Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa
File: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (raw, json)
Hash identifier: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=
Subject key identifier: 2F:09:0B:F0:93:4F:18:A0:66:07:90:60:29:44:03:37:FE:D4:91:17
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 01A09F496D7FBFF58190657D4D277A303374
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa
Signing time: Mon 14 Sep 2026 09:39:44 +0000
ROA not before: Mon 14 Sep 2026 09:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 45.128.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:49:6d:7f:bf:f5:81:90:65:7d:4d:27:7a:30:33:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Sep 14 09:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f090bf0934f18a06607906029440337fed49117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:95:ac:3f:3c:bf:5d:5e:ec:48:37:a2:da:
6e:1e:6d:17:db:37:d1:a6:83:11:af:99:e8:ec:6d:
d1:35:c0:21:59:07:59:cd:37:c3:97:fd:0d:57:3d:
2d:7d:21:98:7b:77:fc:f0:5c:24:0a:f6:11:fc:54:
3c:85:67:be:2d:e0:f7:bf:ec:cd:de:17:d2:07:1d:
61:8d:af:a0:ab:ff:dc:b6:c5:a5:aa:3e:18:7f:0d:
be:e6:e3:2a:58:7c:b8:04:83:f5:db:56:1b:06:7f:
59:85:2f:60:9f:3e:70:e2:83:ee:e6:3d:f4:76:9d:
99:fb:a5:1d:5f:c4:5c:d4:01:d7:59:0d:09:e0:64:
da:4e:7a:45:72:57:22:52:aa:dc:f2:25:e6:9f:5f:
05:14:fd:4e:be:70:33:ac:49:85:16:09:b8:45:1e:
a7:a5:c0:26:78:c3:40:40:f0:9a:3d:cb:c7:d0:52:
a2:0a:bb:66:03:90:fc:29:a0:cf:6e:23:77:14:09:
79:03:dc:b3:e7:84:ce:9e:eb:49:d8:46:c2:6d:f5:
64:df:97:8d:9c:85:ba:7b:52:3c:3d:c8:0d:66:2e:
35:d1:98:af:6a:e3:b5:51:bc:7b:29:2e:5a:b5:06:
fc:71:91:38:f8:11:d6:30:2d:e2:93:0b:42:52:99:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:0B:F0:93:4F:18:A0:66:07:90:60:29:44:03:37:FE:D4:91:17
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:88:45:30:85:34:30:23:f3:49:73:48:60:2b:ec:34:f0:e8:
2d:71:f6:54:46:1d:97:93:ef:9e:d2:f7:dd:0c:01:b2:25:da:
7c:a4:eb:78:05:4c:66:b9:aa:56:4b:0b:b2:8e:a5:71:5b:eb:
72:96:aa:10:7d:74:13:a9:0a:07:d6:1f:8a:25:89:c7:a4:bf:
a7:62:cb:e4:83:6f:39:77:3b:2d:a1:34:cd:98:cd:0f:33:79:
37:44:e1:4d:34:b3:6f:d9:e3:86:60:dc:3b:6b:18:73:c9:cd:
d9:1f:20:a4:30:98:e9:c8:07:4e:ab:57:fc:7a:f6:6e:23:7b:
7f:71:bc:1f:8d:20:3a:ee:21:ab:01:bb:3a:cd:b6:d5:05:a2:
2d:f7:11:97:11:ec:2e:f6:c2:5d:9e:c2:27:62:5e:cf:14:13:
dd:79:b1:25:4b:16:aa:20:7c:f9:bc:79:d3:6c:f1:9b:18:fe:
a5:06:de:bb:dc:40:40:28:9d:4b:f2:ff:34:42:b5:5b:ad:1c:
e2:f5:26:02:62:5d:6b:0e:2f:67:c5:6b:45:91:85:86:18:65:
74:55:15:d7:ee:82:19:b8:ed:89:0c:1a:7f:cc:bc:c2:b4:1f:
db:75:9e:cc:4b:c8:51:7d:63:c5:68:0f:de:d5:d3:04:84:ae:
0c:e8:f6:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCfSW1/v/WBkGV9TSd6MDN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy
ODE1YjkwHhcNMjYwOTE0MDkzOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA5MGJmMDkzNGYxOGEwNjYwNzkwNjAyOTQ0MDMzN2ZlZDQ5MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSVrD88v11e7Eg3otpuHm0X2zfR
poMRr5no7G3RNcAhWQdZzTfDl/0NVz0tfSGYe3f88FwkCvYR/FQ8hWe+LeD3v+zN
3hfSBx1hja+gq//ctsWlqj4Yfw2+5uMqWHy4BIP121YbBn9ZhS9gnz5w4oPu5j30
dp2Z+6UdX8Rc1AHXWQ0J4GTaTnpFclciUqrc8iXmn18FFP1OvnAzrEmFFgm4RR6n
pcAmeMNAQPCaPcvH0FKiCrtmA5D8KaDPbiN3FAl5A9yz54TOnutJ2EbCbfVk35eN
nIW6e1I8PcgNZi410ZivauO1Ubx7KS5atQb8cZE4+BHWMC3ikwtCUpkMAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8JC/CTTxigZgeQYClEAzf+1JEXMB8GA1UdIwQY
MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt
YTQ5Y2JiODRmOTgyLzEvTHdrTDhKTlBHS0JtQjVCZ0tVUUROXzdVa1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy
LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDfMA0G
CSqGSIb3DQEBCwUAA4IBAQBviEUwhTQwI/NJc0hgK+w08OgtcfZURh2Xk++e0vfd
DAGyJdp8pOt4BUxmuapWSwuyjqVxW+tylqoQfXQTqQoH1h+KJYnHpL+nYsvkg285
dzstoTTNmM0PM3k3ROFNNLNv2eOGYNw7axhzyc3ZHyCkMJjpyAdOq1f8evZuI3t/
cbwfjSA67iGrAbs6zbbVBaIt9xGXEewu9sJdnsInYl7PFBPdebElSxaqIHz5vHnT
bPGbGP6lBt673EBAKJ1L8v80QrVbrRzi9SYCYl1rDi9nxWtFkYWGGGV0VRXX7oIZ
uO2JDBp/zLzCtB/bdZ7MS8hRfWPFaA/e1dMEhK4M6PbY
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:27 2026 by rpki-client