Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/LwZw57KRcsSlFCkevmi86lLELNg.roa
File: LwZw57KRcsSlFCkevmi86lLELNg.roa (raw, json)
Hash identifier: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=
Subject key identifier: 2F:06:70:E7:B2:91:72:C4:A5:14:29:1E:BE:68:BC:EA:52:C4:2C:D8
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019C5426C4FA88F01D26E2FF76824548F7E0
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/LwZw57KRcsSlFCkevmi86lLELNg.roa
Signing time: Thu 12 Feb 2026 23:19:12 +0000
ROA not before: Thu 12 Feb 2026 23:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59745
IP address blocks: 193.188.158.0/24 maxlen: 24
193.188.159.0/24 maxlen: 24
195.182.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:26:c4:fa:88:f0:1d:26:e2:ff:76:82:45:48:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Feb 12 23:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f0670e7b29172c4a514291ebe68bcea52c42cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:3a:74:ef:24:bd:f9:31:f7:50:19:76:fd:
60:78:9e:c5:b9:6b:77:56:d2:96:14:47:27:4b:8f:
23:e1:3f:f7:a0:a6:c3:bb:0f:2c:af:3d:58:d4:ee:
ff:2b:fd:67:d4:7b:3b:88:a3:ce:18:dd:4d:20:36:
53:56:8f:0f:d4:20:5c:60:a8:e4:44:bf:4a:86:22:
ba:d9:fc:27:90:4d:e3:89:0c:22:13:ee:54:fc:12:
c7:99:21:db:a7:ba:d2:71:79:c2:06:01:e1:82:6c:
8f:e2:83:65:18:f8:8e:85:22:58:41:f7:e5:17:6e:
0a:ec:86:8b:e6:21:5b:5d:28:36:90:23:dd:f5:be:
14:1e:2c:a5:01:19:97:e2:60:c3:eb:c8:30:98:a5:
0c:ef:c4:88:44:4f:d2:0f:f9:1d:be:74:40:16:42:
4b:77:3e:18:dc:e7:63:db:3d:70:32:72:ec:a9:41:
b8:f6:5b:d9:bd:78:f2:65:2e:ca:b7:1b:58:9a:a8:
e1:7f:64:52:4c:b7:32:15:46:10:c6:83:74:db:e9:
29:50:da:38:55:4b:6d:cc:8b:9d:74:26:a1:fd:ad:
5f:e9:83:d7:1b:b9:bc:12:6c:34:1b:8a:aa:4c:01:
f5:0c:e4:b5:35:8f:19:f8:bd:bb:9a:43:8d:f8:4c:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:70:E7:B2:91:72:C4:A5:14:29:1E:BE:68:BC:EA:52:C4:2C:D8
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/LwZw57KRcsSlFCkevmi86lLELNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.158.0/23
195.182.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:0b:4e:18:4f:72:59:46:b6:14:a0:91:84:92:23:6e:fa:7b:
e8:88:34:63:95:3d:05:da:d0:fa:c3:e3:79:d2:a3:b4:db:ba:
4b:9d:4a:01:80:6b:40:86:4a:22:cf:f7:24:f6:40:34:d9:e1:
a6:9b:44:76:6b:75:43:b0:07:ad:b5:67:dd:70:85:9e:54:9f:
b1:e2:b1:a4:b7:d3:03:3a:f3:6c:28:d4:fd:23:a3:fb:a0:87:
29:28:24:11:36:f9:05:5d:82:14:04:d4:b9:d0:a8:aa:c0:da:
bf:f0:b2:65:08:6c:b1:39:9e:b1:69:f7:d2:7b:86:4a:db:b0:
1e:8a:be:ca:32:93:a3:b6:0b:29:29:b8:18:ce:06:8f:0a:22:
9a:39:e8:69:e1:4f:30:92:38:2c:f8:f0:36:0a:70:63:cb:d5:
40:4a:64:4b:af:b4:1b:34:89:4e:c8:1f:56:53:99:ac:85:98:
e3:67:63:5e:ba:06:76:0c:b6:cf:dd:d2:93:b9:2d:62:29:13:
8d:e8:01:af:4c:ca:ed:4d:2e:96:74:66:e6:51:02:2a:20:36:
c4:69:73:9e:6f:be:4f:e7:78:ce:7e:59:c3:50:c5:be:93:da:
c1:37:a0:9d:d6:f2:dc:79:59:46:65:be:6a:e2:9c:47:f9:81:
e2:68:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:19:31 2026 by rpki-client