Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u1ILm64RZqEHt7UdL0YGPK2Ahhk.roa
File: u1ILm64RZqEHt7UdL0YGPK2Ahhk.roa (raw, json)
Hash identifier: 3ae2fZguXgMHA3UGYgW2NRJZCF61OY7ahZxP618Uuaw=
Subject key identifier: BB:52:0B:9B:AE:11:66:A1:07:B7:B5:1D:2F:46:06:3C:AD:80:86:19
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A137AE9769B51EEDEE84839B3C0A9A1AF3
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u1ILm64RZqEHt7UdL0YGPK2Ahhk.roa
Signing time: Tue 13 Oct 2026 23:52:31 +0000
ROA not before: Tue 13 Oct 2026 23:52:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 155.212.45.0/24 maxlen: 24
170.168.125.0/24 maxlen: 24
170.168.134.0/24 maxlen: 24
170.168.169.0/24 maxlen: 24
170.168.177.0/24 maxlen: 24
170.168.178.0/24 maxlen: 24
170.168.182.0/24 maxlen: 24
170.168.183.0/24 maxlen: 24
170.168.194.0/24 maxlen: 24
170.168.196.0/24 maxlen: 24
170.168.201.0/24 maxlen: 24
170.168.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ae:97:69:b5:1e:ed:ee:84:83:9b:3c:0a:9a:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 13 23:52:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb520b9bae1166a107b7b51d2f46063cad808619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:15:c1:83:a8:7e:99:a7:98:cd:d3:3a:05:
f5:16:29:5b:10:08:15:d9:ad:95:18:dd:04:af:86:
ad:f2:3a:27:fb:88:80:c3:53:1e:12:cc:0c:3a:c6:
9f:02:ea:43:6a:6d:02:54:e3:88:cf:9b:4c:c6:f4:
86:d5:27:d2:80:6f:15:54:e6:26:20:77:44:89:06:
de:a1:29:a4:37:5d:72:f8:02:8c:ed:ee:11:3c:40:
2f:af:b8:c4:87:e1:ee:cb:8a:db:7d:1a:27:3b:c0:
e4:98:42:48:34:e1:c8:03:e9:bf:91:51:08:44:4c:
89:f6:0e:84:60:77:21:1c:62:3f:31:0d:c4:88:97:
ef:37:33:68:c8:b5:cb:3a:e0:a5:ac:9c:1b:21:6b:
51:b9:90:59:50:24:40:c8:7a:86:29:ce:fb:e9:65:
e5:06:ae:a7:e0:79:c5:b9:cf:35:27:4c:c9:31:98:
e3:63:b1:a1:2c:f3:5c:41:bb:75:1a:3d:e9:fd:8f:
78:36:24:c3:87:e3:ba:38:de:b7:9c:44:be:59:06:
a0:89:64:38:f8:bb:fd:0f:b6:98:a6:4e:03:ca:56:
e1:08:9e:79:08:1b:e4:a9:dd:ec:92:69:22:35:70:
7c:1d:f2:55:bb:82:39:30:b6:e2:f1:b7:50:04:ce:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:0B:9B:AE:11:66:A1:07:B7:B5:1D:2F:46:06:3C:AD:80:86:19
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u1ILm64RZqEHt7UdL0YGPK2Ahhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.45.0/24
170.168.125.0/24
170.168.134.0/24
170.168.169.0/24
170.168.177.0-170.168.178.255
170.168.182.0/23
170.168.194.0/24
170.168.196.0/24
170.168.201.0/24
170.168.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:23:3f:11:3b:2e:c7:86:28:a4:0b:e8:f9:68:17:76:2b:d3:
d2:96:7e:11:ca:5c:d1:12:15:aa:29:cf:82:a1:e2:2a:44:3c:
68:7f:cc:a5:70:fa:af:3e:6a:2f:f0:1a:e2:85:7b:7c:df:2b:
f1:24:91:1f:8e:28:a2:c0:02:f7:91:c4:d4:44:93:1e:84:08:
c2:fc:0c:1d:bf:67:6b:5d:81:88:35:2b:5e:fc:49:64:e5:6e:
f6:18:58:cc:e1:75:2a:eb:ac:e4:cb:82:46:a2:1d:1c:42:62:
d8:0d:df:48:04:3a:ab:5e:2e:b7:41:45:2b:b5:8b:1c:6f:07:
e7:8b:fc:62:2c:56:c2:16:49:6c:25:4a:07:f0:ba:e9:9c:df:
1b:ec:45:82:3a:90:b4:f2:30:6d:c9:c4:be:55:4b:90:e4:9b:
d9:69:b1:29:6d:40:42:37:fd:62:b8:f2:4e:d3:9a:ef:52:70:
cf:b9:86:86:14:1f:b6:7c:9a:77:94:e2:0b:d7:86:bc:42:b8:
81:4e:72:89:3f:b5:4c:0d:60:10:f3:bd:81:ae:f6:69:cb:55:
c0:cd:24:03:2f:3c:22:42:ff:08:0d:17:dc:98:aa:fc:94:a8:
3a:bb:cb:3f:4c:8e:ff:43:5c:6f:65:cb:b6:fc:66:70:12:91:
7b:ef:d3:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:10:03 2026 by rpki-client