Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/Luo1D-yLxbBh2S9ByzPp0tpkr5A.roa
File: Luo1D-yLxbBh2S9ByzPp0tpkr5A.roa (raw, json)
Hash identifier: U2pR9yc9wJvP/0+4gy2T0X1K3Cuj9Lkjh6gfdUbFv2Q=
Subject key identifier: 2E:EA:35:0F:EC:8B:C5:B0:61:D9:2F:41:CB:33:E9:D2:DA:64:AF:90
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A1947A9DCB066B908D3D0764A982FE18EC
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/Luo1D-yLxbBh2S9ByzPp0tpkr5A.roa
Signing time: Sun 01 Nov 2026 00:20:25 +0000
ROA not before: Sun 01 Nov 2026 00:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.130.244.0/23 maxlen: 23
178.212.61.0/24 maxlen: 24
178.212.62.0/24 maxlen: 24
178.212.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:7a:9d:cb:06:6b:90:8d:3d:07:64:a9:82:fe:18:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Nov 1 00:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eea350fec8bc5b061d92f41cb33e9d2da64af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:59:e1:da:a6:d4:2b:c5:74:87:f1:da:54:
89:79:d6:bf:e0:9e:55:a6:02:1a:b8:31:85:b8:ca:
ed:b6:ec:d4:9f:0b:5f:4c:ac:1c:9b:e7:d5:f3:d4:
94:0e:73:8a:f0:b8:fa:fa:de:4a:01:5b:04:d2:40:
50:35:25:14:cf:66:63:58:b0:18:5c:b1:64:3d:2b:
9f:a4:bb:21:68:7e:ba:42:09:54:c0:62:a8:05:e8:
4f:f5:ff:26:5c:56:72:c1:59:4c:e5:6f:3a:b7:05:
66:61:ed:3a:ac:1e:06:32:5f:a2:96:ad:cd:d6:72:
c2:21:55:b7:46:42:50:e1:d1:bf:fd:a0:37:ff:47:
a4:af:62:1c:ab:20:d8:37:94:d9:21:20:a0:b5:9b:
0f:40:ab:f0:09:b3:5b:0d:7b:81:ce:c3:1d:67:22:
b1:64:57:75:7b:00:ce:64:c8:14:d0:b7:68:5c:ba:
11:35:ee:38:de:f4:82:2a:5a:87:dd:62:50:31:cb:
ff:7c:b3:9a:40:50:88:c1:67:9b:43:4f:9b:95:e6:
92:bc:d9:30:b3:e0:90:fa:28:0d:64:8f:70:ac:e8:
3d:ec:e8:bf:7e:99:45:35:81:66:f9:6b:3a:1d:74:
cb:b1:0a:b3:bf:63:e4:6b:63:b6:13:97:d4:af:ab:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:35:0F:EC:8B:C5:B0:61:D9:2F:41:CB:33:E9:D2:DA:64:AF:90
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/Luo1D-yLxbBh2S9ByzPp0tpkr5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.244.0/23
178.212.61.0-178.212.63.255
Signature Algorithm: sha256WithRSAEncryption
80:8e:c5:36:06:c7:fa:9d:6c:46:53:61:20:cd:92:45:38:eb:
01:a5:83:15:d0:c4:47:0a:ff:64:ba:ad:9c:d3:32:91:ff:1b:
62:4e:cd:c2:e1:a5:fe:77:5c:5b:43:84:2d:89:86:ab:49:2d:
89:db:b6:83:74:83:a1:bb:4e:4e:08:1e:13:69:8e:e3:27:af:
e4:67:98:0c:1c:58:0c:bd:84:a6:50:3b:cc:89:0b:cd:01:25:
fe:6d:5e:60:ce:ec:97:84:2d:b5:19:85:5e:dc:4b:b6:36:30:
5b:8d:6e:1b:76:7d:e3:25:23:b5:39:45:14:77:a0:95:52:f1:
c1:b7:bd:00:93:be:09:6b:0c:68:5e:bc:a3:f4:0e:0c:70:d3:
c2:07:c6:be:a8:0b:20:83:cf:d5:02:17:a8:49:ef:65:03:e0:
49:03:e0:64:b1:1e:11:53:bc:c8:9f:62:7c:73:41:f6:8c:00:
8e:bb:c6:8b:58:9b:dc:96:22:79:cf:36:f3:5e:9a:b2:fb:3c:
f6:0c:12:a1:4e:d4:c9:b9:94:5a:af:e9:73:70:0d:05:c1:d4:
92:e8:69:1b:f2:9f:8c:7f:3c:66:49:98:57:37:bb:c6:a9:70:
6d:c9:64:9f:93:9c:9c:c0:b3:d2:44:6b:19:56:ce:7c:98:f1:
78:4d:ce:57
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGUep3LBmuQjT0HZKmC/hjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjYxMTAxMDAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWVhMzUwZmVjOGJjNWIwNjFkOTJmNDFjYjMzZTlkMmRhNjRhZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm05Z4dqm1CvFdIfx2lSJeda/4J5V
pgIauDGFuMrttuzUnwtfTKwcm+fV89SUDnOK8Lj6+t5KAVsE0kBQNSUUz2ZjWLAY
XLFkPSufpLshaH66QglUwGKoBehP9f8mXFZywVlM5W86twVmYe06rB4GMl+ilq3N
1nLCIVW3RkJQ4dG//aA3/0ekr2IcqyDYN5TZISCgtZsPQKvwCbNbDXuBzsMdZyKx
ZFd1ewDOZMgU0LdoXLoRNe443vSCKlqH3WJQMcv/fLOaQFCIwWebQ0+bleaSvNkw
s+CQ+igNZI9wrOg97Oi/fplFNYFm+Ws6HXTLsQqzv2Pka2O2E5fUr6vl1QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFC7qNQ/si8WwYdkvQcsz6dLaZK+QMB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvTHVvMUQteUx4YkJoMlM5Qnl6UHAwdHBrcjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBH4L0MAwD
BACy1D0DBAay1AAwDQYJKoZIhvcNAQELBQADggEBAICOxTYGx/qdbEZTYSDNkkU4
6wGlgxXQxEcK/2S6rZzTMpH/G2JOzcLhpf53XFtDhC2JhqtJLYnbtoN0g6G7Tk4I
HhNpjuMnr+RnmAwcWAy9hKZQO8yJC80BJf5tXmDO7JeELbUZhV7cS7Y2MFuNbht2
feMlI7U5RRR3oJVS8cG3vQCTvglrDGhevKP0Dgxw08IHxr6oCyCDz9UCF6hJ72UD
4EkD4GSxHhFTvMifYnxzQfaMAI67xotYm9yWInnPNvNemrL7PPYMEqFO1Mm5lFqv
6XNwDQXB1JLoaRvyn4x/PGZJmFc3u8apcG3JZJ+TnJzAs9JEaxlWznyY8XhNzlc=
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:01:41 2026 by rpki-client