Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lEC0qjszviG_PmWjX4OR2iR7SbA.roa
File: lEC0qjszviG_PmWjX4OR2iR7SbA.roa (raw, json)
Hash identifier: KbKvTc+6+lwWnRlHQjVqiXK+kvQfcXNOFUgUVNwCT6w=
Subject key identifier: 94:40:B4:AA:3B:33:BE:21:BF:3E:65:A3:5F:83:91:DA:24:7B:49:B0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019C53610736D430E16D6EACE79113226627
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lEC0qjszviG_PmWjX4OR2iR7SbA.roa
Signing time: Thu 12 Feb 2026 19:43:13 +0000
ROA not before: Thu 12 Feb 2026 19:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 185.103.100.0/24 maxlen: 24
193.233.21.0/24 maxlen: 24
193.233.132.0/24 maxlen: 24
193.233.230.0/24 maxlen: 24
193.233.231.0/24 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:61:07:36:d4:30:e1:6d:6e:ac:e7:91:13:22:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 12 19:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9440b4aa3b33be21bf3e65a35f8391da247b49b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:86:79:49:16:5d:81:83:c5:cf:9a:47:c5:
38:0b:0f:0a:7c:de:93:8f:e4:af:0c:f5:9c:41:78:
33:61:d3:81:af:6e:9c:3f:e9:0e:65:24:ff:d2:f5:
80:eb:64:f3:ff:0d:8e:56:1e:f9:bd:04:71:fc:b7:
2f:06:7f:8d:1e:a9:1d:c4:b0:e2:e3:33:de:6b:c1:
c9:04:1a:4e:7d:09:74:56:b9:6a:db:62:38:24:5b:
67:a7:c5:85:84:e8:94:cb:9b:9a:02:29:8d:c9:65:
03:65:69:04:0f:94:99:58:4a:87:3b:de:43:1a:76:
0e:0f:e2:49:29:19:65:20:5b:3d:30:3f:92:e5:e5:
91:80:6f:54:c6:ac:f5:2b:61:0e:a8:b4:53:70:0f:
83:0b:61:2d:4c:31:53:c4:d4:2c:34:a3:03:0f:cf:
a5:95:39:64:89:a4:79:00:e6:ee:85:87:74:05:42:
05:e3:e7:47:fd:24:9f:06:b6:86:99:6e:6a:e8:79:
f4:7f:1d:25:59:d3:88:c8:dd:35:14:7d:3c:d0:44:
20:30:bd:da:c5:7b:d2:80:aa:5b:a6:84:53:f0:7e:
1d:97:18:79:3d:cf:56:30:af:86:a5:93:ce:1a:0a:
9d:8d:9f:df:ab:bb:a5:81:95:10:bf:39:83:c7:8b:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:B4:AA:3B:33:BE:21:BF:3E:65:A3:5F:83:91:DA:24:7B:49:B0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lEC0qjszviG_PmWjX4OR2iR7SbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.100.0/24
193.233.21.0/24
193.233.132.0/24
193.233.230.0/23
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1a:9e:4f:db:68:cf:7b:4b:94:29:7a:95:49:a4:e6:b1:2f:
ff:1f:1b:d5:e6:d7:e7:eb:e3:f2:2f:fe:a5:26:e8:6a:bc:97:
ae:cb:f6:2e:4b:be:8a:f8:2e:c6:97:3a:67:7e:a5:80:f1:6f:
bf:62:e1:38:1f:f7:8f:ad:2c:21:d7:67:c2:8f:f7:a0:85:39:
6a:00:51:b4:be:72:46:2a:76:d4:05:49:14:77:de:b7:f9:35:
6f:04:f5:7c:2b:f0:4f:8e:aa:79:5c:2c:83:5a:5f:82:b9:cc:
94:ab:0e:ce:cb:ba:39:87:0c:27:8d:c0:88:a9:8e:44:82:de:
fa:df:36:39:82:24:8c:bc:63:5a:23:2e:f3:de:43:bb:32:03:
cd:af:8b:91:cc:48:91:19:07:a4:a9:6f:22:3f:a7:50:d0:04:
20:f4:a1:48:9e:9a:6d:d1:85:df:29:d3:be:73:f7:50:6e:1c:
1b:fd:cb:e4:da:63:84:80:73:4d:e6:e3:0b:09:2c:07:0f:41:
97:e7:3f:72:36:41:c3:a3:dd:16:e0:a3:26:22:42:7c:77:49:
8e:6f:20:87:e4:d9:a1:33:6a:5b:1b:48:c3:f2:62:09:4e:1d:
9d:06:50:1f:fc:30:4a:dd:66:8e:0c:c5:49:d4:d7:3d:13:00:
de:7b:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:45 2026 by rpki-client