Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/LBUexS1wq8AOyPYNOmyKpXx9zNs.roa
File: LBUexS1wq8AOyPYNOmyKpXx9zNs.roa (raw, json)
Hash identifier: nF2TOFtPqERUujfrIj1cE2WTysCpGfddroPkP+wf4gg=
Subject key identifier: 2C:15:1E:C5:2D:70:AB:C0:0E:C8:F6:0D:3A:6C:8A:A5:7C:7D:CC:DB
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A0584C9B290FCDF37C86EC514C48E3D311
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/LBUexS1wq8AOyPYNOmyKpXx9zNs.roa
Signing time: Mon 31 Aug 2026 14:50:10 +0000
ROA not before: Mon 31 Aug 2026 14:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
2.59.111.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
31.25.176.0/21 maxlen: 24
37.122.216.0/22 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
46.28.163.0/24 maxlen: 24
46.28.166.0/23 maxlen: 23
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
176.56.78.0/23 maxlen: 23
176.56.80.0/22 maxlen: 22
176.56.85.0/24 maxlen: 24
176.56.86.0/23 maxlen: 23
176.56.92.0/24 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.84.204.0/22 maxlen: 22
185.84.206.0/24 maxlen: 24
185.85.255.0/24 maxlen: 24
185.98.32.0/22 maxlen: 22
185.102.204.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.110.212.0/22 maxlen: 24
185.111.0.0/22 maxlen: 22
185.111.0.0/24 maxlen: 24
185.111.1.0/24 maxlen: 24
185.111.2.0/24 maxlen: 24
185.111.3.0/24 maxlen: 24
185.142.44.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.157.4.0/22 maxlen: 22
185.157.4.0/24 maxlen: 24
185.157.7.0/24 maxlen: 24
185.176.104.0/22 maxlen: 22
185.176.104.0/24 maxlen: 24
185.176.105.0/24 maxlen: 24
185.176.106.0/24 maxlen: 24
185.176.107.0/24 maxlen: 24
185.205.252.0/22 maxlen: 22
185.205.252.0/24 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.205.255.0/24 maxlen: 24
185.212.136.0/22 maxlen: 24
185.223.216.0/22 maxlen: 22
185.223.216.0/24 maxlen: 24
185.228.124.0/22 maxlen: 24
185.228.124.0/24 maxlen: 24
185.228.125.0/24 maxlen: 24
185.228.126.0/24 maxlen: 24
185.228.127.0/24 maxlen: 24
185.239.160.0/22 maxlen: 22
185.239.160.0/24 maxlen: 24
185.239.161.0/24 maxlen: 24
185.239.162.0/23 maxlen: 23
185.243.136.0/22 maxlen: 24
193.108.206.0/23 maxlen: 24
193.108.206.0/24 maxlen: 24
193.108.230.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
194.156.73.0/24 maxlen: 24
194.156.75.0/24 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:4c:9b:29:0f:cd:f3:7c:86:ec:51:4c:48:e3:d3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 31 14:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c151ec52d70abc00ec8f60d3a6c8aa57c7dccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ec:b3:7c:00:1f:13:35:eb:47:e2:96:09:3c:
f6:c6:83:05:0b:0a:00:a4:7b:74:0c:bb:28:f6:56:
a0:1c:d7:ea:87:63:84:61:99:cf:f8:a0:43:6c:ce:
40:3b:8d:95:08:02:46:3f:3d:83:24:33:21:d0:d7:
db:92:fa:d6:08:06:e6:fc:59:44:7c:1a:7f:6d:3a:
b1:bb:d5:bb:b9:f3:55:1f:55:d9:36:c1:e2:d9:48:
c1:85:03:b8:d4:00:83:ec:94:01:42:2b:71:47:9c:
fc:67:81:34:4e:45:a1:02:4b:ad:8e:52:4d:c0:14:
d7:2f:7e:3b:29:88:8e:54:c4:cc:ce:37:bf:e1:fa:
15:7e:5e:55:28:62:d9:6d:c6:64:10:23:8c:14:ac:
a3:4d:12:d1:18:b7:37:22:d5:ed:2e:8f:bb:5c:ef:
03:56:58:b0:52:f5:48:41:58:a7:97:9c:1e:ad:da:
3e:53:96:58:51:43:84:6e:be:1b:f7:7e:b2:3f:dc:
cd:3e:47:e4:26:8b:72:69:9d:9a:52:b1:39:ef:9e:
eb:1e:c6:ac:9c:c8:70:fe:bd:8c:9a:a8:ac:2f:b6:
ee:1a:2c:fc:4a:19:0b:ac:96:21:6b:ca:5b:b4:d4:
0d:02:78:a4:17:06:a0:ce:66:74:e0:e3:bc:11:a8:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:1E:C5:2D:70:AB:C0:0E:C8:F6:0D:3A:6C:8A:A5:7C:7D:CC:DB
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/LBUexS1wq8AOyPYNOmyKpXx9zNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
5.134.32.0/20
31.25.176.0/21
37.122.216.0/22
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.70.152.0/22
185.84.204.0/22
185.85.255.0/24
185.98.32.0/22
185.102.204.0/22
185.103.148.0/22
185.110.212.0/22
185.111.0.0/22
185.142.44.0/22
185.153.16.0/22
185.157.4.0/22
185.176.104.0/22
185.205.252.0/22
185.212.136.0/22
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
185.243.136.0/22
193.108.206.0/23
193.108.230.0/23
193.246.156.0/23
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
ba:91:4d:b0:c7:29:f6:5d:7e:32:a5:8d:40:00:e3:03:31:44:
3c:2f:f0:e8:c6:75:03:c4:22:2e:9f:c4:e8:a3:72:0a:71:5f:
fb:99:cd:31:09:4f:85:fd:84:7b:cd:f4:00:06:1a:f3:f5:46:
be:95:a8:da:cc:cd:2d:2d:ba:66:b4:8f:dd:31:a2:09:89:1f:
93:2e:71:b7:cb:7a:ea:c4:68:9c:fc:06:12:4a:1b:86:46:29:
d8:29:6d:00:fe:3b:1d:11:ad:2e:44:5a:71:e3:ce:b9:c6:c5:
36:a2:2e:77:d2:94:da:19:f8:53:d9:84:14:b2:49:af:d3:ed:
6f:cc:e9:8c:9e:ae:11:e6:a9:04:99:44:85:77:4d:4b:37:c0:
d4:51:bf:0b:7b:c0:01:50:4d:3e:66:dc:91:00:fc:c0:54:ec:
77:4c:f3:75:7c:0a:2a:66:1a:f1:59:0e:23:50:f0:80:75:14:
1e:da:0c:f9:0a:da:cd:75:36:76:81:09:2f:f2:00:97:fe:ef:
be:4a:1b:99:32:1f:19:57:03:ec:c5:eb:79:81:02:6f:a5:be:
9a:41:42:c4:4c:4d:b2:e8:f0:3a:be:08:28:e3:9d:88:7b:22:
1f:18:2f:31:f5:3e:46:94:bd:1c:bd:99:b3:e4:d4:f6:2a:2b:
53:e1:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:27:27 2026 by rpki-client