Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ll0szWiw_Ue9ia4Jlf5tlbYQrPk.roa
File: Ll0szWiw_Ue9ia4Jlf5tlbYQrPk.roa (raw, json)
Hash identifier: 8ZAmw9QS1McaXWc5pqhRLYspVV8UWExovk60GsAmk2s=
Subject key identifier: 2E:5D:2C:CD:68:B0:FD:47:BD:89:AE:09:95:FE:6D:95:B6:10:AC:F9
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019E3F4B40AF90300514BFB485563CBA6ECA
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ll0szWiw_Ue9ia4Jlf5tlbYQrPk.roa
Signing time: Tue 19 May 2026 08:12:36 +0000
ROA not before: Tue 19 May 2026 08:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.87.0/24 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:4b:40:af:90:30:05:14:bf:b4:85:56:3c:ba:6e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 19 08:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e5d2ccd68b0fd47bd89ae0995fe6d95b610acf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:d5:6f:06:af:88:47:60:96:f5:65:e4:c2:
b1:dc:d6:d7:da:59:7f:a5:4d:3a:1e:b4:5a:7d:8a:
28:af:e3:0c:a8:00:a6:31:9e:b4:e5:7f:ba:a0:cf:
fd:82:b8:99:21:6f:52:de:bf:5f:b8:17:54:3c:de:
01:82:7b:07:42:d4:76:1e:9e:f8:fd:3a:cb:8d:16:
c1:ca:7a:4b:e4:08:df:57:83:8f:17:3a:de:71:00:
db:43:4b:3c:74:c2:dd:68:43:1a:05:f2:46:fc:90:
5e:39:eb:6c:c5:16:ba:5e:3d:31:23:f9:d4:e2:ed:
91:78:54:e4:f4:d9:04:fc:55:83:2b:09:78:5e:4b:
88:b9:d5:62:5f:c5:72:a2:61:78:40:43:3f:59:c3:
8e:79:dc:96:58:9d:46:ed:e3:f6:16:a9:2f:31:46:
13:29:7a:02:fa:cc:bd:1f:ed:98:ca:07:2b:5c:8f:
13:59:94:c1:33:78:8b:e2:03:4e:9a:25:38:17:82:
23:ce:45:4b:83:de:5b:3f:bf:0c:48:a5:71:42:10:
d5:35:87:14:5d:b2:94:ad:12:69:f1:89:ff:89:75:
bf:3c:81:68:38:af:98:c7:70:a7:8d:8e:c8:01:b1:
34:17:d0:d0:fd:03:8c:ed:f2:5a:03:fa:80:21:3c:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:2C:CD:68:B0:FD:47:BD:89:AE:09:95:FE:6D:95:B6:10:AC:F9
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ll0szWiw_Ue9ia4Jlf5tlbYQrPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0/24
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
01:62:c1:57:c2:10:34:f9:0c:22:a7:c1:17:73:2b:a0:7e:ef:
87:64:70:3b:bd:7b:ba:47:a8:e1:23:8e:9b:4c:2f:be:5d:72:
02:7c:b4:6b:78:52:50:9e:03:05:3d:be:76:bc:4e:1d:97:c9:
a6:77:dc:90:bc:32:6b:23:80:8b:9c:ce:29:5d:c2:66:21:28:
42:e2:43:30:55:21:f4:42:00:d4:a2:eb:4b:8c:6b:a7:db:ad:
13:3c:16:b1:1f:db:b5:08:81:47:78:4b:35:d2:c9:b3:4b:91:
a4:c1:be:85:73:1f:38:ef:97:06:27:7b:62:fa:b8:86:03:3f:
91:f9:9b:d0:eb:6d:2e:cd:09:dc:c1:86:be:51:cb:de:48:5e:
b2:fb:dc:63:dd:1f:7d:a2:72:17:46:07:ef:cb:5a:c1:74:8c:
3b:86:f1:6d:9e:e0:58:20:3a:70:52:02:14:a3:dd:c3:b9:f7:
df:56:ac:bc:72:4f:e0:20:f0:bf:7c:7a:10:1e:c1:11:14:fc:
59:8d:64:c0:08:fd:96:26:05:fd:79:42:6e:49:26:01:bf:c4:
86:bc:65:3a:9b:79:35:ce:42:c9:59:86:65:a0:60:ac:66:fe:
33:55:f3:1e:8a:a1:d4:ee:dc:30:2b:76:cd:e1:7c:50:97:66:
95:b7:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:20 2026 by rpki-client