Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/LS5MCCO9caJteSNm3UxfcHvxWuY.roa
File: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (raw, json)
Hash identifier: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=
Subject key identifier: 2D:2E:4C:08:23:BD:71:A2:6D:79:23:66:DD:4C:5F:70:7B:F1:5A:E6
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019C9F7BA704F742F0A9917A6D2FAC2D7E05
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/LS5MCCO9caJteSNm3UxfcHvxWuY.roa
Signing time: Fri 27 Feb 2026 14:23:26 +0000
ROA not before: Fri 27 Feb 2026 14:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61207
IP address blocks: 91.240.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:7b:a7:04:f7:42:f0:a9:91:7a:6d:2f:ac:2d:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Feb 27 14:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d2e4c0823bd71a26d792366dd4c5f707bf15ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:f5:49:f6:25:1c:49:d5:61:69:62:05:21:
65:37:36:b9:f6:8c:e1:ce:8f:c2:8e:a1:ac:cb:62:
2a:8e:46:3a:78:6e:65:4f:d4:2b:4f:94:bd:5b:4d:
b6:d4:de:29:45:cc:7f:34:ea:e8:88:e2:25:9b:9d:
a4:a2:5c:06:3f:0b:21:69:d7:b2:9e:40:f1:54:a8:
28:ea:29:56:85:4d:7e:02:00:05:68:88:21:2a:ae:
cf:98:a5:25:6c:a5:20:11:5f:dd:91:8f:47:14:46:
9b:be:df:fb:b3:af:95:90:20:42:0b:bc:d3:7e:44:
eb:2d:7f:e2:0a:a0:59:39:5b:c2:a9:9e:43:57:8e:
b9:0b:56:b7:41:98:ba:65:0f:a1:08:03:c6:1f:7d:
59:1c:21:79:11:07:04:09:a0:77:99:f6:b6:c9:b3:
eb:25:2f:c5:ff:48:02:2d:c5:d7:6b:6d:5c:20:cd:
51:f0:0c:b1:88:aa:50:aa:f4:0c:b1:4c:44:69:ee:
81:83:db:52:ff:67:72:01:ce:c2:f3:3c:bb:53:c7:
65:3c:4e:6e:24:87:dd:71:73:53:7e:96:06:ff:be:
e0:e0:8b:95:1f:8a:2f:d6:b0:10:50:43:1e:50:76:
a3:42:d7:db:38:68:12:f5:75:8f:51:59:fb:bb:4e:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:4C:08:23:BD:71:A2:6D:79:23:66:DD:4C:5F:70:7B:F1:5A:E6
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/LS5MCCO9caJteSNm3UxfcHvxWuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5a:a0:36:b8:a3:39:9a:ae:f7:23:7e:6c:0e:69:ec:f7:f2:
f0:41:17:f5:af:99:ef:6b:2d:e4:53:87:58:00:8b:d1:57:a4:
c4:aa:7e:54:33:00:03:03:2c:c9:ed:d7:52:73:ce:f2:63:b9:
30:c9:d9:0b:d0:54:6a:bc:d7:cc:a0:e7:ea:e5:1e:a4:d8:a6:
b9:e0:5b:76:96:41:9c:09:d8:d4:3a:91:62:96:71:d7:de:81:
93:7c:86:9a:94:1a:c8:85:4f:21:b3:10:c0:a0:5c:f6:07:3f:
ec:0b:06:64:48:bd:c3:ab:bc:04:b3:0b:ca:cf:1b:fe:f6:2a:
65:64:f5:78:e3:84:44:e2:83:9a:e5:28:91:fb:22:62:4c:d4:
f4:86:58:a9:32:3d:62:47:7e:fa:61:e5:85:e0:7c:f3:32:8d:
da:a6:be:46:d9:26:20:44:04:08:c5:04:ba:29:93:97:dc:0b:
00:09:eb:20:75:8a:57:22:20:a0:dc:5a:ae:8d:7d:44:8e:2e:
f9:25:5c:c9:3f:54:79:7a:f2:08:fe:0f:e0:97:71:72:99:16:
9a:99:9f:cf:e0:ea:9c:32:49:4a:15:f0:ef:5e:84:3b:10:9e:
6e:6b:a1:17:ad:22:23:40:8a:11:d9:de:2a:46:48:cd:a7:e9:
3f:4b:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:26 2026 by rpki-client