Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lbIlqmx9-YY_4est_XmmnAFTWcg.roa
File: lbIlqmx9-YY_4est_XmmnAFTWcg.roa (raw, json)
Hash identifier: nok5VBSBS9rXf6/PoSFWQin2DCtItaq2zMw6yvfjzdc=
Subject key identifier: 95:B2:25:AA:6C:7D:F9:86:3F:E1:EB:2D:FD:79:A6:9C:01:53:59:C8
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019FBDFC49FF8A7028B7BBAAE5E95CE98032
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lbIlqmx9-YY_4est_XmmnAFTWcg.roa
Signing time: Sat 01 Aug 2026 15:40:55 +0000
ROA not before: Sat 01 Aug 2026 15:40:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:fc:49:ff:8a:70:28:b7:bb:aa:e5:e9:5c:e9:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 1 15:40:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b225aa6c7df9863fe1eb2dfd79a69c015359c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:92:45:0a:da:b7:7c:b5:70:1d:f2:3a:0b:
95:46:56:b0:ed:6d:5a:de:0f:fe:36:7a:9c:d0:03:
ea:f2:b2:00:af:fe:48:bd:3b:8e:7e:df:be:d4:5a:
d3:42:7e:1d:f7:74:0d:d0:9b:ef:ef:33:f1:b9:6a:
db:50:1a:d4:05:37:e7:b9:57:fc:80:eb:7a:77:8f:
c6:12:b2:eb:f6:4c:30:aa:77:b1:72:5b:ed:cf:80:
eb:61:7f:a8:94:77:ba:21:d0:4e:41:c2:a9:c6:d2:
de:f0:fb:70:56:e2:f7:fe:ac:33:b5:37:31:0f:1b:
61:22:ca:0a:ac:a6:b8:7b:3b:1d:02:d8:37:b4:a6:
82:af:c5:27:d1:e3:c7:2c:ac:38:04:0e:23:c0:ae:
a2:4a:66:a3:e1:09:73:75:c2:dc:3d:98:f6:f2:0a:
f3:87:57:46:f2:f9:23:4b:27:00:9e:a1:50:2d:cc:
68:38:36:2d:15:4c:61:22:64:a6:b2:bb:33:e5:1d:
75:55:24:1e:3c:a1:c9:7d:1a:f0:c7:3f:11:24:42:
36:67:b0:2f:25:b1:e9:4f:99:06:3f:5b:65:33:ff:
da:b6:6f:05:30:ad:34:d6:44:69:40:4e:0f:a8:a1:
70:2d:46:af:46:c2:d1:42:4c:9b:bc:52:d8:6d:d4:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:25:AA:6C:7D:F9:86:3F:E1:EB:2D:FD:79:A6:9C:01:53:59:C8
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lbIlqmx9-YY_4est_XmmnAFTWcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
2f:80:21:2a:b2:53:d6:bf:05:d5:95:c6:18:fd:27:d3:11:a3:
d9:36:72:ad:20:0f:d6:8c:4f:79:fc:26:f4:52:f1:f0:01:bc:
39:85:8c:85:27:0b:dc:4c:20:46:9f:b6:f4:2c:b9:3b:40:c8:
11:18:f4:34:14:25:26:23:13:71:af:3f:7a:b8:63:20:71:8d:
c5:3d:54:f1:8b:db:fc:70:db:b6:36:18:26:cc:59:a2:4d:79:
46:b5:6f:c8:c6:d5:eb:d1:f3:9f:c5:4f:f2:b7:b3:98:29:1d:
bf:31:48:bf:2a:97:83:35:9f:9a:fd:77:b8:27:dc:e2:06:4f:
2e:c5:d7:73:f0:41:c8:e8:9d:77:9b:d1:28:d8:d2:3f:1a:00:
24:0f:22:3e:c4:ed:94:f6:ed:60:32:80:52:f9:5b:4a:28:f1:
b9:e4:79:88:a8:4e:62:5e:d1:5c:6d:4a:6d:b8:75:3a:83:89:
74:9a:6b:63:76:cf:9f:73:d3:d4:bb:3e:60:06:76:a6:b8:f0:
9c:5c:04:7d:ec:dc:0c:97:73:7a:68:24:6c:7d:6c:b9:5b:9a:
85:c4:44:7d:e2:13:a3:6f:7e:4b:61:71:b1:dc:4f:ed:42:0e:
d2:67:f1:79:77:ca:07:69:74:c9:7e:fc:0f:a2:c9:9b:c4:a1:
75:2f:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:56 2026 by rpki-client