Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LudqbDarNFcOvbnivCZQk9NarVA.roa
File: LudqbDarNFcOvbnivCZQk9NarVA.roa (raw, json)
Hash identifier: ijC2exaMQ+loap5oRTomF9L7Z9aeQXX2JsBoqVqbRsY=
Subject key identifier: 2E:E7:6A:6C:36:AB:34:57:0E:BD:B9:E2:BC:26:50:93:D3:5A:AD:50
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0F7702CF49DC5F792C51233670916888C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LudqbDarNFcOvbnivCZQk9NarVA.roa
Signing time: Thu 01 Oct 2026 12:28:38 +0000
ROA not before: Thu 01 Oct 2026 12:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.246.245.0/24 maxlen: 24
124.198.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:70:2c:f4:9d:c5:f7:92:c5:12:33:67:09:16:88:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 1 12:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee76a6c36ab34570ebdb9e2bc265093d35aad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7a:76:0f:ac:6b:8c:0a:d9:2e:c6:13:49:
71:60:f9:f4:5d:d9:a2:6e:b4:06:b1:14:d7:d0:92:
15:e1:e3:65:39:74:63:d4:f8:a1:72:e5:ad:9f:9a:
21:b1:b9:91:02:b1:ea:fb:6b:62:2a:57:4f:be:a0:
93:1d:4a:e4:c2:08:d0:2f:8b:0c:bc:43:3a:28:20:
2d:ee:20:a4:39:83:a0:b6:c9:a6:f3:b9:bf:72:8e:
4b:af:07:26:f6:62:66:0b:f8:01:2c:5e:26:ea:3b:
69:8c:76:7d:f0:cc:ce:cd:aa:b0:f5:9b:f1:fb:79:
4e:f3:ee:6a:b1:6a:ac:c6:dc:4b:d1:fb:d9:40:fd:
82:c0:8c:d6:97:41:8b:7d:75:8d:e0:38:9d:db:a2:
81:9a:3a:02:4e:bf:18:7b:82:9e:e9:d9:d2:8b:92:
07:41:f9:52:c3:4d:cc:46:a9:d0:a6:19:2f:5a:c6:
70:74:3b:22:4f:30:b0:15:dc:08:63:0c:27:8c:1a:
85:85:5b:bc:f6:6f:19:8e:ab:02:bd:0e:d3:bb:14:
43:a2:05:18:c4:15:a7:37:3c:7b:c3:e8:77:d0:ae:
2c:11:36:a4:fa:da:59:02:ad:e8:08:aa:8c:18:56:
da:26:c1:df:d7:42:25:01:a9:66:4e:ce:29:bc:1c:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:6A:6C:36:AB:34:57:0E:BD:B9:E2:BC:26:50:93:D3:5A:AD:50
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/LudqbDarNFcOvbnivCZQk9NarVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.245.0/24
124.198.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:10:5f:89:4d:2f:2b:f3:2c:d2:02:27:c1:6a:4f:f3:b8:b0:
2a:eb:c4:48:c3:7c:f4:8e:6f:9f:4f:28:04:16:24:5a:7e:0b:
2d:90:cf:2c:ab:1d:c5:ab:79:71:3a:a1:0e:8a:ea:2e:b2:b2:
d7:b6:70:cd:df:62:32:9c:e7:54:e5:9c:52:aa:10:06:75:a0:
28:11:2a:b3:fb:1d:f4:36:28:b8:40:e4:6d:f9:03:b1:30:c4:
4a:58:cc:57:ac:e8:2f:6c:9a:16:c1:93:3a:d2:02:b1:9c:7b:
bc:ff:73:4a:fe:e7:dc:a4:67:34:d9:5b:14:7f:09:b9:cf:f7:
8b:9a:cc:56:cc:5c:dc:5c:c2:dd:f6:05:e5:90:57:6a:5e:ce:
09:dd:ad:68:fb:bd:5a:7b:fc:04:90:41:70:38:cc:d5:e9:d4:
8f:b1:de:01:b1:63:5d:97:0c:5e:c1:79:1b:27:94:95:c9:c6:
1f:b8:37:78:06:ef:23:88:93:74:11:ad:62:33:7a:61:81:29:
db:27:42:07:57:2c:ac:9d:ff:5d:80:cf:6c:90:ec:ef:3c:50:
5f:dd:e3:38:32:0c:df:09:31:51:b7:b2:0a:af:1c:16:5c:a3:
d6:12:c6:43:1f:a0:b0:11:bd:3b:a1:86:5e:91:c0:7a:58:ef:
0a:57:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:52:27 2026 by rpki-client