Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LAHm8G25j_cDj1Curtxz4KcjhQ4.roa
File: LAHm8G25j_cDj1Curtxz4KcjhQ4.roa (raw, json)
Hash identifier: 71gECGkPfDPaJvLzyxlgcxbLflLvRZagCAob/I+PWns=
Subject key identifier: 2C:01:E6:F0:6D:B9:8F:F7:03:8F:50:AE:AE:DC:73:E0:A7:23:85:0E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CA0F4DF08B2D59B288AD4B712E4205325
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LAHm8G25j_cDj1Curtxz4KcjhQ4.roa
Signing time: Fri 27 Feb 2026 21:15:28 +0000
ROA not before: Fri 27 Feb 2026 21:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 5.175.216.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:f4:df:08:b2:d5:9b:28:8a:d4:b7:12:e4:20:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 21:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c01e6f06db98ff7038f50aeaedc73e0a723850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:0e:4a:a9:b8:3c:d3:f2:02:38:f6:17:c0:
3f:12:76:f7:c3:6e:a7:ec:57:20:97:1f:85:12:b8:
50:93:88:9d:3b:f0:65:52:7c:2c:61:88:37:9c:78:
b5:c3:79:bc:6c:40:4b:61:d8:3d:c2:fd:27:b2:4a:
60:26:3c:f2:cb:7f:62:42:2b:c1:5f:b0:cc:4b:ed:
f7:06:53:74:b3:df:66:05:5f:0d:3e:34:d6:e3:34:
48:1e:12:55:eb:fa:79:63:f2:e1:ff:58:54:87:27:
35:50:69:2d:54:53:84:04:f8:54:91:75:83:ca:48:
af:84:4f:ed:52:c2:d5:2b:a6:11:cc:fe:48:ac:93:
b0:f4:75:f8:35:cc:8b:a1:19:57:cc:a4:2d:d0:bb:
10:1a:a1:28:19:70:32:28:8d:be:6c:9e:64:b1:04:
7b:93:d1:6b:51:d2:d4:f3:f3:94:84:32:74:f7:22:
61:4b:83:d6:15:d7:81:66:99:a2:0f:b1:00:a2:ae:
cf:7d:cf:9d:1d:c7:9b:14:44:06:9a:97:e4:88:c9:
b3:6b:be:d3:4f:cd:3e:87:d7:50:32:2a:60:d3:eb:
87:83:90:8f:0c:4d:3c:ee:15:16:88:84:43:20:fe:
6e:4f:05:45:a4:57:5a:ad:72:89:ee:e3:1c:10:52:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:E6:F0:6D:B9:8F:F7:03:8F:50:AE:AE:DC:73:E0:A7:23:85:0E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LAHm8G25j_cDj1Curtxz4KcjhQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.216.0/24
5.175.223.0/24
Signature Algorithm: sha256WithRSAEncryption
38:16:3e:c2:d9:c1:69:04:83:9d:95:8a:08:72:17:4c:f8:97:
9a:86:a4:68:0e:6e:bc:78:34:e6:e4:50:7d:ca:1c:b2:ff:d8:
52:46:ff:67:51:61:c0:97:aa:f3:fd:32:03:e2:ea:d7:0c:c0:
13:e0:8a:0d:24:ec:f0:c0:6d:3b:78:a6:94:95:41:b5:43:d1:
93:50:bc:2b:a1:83:75:1a:9d:67:36:a6:80:42:1f:9a:70:aa:
4b:39:e6:12:b4:0c:b2:f3:e8:3e:c9:84:81:fb:f2:f1:19:1e:
23:30:91:b9:e0:df:a2:78:d7:d0:9d:57:25:46:e9:5b:6c:1d:
17:b2:5f:34:16:33:93:10:2a:e2:e0:50:77:4a:16:44:76:0f:
5a:83:80:9f:86:20:2f:e2:03:77:9c:41:ec:20:1b:72:a5:2c:
06:d2:0e:09:3a:ff:7b:dc:39:17:72:4a:d2:e0:2f:46:5f:10:
c2:b7:5e:9f:0a:6e:d3:0f:99:eb:76:f4:45:be:44:f5:4a:1e:
81:a6:5e:75:f3:4e:06:9c:c3:6f:fb:75:47:5d:24:02:d6:8c:
30:2f:5c:d2:fb:87:47:f8:00:71:df:4a:39:a1:d8:34:1c:f8:
ac:05:b1:19:49:68:c6:fa:31:8d:01:6b:ff:b7:9f:ae:22:24:
9a:a8:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:21 2026 by rpki-client