Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/LMUQmobuHVJEXOLCk7qulvM9xco.roa
File: LMUQmobuHVJEXOLCk7qulvM9xco.roa (raw, json)
Hash identifier: VHioZYEBKZU7KL0P7CQwH0VWVc2gjtg5Dg7pb7IsEAE=
Subject key identifier: 2C:C5:10:9A:86:EE:1D:52:44:5C:E2:C2:93:BA:AE:96:F3:3D:C5:CA
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 019B7BA4E925152446FDD3F60B5FE3E468C5
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/LMUQmobuHVJEXOLCk7qulvM9xco.roa
Signing time: Thu 01 Jan 2026 22:19:23 +0000
ROA not before: Thu 01 Jan 2026 22:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210638
IP address blocks: 62.233.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:e9:25:15:24:46:fd:d3:f6:0b:5f:e3:e4:68:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Jan 1 22:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cc5109a86ee1d52445ce2c293baae96f33dc5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:c8:01:b7:92:9b:18:80:6c:19:48:7e:50:
07:08:8f:f9:22:9e:c0:6a:c6:27:b1:c0:17:a7:98:
0e:8f:ad:65:cd:8d:c5:61:c8:86:bc:7e:34:e5:b1:
45:92:05:de:e1:a5:6b:5f:2e:06:b8:43:1e:f7:05:
8a:dd:6b:2e:ef:51:e3:82:64:b3:ea:e1:75:87:30:
2b:f7:f7:65:af:99:46:34:4a:78:b3:5c:4d:0b:f5:
46:bb:4b:90:8a:05:92:e6:ca:5e:99:19:c7:38:a8:
40:f3:46:16:21:e0:6d:80:c8:92:22:18:e3:21:56:
ea:78:58:3a:7b:0a:81:63:fd:30:fd:79:76:04:02:
69:3a:cb:e9:1f:7d:35:e5:b9:20:1c:39:39:cd:ad:
51:7f:18:72:9a:12:4f:26:6e:07:a0:26:85:bd:08:
d7:76:ea:29:c8:8f:03:d0:ac:fd:05:a1:0a:c2:1d:
0e:7d:05:9e:35:29:4b:aa:e3:f7:aa:7f:ab:97:1b:
2b:4b:25:43:7f:27:d5:e4:47:c7:e3:b2:dd:12:e4:
d6:f2:06:c5:76:1e:e3:86:44:62:5e:86:2e:d7:69:
6e:c6:d2:d8:2c:a0:07:ce:26:8b:40:1a:1a:b8:91:
f0:40:d4:61:d9:17:36:dd:02:62:18:b2:a0:db:1c:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:10:9A:86:EE:1D:52:44:5C:E2:C2:93:BA:AE:96:F3:3D:C5:CA
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/LMUQmobuHVJEXOLCk7qulvM9xco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
Signature Algorithm: sha256WithRSAEncryption
35:eb:b3:b0:0d:28:71:1c:c3:1c:c8:5a:ab:82:d6:e6:08:35:
c9:36:b1:b1:01:45:c0:2f:04:96:94:8c:32:f6:2b:67:01:a0:
f7:3d:c4:f6:34:d8:46:a6:2a:2a:9e:95:44:96:e0:e0:89:26:
9a:9b:cc:8f:1d:66:22:bb:8a:3d:52:a7:76:e0:db:8d:45:88:
77:fc:ae:ac:8d:b7:fb:37:d3:03:95:ec:b8:64:59:d2:80:69:
08:a2:5c:b0:7e:87:a3:bf:94:c7:73:f4:79:3f:14:7a:b7:5b:
4d:27:d4:6c:5c:e7:15:1a:0f:75:f3:4b:c9:b1:75:f1:b5:e9:
a6:ec:1c:9f:b8:e9:04:c7:24:3f:f5:9c:2d:d4:10:ef:49:6d:
83:97:a2:4c:35:60:c2:9a:a3:a5:90:7e:8c:52:26:81:36:4c:
34:cd:a2:07:2f:23:9a:72:f5:b8:1b:ca:0f:d2:dd:2a:47:1f:
39:8f:49:70:6a:3f:ca:8c:a0:11:19:ec:12:7e:b9:2e:e3:a7:
35:a7:a5:67:54:9c:2a:d0:52:7a:cd:6e:a4:37:60:3f:1d:eb:
2d:d0:5a:ee:25:7e:88:76:41:51:11:8f:81:70:64:7f:45:6f:
84:29:52:fe:e6:d9:d5:cc:7e:cf:07:83:c1:36:af:e3:1c:27:
4d:7c:a7:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pOklFSRG/dP2C1/j5GjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGI3NWRjNjcyOTVkNTg2MWI3N2Q1MWEwMjExOGI2MGRj
NTU4NjgwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2M1MTA5YTg2ZWUxZDUyNDQ1Y2UyYzI5M2JhYWU5NmYzM2RjNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyrIAbeSmxiAbBlIflAHCI/5Ip7A
asYnscAXp5gOj61lzY3FYciGvH405bFFkgXe4aVrXy4GuEMe9wWK3Wsu71HjgmSz
6uF1hzAr9/dlr5lGNEp4s1xNC/VGu0uQigWS5spemRnHOKhA80YWIeBtgMiSIhjj
IVbqeFg6ewqBY/0w/Xl2BAJpOsvpH3015bkgHDk5za1RfxhymhJPJm4HoCaFvQjX
duopyI8D0Kz9BaEKwh0OfQWeNSlLquP3qn+rlxsrSyVDfyfV5EfH47LdEuTW8gbF
dh7jhkRiXoYu12luxtLYLKAHziaLQBoauJHwQNRh2Rc23QJiGLKg2xyXjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzFEJqG7h1SRFziwpO6rpbzPcXKMB8GA1UdIwQY
MBaAFGiLddxnKV1YYbd9UaAhGLYNxVhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYt
NTE4ZWU3YmRlMWY4LzEvTE1VUW1vYnVIVkpFWE9MQ2s3cXVsdk05eGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYtNTE4ZWU3YmRlMWY4
LzEvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuk6MA0G
CSqGSIb3DQEBCwUAA4IBAQA167OwDShxHMMcyFqrgtbmCDXJNrGxAUXALwSWlIwy
9itnAaD3PcT2NNhGpioqnpVEluDgiSaam8yPHWYiu4o9Uqd24NuNRYh3/K6sjbf7
N9MDley4ZFnSgGkIolywfoejv5THc/R5PxR6t1tNJ9RsXOcVGg9180vJsXXxtemm
7ByfuOkExyQ/9Zwt1BDvSW2Dl6JMNWDCmqOlkH6MUiaBNkw0zaIHLyOacvW4G8oP
0t0qRx85j0lwaj/KjKARGewSfrku46c1p6VnVJwq0FJ6zW6kN2A/Hest0FruJX6I
dkFREY+BcGR/RW+EKVL+5tnVzH7PB4PBNq/jHCdNfKdj
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:54 2026 by rpki-client