Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LmwsApdbGhewg_HCFDL1pi7URY8.roa
File: LmwsApdbGhewg_HCFDL1pi7URY8.roa (raw, json)
Hash identifier: lkWICtuN/i7ryeo3VUhsRbyJIa4Wch9Y81NdeWmLF2c=
Subject key identifier: 2E:6C:2C:02:97:5B:1A:17:B0:83:F1:C2:14:32:F5:A6:2E:D4:45:8F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08A7C75EE33C169C430A9F22DC1887B3C
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LmwsApdbGhewg_HCFDL1pi7URY8.roa
Signing time: Thu 10 Sep 2026 08:43:27 +0000
ROA not before: Thu 10 Sep 2026 08:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 79.176.19.0/24 maxlen: 24
79.176.20.0/24 maxlen: 24
79.176.22.0/24 maxlen: 24
79.176.32.0/24 maxlen: 24
79.176.34.0/24 maxlen: 24
79.176.43.0/24 maxlen: 24
79.176.52.0/24 maxlen: 24
79.176.54.0/24 maxlen: 24
79.176.58.0/24 maxlen: 24
79.176.60.0/24 maxlen: 24
79.176.66.0/24 maxlen: 24
79.176.68.0/24 maxlen: 24
79.176.71.0/24 maxlen: 24
79.176.72.0/24 maxlen: 24
79.176.73.0/24 maxlen: 24
79.176.74.0/24 maxlen: 24
79.176.75.0/24 maxlen: 24
79.176.76.0/24 maxlen: 24
79.176.81.0/24 maxlen: 24
79.176.82.0/24 maxlen: 24
79.176.85.0/24 maxlen: 24
79.176.86.0/24 maxlen: 24
79.176.88.0/24 maxlen: 24
79.176.89.0/24 maxlen: 24
79.176.90.0/24 maxlen: 24
79.176.91.0/24 maxlen: 24
79.176.93.0/24 maxlen: 24
79.176.95.0/24 maxlen: 24
79.176.97.0/24 maxlen: 24
79.176.98.0/24 maxlen: 24
109.66.62.0/23 maxlen: 24
109.66.64.0/23 maxlen: 24
109.66.82.0/23 maxlen: 24
109.66.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:7c:75:ee:33:c1:69:c4:30:a9:f2:2d:c1:88:7b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 08:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e6c2c02975b1a17b083f1c21432f5a62ed4458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:ee:b0:43:f2:c2:7e:ad:ae:10:61:84:b2:
24:c7:08:60:76:0b:c5:5f:1b:5d:e8:47:90:c6:c8:
5f:ad:3c:0a:1b:4b:4f:95:c2:44:5d:c9:e9:c9:51:
50:55:a0:8d:48:e5:3b:de:af:c7:97:c9:45:49:1f:
77:2f:cf:bd:ea:e3:3a:d4:ff:6d:eb:71:f1:0d:35:
19:f5:98:2e:bf:ce:83:2d:3d:a0:d9:4d:6e:27:53:
55:8d:9d:8c:ad:33:af:59:e1:9d:4c:e4:8c:88:ab:
f3:46:33:1f:48:02:87:d6:0d:d9:6a:06:be:c4:75:
d5:55:4a:28:44:eb:97:81:d0:21:d7:10:6f:c4:11:
92:19:63:8e:79:32:eb:49:c6:0b:9b:a5:14:6a:b0:
9a:78:6f:f6:b0:37:fe:5c:77:61:99:35:92:ae:13:
2f:d7:a8:49:cf:c9:f7:be:c3:4c:c6:77:cf:42:de:
1e:b5:de:b1:8b:6a:f1:c3:b2:84:0d:0d:50:d5:b6:
ee:ca:ec:32:7b:44:40:ea:72:aa:7d:9f:2c:ff:76:
bc:db:e1:83:e9:7e:e8:a2:e7:0c:d8:b8:b1:4c:1f:
67:a2:2c:be:c0:c8:ab:5d:bf:73:7e:19:7b:4f:39:
3c:ae:2b:ce:7e:89:53:45:da:56:ff:8f:20:12:4e:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:2C:02:97:5B:1A:17:B0:83:F1:C2:14:32:F5:A6:2E:D4:45:8F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/LmwsApdbGhewg_HCFDL1pi7URY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.19.0-79.176.20.255
79.176.22.0/24
79.176.32.0/24
79.176.34.0/24
79.176.43.0/24
79.176.52.0/24
79.176.54.0/24
79.176.58.0/24
79.176.60.0/24
79.176.66.0/24
79.176.68.0/24
79.176.71.0-79.176.76.255
79.176.81.0-79.176.82.255
79.176.85.0-79.176.86.255
79.176.88.0/22
79.176.93.0/24
79.176.95.0/24
79.176.97.0-79.176.98.255
109.66.62.0-109.66.65.255
109.66.82.0/23
109.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:2d:dd:93:fe:7d:d1:da:50:45:ff:ac:f0:7f:41:8b:43:bf:
65:1b:23:7e:02:09:4c:98:27:8c:ec:9d:b6:d9:ed:9a:34:ae:
cc:69:d8:f7:dc:7d:23:61:ee:8d:90:3e:92:5c:b2:47:a2:db:
e8:c9:10:53:b6:bb:34:cb:ca:b9:bd:d8:d3:7f:b2:ae:a6:0a:
54:22:a7:c7:09:20:72:f0:c5:80:b4:08:3a:d4:ec:a7:d6:9b:
5c:65:12:9f:02:05:9b:ff:29:9a:f5:84:91:e4:e0:e1:04:fd:
57:2d:5a:fd:1d:7c:2b:8c:11:85:95:08:a9:09:24:5a:c9:a1:
f0:b9:8b:c5:08:f6:5a:1d:c8:de:d7:51:0c:cc:c5:f7:bf:7f:
c6:4f:ed:fa:6f:b8:a9:33:26:48:4f:de:0a:e0:8e:3a:0a:31:
36:44:8c:06:8c:25:aa:2a:0c:5c:ce:71:fd:29:b4:cb:9c:52:
50:2b:de:0a:f2:45:59:f3:a1:c3:d9:7e:77:29:4f:51:81:a0:
7b:2f:26:2a:31:66:bf:8f:90:f0:e2:ab:d2:89:81:b9:0f:ae:
3e:8b:3f:a8:d2:66:fb:c9:8e:29:52:16:f0:0c:7a:87:b6:e6:
a3:9b:97:1f:88:ee:7d:d6:77:a0:73:b5:18:46:1c:6e:86:8e:
7d:3d:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:15 2026 by rpki-client