 maxlen: 48
2a03:32c0:a000::/48 maxlen: 48
2a03:32c0:a001::/48 maxlen: 48
2a03:32c0:a002::/48 maxlen: 48
2a03:32c0:a003::/48 maxlen: 48
2a03:32c0:a004::/48 maxlen: 48
2a03:32c0:a005::/48 maxlen: 48
2a03:32c0:a006::/48 maxlen: 48
2a03:32c0:a007::/48 maxlen: 48
2a03:32c0:a008::/48 maxlen: 48
2a03:32c0:a009::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:c000::/48 maxlen: 48
2a03:32c0:c001::/48 maxlen: 48
2a03:32c0:c002::/48 maxlen: 48
2a03:32c0:c008::/48 maxlen: 48
2a03:32c0:d000::/48 maxlen: 48
2a03:32c0:d001::/48 maxlen: 48
2a03:32c0:d002::/48 maxlen: 48
2a03:32c0:d008::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
2a03:32c0:f000::/48 maxlen: 48
2a03:32c0:f001::/48 maxlen: 48
2a03:32c0:f008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:9f:fc:b3:63:66:ec:35:53:8d:b3:f8:7e:1f:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Sep 11 07:14:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c01546d51b1b02e1e761e2c2217dcc6bc3b36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:e6:f7:5c:fc:44:2f:a7:ef:6e:11:2d:04:
e8:ec:d5:f7:ef:9c:2e:6e:35:1e:4b:ae:a9:34:a1:
dc:bc:27:5a:e6:83:2c:b9:59:fd:45:95:8b:fb:97:
19:f1:fe:58:1e:7f:00:dd:26:e9:4b:8b:bd:1a:22:
70:ff:40:56:7c:f2:1b:f3:10:15:d3:c8:79:9f:13:
c3:c8:64:21:78:6c:a2:88:40:61:67:1e:36:70:41:
d2:ed:79:59:6c:e2:9e:99:01:fc:eb:32:28:56:a5:
c0:79:b5:19:ee:97:96:af:d2:20:cf:46:72:37:77:
ea:ca:63:9d:2c:c1:da:a6:2d:ce:1e:c1:90:85:9b:
3a:55:1f:d3:fd:02:7a:30:c3:86:a3:fd:38:4a:03:
a8:50:f5:6d:33:88:d5:b6:83:d9:84:99:0d:7b:1d:
18:80:4a:b0:21:1c:d1:ac:6a:b7:13:3b:7e:05:bf:
ae:14:a6:f3:f9:72:48:cf:a9:16:bf:bd:23:df:67:
a8:6e:05:4b:9a:2a:53:f5:27:c7:6a:52:f8:ba:bd:
81:e1:1a:37:55:12:8f:37:47:92:c3:5f:21:fa:5b:
58:8f:ba:25:47:85:9d:6a:c2:7d:45:23:01:18:97:
84:96:70:a8:e1:66:ba:fa:43:df:0c:b6:85:7c:68:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:54:6D:51:B1:B0:2E:1E:76:1E:2C:22:17:DC:C6:BC:3B:36:E4
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/LAFUbVGxsC4edh4sIhfcxrw7NuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.66.0/24
217.76.70.0/24
IPv6:
2a03:32c0::-2a03:32c0:9:ffff:ffff:ffff:ffff:ffff
2a03:32c0:22::/47
2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::-2a03:32c0:6009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:7000::/47
2a03:32c0:7008::/47
2a03:32c0:8000::-2a03:32c0:8009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:9000::-2a03:32c0:9009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:9010::/47
2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c000::-2a03:32c0:c002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c008::/48
2a03:32c0:d000::-2a03:32c0:d002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:d008::/48
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:f000::/47
2a03:32c0:f008::/48
Signature Algorithm: sha256WithRSAEncryption
bc:06:3c:e8:7f:03:cd:ce:3b:7c:a0:ed:dc:b3:aa:9f:ec:7c:
bc:0d:f3:85:2b:f8:0b:6b:30:7c:93:2e:1c:f3:a5:f3:af:c2:
09:c1:d3:e2:3b:a2:2a:d1:a9:68:44:b5:2f:c2:e9:cf:b7:e3:
bc:f8:9e:f8:ac:d1:4c:5f:8d:ce:3a:23:a8:b0:70:80:44:7b:
a4:0d:0e:47:2a:aa:51:e6:35:6e:a0:82:c5:3a:a6:a8:56:5b:
4b:e3:82:a6:90:0d:e1:51:a3:04:1a:76:35:03:2f:10:a6:21:
42:db:42:95:d7:6c:5e:c5:68:c8:e0:42:1c:be:56:1a:c1:dd:
93:f2:2f:1c:e3:24:1d:2e:b2:a4:60:0d:67:61:34:57:2a:16:
40:05:cc:8b:c1:41:a4:ab:2b:8d:be:89:14:49:59:84:af:83:
01:cb:28:99:9e:d7:23:6d:2d:5c:86:ee:bc:5e:c2:0d:7c:a4:
b5:9c:49:ce:fc:7a:3d:c1:fd:7f:03:56:6e:af:44:df:63:a3:
fa:6a:7a:3a:fc:3d:4c:0b:28:25:d7:64:28:e9:0e:8c:25:44:
e2:d7:cb:de:59:26:25:46:c1:66:d0:f0:3e:8d:4a:6d:ae:5e:
32:26:4b:3e:86:ac:a0:49:55:6e:d8:c0:9e:c3:18:bf:b1:2b:
fc:c9:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 01:22:50 2025 by rpki-client