Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LBE4pIXSfRzHq4uk-WsuJomaCo0.roa
File: LBE4pIXSfRzHq4uk-WsuJomaCo0.roa (raw, json)
Hash identifier: 518m1h4iYmBX78gmepS17Tq6LbKGR80KGJP0amTYGX8=
Subject key identifier: 2C:11:38:A4:85:D2:7D:1C:C7:AB:8B:A4:F9:6B:2E:26:89:9A:0A:8D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019CA654E640E530CDBF4065861844C559DA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LBE4pIXSfRzHq4uk-WsuJomaCo0.roa
Signing time: Sat 28 Feb 2026 22:18:27 +0000
ROA not before: Sat 28 Feb 2026 22:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214630
IP address blocks: 2a12:bec4:16a0::/44 maxlen: 48
2a12:bec4:1c40::/44 maxlen: 48
2a12:bec4:1d50::/44 maxlen: 48
2a12:bec4:1dc0::/44 maxlen: 48
2a12:bec4:1ec0::/44 maxlen: 48
2a12:bec4:1f20::/44 maxlen: 48
2a12:bec4:1f90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a6:54:e6:40:e5:30:cd:bf:40:65:86:18:44:c5:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 28 22:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c1138a485d27d1cc7ab8ba4f96b2e26899a0a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:70:72:b4:94:9f:ee:c0:77:f6:91:96:66:
8a:20:e5:12:f3:af:36:98:f3:e2:57:80:5b:95:d4:
85:e4:f4:69:cd:a6:bd:3a:14:87:b8:fb:81:b4:7f:
76:da:3b:71:2d:7a:05:46:11:70:41:13:f2:13:d1:
df:48:1c:29:42:f3:ee:2b:c2:02:60:63:a8:44:52:
3b:83:1e:e6:da:44:00:44:59:9e:94:37:40:87:e1:
6e:49:bb:5a:c9:e8:98:1f:ea:7d:e5:4b:d8:be:39:
c5:06:6e:07:40:89:50:ac:88:ba:37:d1:97:db:f6:
61:b8:6c:bb:1b:73:14:47:a2:c7:d5:1f:97:69:7c:
6a:0f:b8:81:7e:8a:ea:49:cc:5e:73:70:67:67:c6:
34:75:f6:7f:25:46:6c:0b:24:be:3d:c2:6c:5a:05:
6c:15:92:df:00:69:e6:40:01:ad:13:ff:4e:07:36:
cc:3d:07:2d:56:af:39:ac:d8:a4:40:58:41:b6:e7:
49:bf:50:c0:a5:09:1e:42:c6:c3:8c:64:b4:49:e2:
d4:79:f5:89:5e:77:15:18:b7:99:f3:68:c1:92:d8:
54:f0:99:c9:ac:5d:86:53:cb:23:d5:ea:a8:69:47:
76:df:28:b4:45:d3:41:27:0c:06:87:3d:e5:42:dd:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:38:A4:85:D2:7D:1C:C7:AB:8B:A4:F9:6B:2E:26:89:9A:0A:8D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LBE4pIXSfRzHq4uk-WsuJomaCo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16a0::/44
2a12:bec4:1c40::/44
2a12:bec4:1d50::/44
2a12:bec4:1dc0::/44
2a12:bec4:1ec0::/44
2a12:bec4:1f20::/44
2a12:bec4:1f90::/44
Signature Algorithm: sha256WithRSAEncryption
9e:bc:a4:0f:ef:82:30:8f:e6:ce:db:57:70:36:c0:df:40:6d:
9f:4d:b1:69:7f:40:46:f1:b1:2f:e8:90:c7:b7:92:27:77:53:
19:6f:e7:1d:2f:63:d7:fa:71:c2:02:83:18:d3:d9:d2:11:0b:
af:f1:13:b0:5e:c4:5b:71:45:84:fb:e9:1c:ae:f6:37:94:76:
0c:80:a2:ae:3a:ab:05:b5:ec:e8:28:db:e7:19:71:5d:d2:f2:
5b:8a:db:26:73:0c:b4:6e:59:d5:d7:35:5d:5a:01:9c:59:c5:
8a:b2:93:b5:26:62:27:fd:df:4d:39:7b:9f:a5:ef:96:da:14:
0e:8c:4a:88:c0:5c:7c:cb:ad:02:c3:76:b7:56:1c:a1:e8:75:
8b:b0:f4:a3:7e:99:b7:ae:7f:ec:f6:f7:7d:3b:17:8d:33:af:
23:a6:9a:54:6f:69:b4:dc:d0:1c:b3:e0:23:71:0f:13:3f:62:
48:3f:15:80:cc:9f:34:56:5d:c6:79:e0:b3:51:7d:46:c8:f8:
2f:1a:de:e5:ee:96:9a:f6:3d:34:ff:39:0b:41:cb:f2:bf:0f:
7f:42:6d:3c:18:4a:74:99:de:75:f8:62:94:f6:a6:61:1b:9d:
94:9a:dc:c0:94:02:6b:b6:b1:8e:fa:ae:41:dc:ba:4a:e4:92:
99:17:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:15 2026 by rpki-client