Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa
File: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (raw, json)
Hash identifier: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=
Subject key identifier: 2D:60:9B:FE:B9:FB:76:D6:A8:AE:80:4D:31:DE:67:57:C2:C6:43:52
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 01A08078445E4B4F8F352FB18EFE16A95689
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa
Signing time: Tue 08 Sep 2026 10:02:40 +0000
ROA not before: Tue 08 Sep 2026 10:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200320
IP address blocks: 185.37.230.0/24 maxlen: 24
185.156.216.0/24 maxlen: 24
185.156.217.0/24 maxlen: 24
185.156.218.0/24 maxlen: 24
185.162.170.0/24 maxlen: 24
195.8.49.0/24 maxlen: 24
195.8.118.0/24 maxlen: 24
195.8.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:78:44:5e:4b:4f:8f:35:2f:b1:8e:fe:16:a9:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Sep 8 10:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d609bfeb9fb76d6a8ae804d31de6757c2c64352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:af:0d:f8:7a:43:0f:3a:4f:32:57:a2:d7:
4e:5b:0d:93:09:a6:b1:2a:38:7d:a3:fd:cb:6a:6b:
56:32:a0:4c:e7:91:cd:ec:12:8c:dd:20:12:12:4b:
24:12:db:1b:05:32:7d:2e:b2:a4:3a:af:ce:dc:d8:
25:00:45:df:75:0f:1f:ff:34:03:1a:29:78:e8:b1:
54:93:1a:b2:26:fb:56:e8:9a:23:25:ff:2a:82:ee:
6e:93:d2:08:41:8a:07:36:d9:c6:01:9d:89:e2:33:
79:42:53:34:18:2e:ba:55:b8:3b:cc:cc:e1:87:7b:
26:f7:e4:91:37:3b:6d:b5:1f:3c:63:01:61:9b:cb:
a6:77:7c:66:57:27:ba:e7:df:5a:35:6e:e1:43:00:
f4:b8:e5:9d:fb:5f:e9:cf:74:99:20:9d:7d:5a:13:
03:01:f9:16:f7:c5:a4:a8:a4:2c:01:00:aa:57:91:
b6:cb:83:0d:b1:32:ba:d2:a9:10:f6:ee:52:26:4b:
dc:3d:2e:0d:6b:84:41:90:de:00:55:5c:56:83:0f:
e8:19:9b:52:32:22:25:11:f8:ad:63:6d:d7:e0:eb:
04:8c:15:6f:2c:6b:73:39:63:49:67:48:88:cd:79:
7f:89:b3:cf:77:05:eb:8c:36:49:ff:42:49:74:3b:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:9B:FE:B9:FB:76:D6:A8:AE:80:4D:31:DE:67:57:C2:C6:43:52
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.230.0/24
185.156.216.0-185.156.218.255
185.162.170.0/24
195.8.49.0/24
195.8.118.0/23
Signature Algorithm: sha256WithRSAEncryption
64:0b:16:c4:65:a7:a5:c1:e9:24:11:20:50:5e:d2:d8:bc:0c:
c0:fd:4e:da:50:c9:43:3c:de:e4:46:f4:9c:50:96:25:d4:bd:
10:5a:69:56:80:ae:a6:36:e2:09:8d:c7:97:27:d6:d5:8b:55:
6f:75:e1:ba:27:db:ae:fc:76:d2:4d:f1:f9:e6:8a:74:cc:76:
1f:26:06:b3:61:0f:f3:2c:a9:5b:16:5e:cd:b2:b7:da:ca:2c:
ea:22:56:a4:de:a8:7a:12:37:3b:8a:ae:39:20:ea:cb:b9:86:
00:7a:19:b8:20:4a:85:77:2e:56:c5:d5:22:c2:2a:de:03:b9:
25:fd:58:3f:56:c0:03:ce:1a:cc:7e:9f:63:72:8d:bb:b8:8d:
83:2d:c4:21:a2:67:a9:26:49:55:1a:86:7b:06:dc:9a:90:88:
52:cd:32:ba:8d:45:09:7c:24:5c:f8:83:ed:9f:b0:db:00:d8:
0b:20:0e:40:15:15:66:ad:de:12:d2:94:8e:3e:0b:a3:c8:d8:
71:98:89:de:fd:3b:76:0d:f5:96:03:3d:1a:d1:e0:be:9e:d6:
97:02:78:55:25:a8:be:7d:4a:cc:fa:11:e2:00:29:9e:e5:86:
e3:8e:1a:15:fc:fb:77:f4:18:af:d5:1a:c2:7b:fc:4a:b4:4b:
f1:91:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:09 2026 by rpki-client