Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1LEKFShcnZpkx3naA6jqxRNk2Fc.roa
File: 1LEKFShcnZpkx3naA6jqxRNk2Fc.roa (raw, json)
Hash identifier: ZlOFe0UHPatna+aBytbQh9GETiFXc4FAbJ26yBr/2Fw=
Subject key identifier: D4:B1:0A:15:28:5C:9D:9A:64:C7:79:DA:03:A8:EA:C5:13:64:D8:57
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019C2F41475B2C3C7DC85096D3A1D0D3B382
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1LEKFShcnZpkx3naA6jqxRNk2Fc.roa
Signing time: Thu 05 Feb 2026 19:22:13 +0000
ROA not before: Thu 05 Feb 2026 19:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.243.0/24 maxlen: 24
193.28.183.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
194.156.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:41:47:5b:2c:3c:7d:c8:50:96:d3:a1:d0:d3:b3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 5 19:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b10a15285c9d9a64c779da03a8eac51364d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:a2:ff:13:2c:5c:c2:03:f9:bc:d9:0e:d5:
40:7b:4e:13:1b:0e:07:6d:4e:ea:76:fe:00:b7:a6:
ab:13:3e:5d:2a:f9:dd:c6:0a:25:12:56:af:9c:72:
6d:25:16:e5:9a:f6:49:20:1b:c1:57:0a:13:eb:a6:
c1:a1:4b:e3:d9:dd:34:54:f6:91:20:04:48:0b:df:
35:93:d8:52:3a:ca:ce:20:c3:8d:c9:9b:ae:b7:10:
b9:e8:c7:c6:1c:06:20:85:7e:17:56:21:75:ea:b2:
a9:20:c3:d9:a4:1b:c1:b4:79:c8:a5:56:5d:4d:00:
ad:11:a2:4c:de:7a:70:b6:d2:1c:bd:52:e6:a8:8f:
88:19:08:ea:17:bb:18:31:50:b7:b5:54:2a:34:1d:
1b:94:bc:ec:97:34:ce:8f:5a:3e:43:30:01:6d:30:
4c:95:d3:04:9b:4b:7b:87:8a:03:f1:31:97:d8:ea:
53:14:22:a4:7b:b5:1b:fe:c1:3a:e8:51:f1:1d:ab:
4f:80:e3:7b:f7:a5:38:d1:35:39:7f:d2:d6:c3:db:
45:80:1d:eb:6a:6b:47:3b:23:4b:17:cd:93:2e:9c:
56:00:29:39:98:a8:90:88:27:c5:fa:79:85:8f:64:
5f:16:e4:55:a0:ba:dc:4e:4b:41:24:82:b7:cd:09:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:0A:15:28:5C:9D:9A:64:C7:79:DA:03:A8:EA:C5:13:64:D8:57
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1LEKFShcnZpkx3naA6jqxRNk2Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
193.28.183.0/24
194.147.88.0/24
194.156.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ba:ef:5d:2e:08:17:68:20:8c:63:a9:18:f1:47:c3:52:e1:
4b:c9:df:39:10:94:01:df:92:00:0c:9f:80:5e:fb:e6:d2:a3:
6d:15:19:25:61:78:dc:15:52:f4:b0:0e:59:e1:1d:82:a2:ef:
8c:38:09:05:b3:cf:ad:8b:7c:fb:e1:03:b1:83:7f:a2:24:6d:
35:0d:4d:4a:b3:d5:84:d7:86:2f:a5:88:02:cc:e0:db:78:3a:
3c:3f:43:1e:a6:f1:0b:d4:12:7c:dc:92:1d:0b:e5:57:e5:09:
f7:b5:56:b8:6b:a0:7f:09:f5:25:8d:1a:4e:5f:5a:6a:d9:3f:
9b:4d:4e:da:4e:9d:8b:5d:35:2b:e4:5e:10:78:37:f6:93:be:
ff:46:99:25:de:8d:5c:46:de:5f:a1:d0:a9:4f:7c:5e:4e:f1:
3c:14:01:dd:10:96:73:02:5e:a7:2f:d9:9c:14:fa:81:bb:89:
69:20:14:15:77:b9:1d:8f:a9:95:b1:b8:d6:80:f0:d9:90:10:
f7:7a:48:7b:a1:d1:cd:bc:e2:77:31:d9:56:25:9a:f4:c7:db:
39:c1:10:49:bc:27:a6:1e:f8:f8:c7:b5:09:d8:41:1c:e6:12:
d1:82:a3:73:e2:87:4f:f0:ce:2b:0f:c7:08:57:1f:b3:dd:78:
7a:de:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:39 2026 by rpki-client