Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/LcSdh4tedCpmAS17t3yRnbgmEdk.roa
File: LcSdh4tedCpmAS17t3yRnbgmEdk.roa (raw, json)
Hash identifier: hiklecs4t1l45JXffh9PyN2aehgshHQGA7Lc04Y7log=
Subject key identifier: 2D:C4:9D:87:8B:5E:74:2A:66:01:2D:7B:B7:7C:91:9D:B8:26:11:D9
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 01A026074C61F18AE1160E93D12E86491DEB
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/LcSdh4tedCpmAS17t3yRnbgmEdk.roa
Signing time: Fri 21 Aug 2026 20:33:27 +0000
ROA not before: Fri 21 Aug 2026 20:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.91.121.0/24 maxlen: 24
45.93.148.0/24 maxlen: 24
45.131.180.0/24 maxlen: 24
45.140.132.0/24 maxlen: 24
45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.17.0/24 maxlen: 24
185.209.51.0/24 maxlen: 24
185.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:07:4c:61:f1:8a:e1:16:0e:93:d1:2e:86:49:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Aug 21 20:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc49d878b5e742a66012d7bb77c919db82611d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:a3:cc:5c:e1:cd:bf:4e:6d:18:df:b8:12:
cd:76:04:f8:02:71:75:b0:d6:02:35:3c:dc:a7:31:
7f:a5:96:19:4d:eb:c7:83:e6:17:a8:e3:9d:9b:96:
0a:11:d6:fb:72:54:dc:57:be:2a:ad:86:8a:33:5c:
61:9d:6e:68:46:da:19:98:b1:60:35:13:30:25:60:
41:c0:8d:65:c3:e4:09:05:04:19:04:97:67:2a:88:
aa:30:13:24:71:b4:f1:dd:39:e7:da:9e:1d:48:7d:
ea:8e:24:30:f2:b2:69:28:2f:b7:00:9b:71:f6:a7:
16:91:be:6d:29:3e:dd:5c:3c:99:bc:cd:0c:02:e5:
d2:e7:1d:ff:b9:85:87:5b:d8:01:20:e2:14:53:03:
19:13:db:4d:61:89:5a:7d:63:2f:c1:20:66:5d:a6:
cb:79:3a:87:32:5b:dc:34:35:b8:d7:24:b5:29:ce:
d9:13:ed:4a:1f:06:77:fc:e9:68:60:42:1a:32:78:
bc:28:b1:b7:cf:70:54:3a:0a:cd:cd:3e:fe:a3:0e:
3e:0a:58:5f:31:8e:51:13:fc:bb:16:f3:aa:40:7d:
6a:40:aa:dd:71:14:05:d8:01:15:db:4a:bd:44:07:
e0:43:bb:25:27:ec:45:d8:20:99:b8:55:57:55:cf:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:9D:87:8B:5E:74:2A:66:01:2D:7B:B7:7C:91:9D:B8:26:11:D9
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/LcSdh4tedCpmAS17t3yRnbgmEdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.93.148.0/24
45.131.180.0/24
45.140.132.0/24
45.147.95.0/24
46.229.240.0/24
185.201.16.0/23
185.209.51.0/24
185.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
86:40:69:d5:f2:33:0a:4c:52:7f:27:c1:86:da:b3:12:5b:4a:
d0:9c:c8:31:b5:a8:da:51:df:75:36:2d:67:d4:c2:75:b4:66:
9d:9b:fa:fc:f7:32:22:85:96:ae:73:39:be:73:20:e3:02:98:
9a:7f:f4:eb:7c:ca:54:9f:c7:4c:80:43:75:71:c5:06:87:d2:
89:1f:94:76:82:8d:0e:42:43:7f:c8:a3:08:5d:e9:2f:30:e2:
ed:68:74:ce:d7:8e:19:d2:32:a6:1e:65:d0:a9:83:a8:34:4b:
95:fa:08:7f:66:e1:b5:01:cb:09:67:80:cb:8e:98:6b:81:bf:
a9:5e:55:c3:33:40:6d:6b:55:ae:28:c6:9a:24:38:57:1a:8a:
3f:9f:20:c7:63:47:26:7d:f2:3a:39:09:8f:1a:37:5b:c7:f8:
75:4e:e4:9b:7c:1d:6e:13:23:dc:ab:ad:3f:a0:12:a6:09:79:
a5:ec:8e:a0:0b:39:3c:b6:c5:dc:6e:5d:3f:6e:84:df:0e:1b:
6f:a3:5b:ca:5f:a7:74:2b:4e:39:93:07:cb:55:83:95:99:2b:
b7:6c:29:57:34:78:5c:31:89:1f:d3:cd:78:e6:d8:8b:f8:f0:
59:91:98:f0:65:fa:35:8c:d0:34:3e:3b:fa:30:01:04:42:43:
35:11:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:40:59 2026 by rpki-client