Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/LcdFlwsZeNlKQxWtomWGugF5Uls.roa
File: LcdFlwsZeNlKQxWtomWGugF5Uls.roa (raw, json)
Hash identifier: LmbSWI4WnALmhzvVgu3HrJG4mLahAfFT/2QpHuJ+AzQ=
Subject key identifier: 2D:C7:45:97:0B:19:78:D9:4A:43:15:AD:A2:65:86:BA:01:79:52:5B
Certificate issuer: /CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Certificate serial: 01A0AF1A3BEDC2C71127C24A62825F087E89
Authority key identifier: 60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/LcdFlwsZeNlKQxWtomWGugF5Uls.roa
Signing time: Thu 17 Sep 2026 11:22:07 +0000
ROA not before: Thu 17 Sep 2026 11:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199025
IP address blocks: 213.177.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:1a:3b:ed:c2:c7:11:27:c2:4a:62:82:5f:08:7e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Validity
Not Before: Sep 17 11:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc745970b1978d94a4315ada26586ba0179525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:7e:5b:52:fe:a2:32:42:14:4e:3b:26:57:
be:94:8c:72:fe:98:5c:44:d1:e5:0a:5d:4a:35:61:
10:22:60:dc:04:5e:1e:dc:83:03:cc:21:67:ec:fd:
b7:ba:5c:22:8c:3a:c0:c5:c1:b3:40:28:70:5a:b9:
6f:73:85:e5:48:26:11:b5:13:d1:ad:c7:ab:1e:3a:
7c:f2:a9:39:5f:01:74:1e:5e:77:ef:52:e2:17:8a:
16:14:bb:74:18:79:02:a6:13:72:81:7a:65:73:41:
c0:40:df:ce:35:cf:5c:52:0a:28:1f:43:29:7f:7d:
1a:3d:ad:a5:84:99:d2:f7:38:a8:ee:7e:68:17:75:
2a:46:0a:5d:d7:b5:83:e6:35:6f:5c:26:64:40:da:
46:e2:84:9d:6d:d5:13:73:19:6c:52:fd:c6:e6:55:
cc:1e:d5:7b:62:25:f7:3e:96:36:48:33:1e:b6:bf:
28:6c:a2:13:9f:57:f8:e0:f1:19:05:89:1b:db:d6:
4f:89:32:44:02:0e:f5:8d:f5:ea:b6:fe:4d:17:32:
14:f8:e1:fa:af:f7:1e:0a:61:d5:9e:b0:43:d6:d1:
cc:63:9c:86:b1:6d:3b:0c:ed:1d:4e:ad:f1:f2:16:
51:76:39:91:7b:d7:1d:58:39:68:60:17:1b:82:23:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:45:97:0B:19:78:D9:4A:43:15:AD:A2:65:86:BA:01:79:52:5B
X509v3 Authority Key Identifier:
keyid:60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/LcdFlwsZeNlKQxWtomWGugF5Uls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.160.0/24
Signature Algorithm: sha256WithRSAEncryption
82:79:d1:13:fa:88:df:b7:f0:15:7e:ab:bc:21:db:ad:66:a2:
02:88:df:a8:0c:60:1c:7c:7a:29:ff:9a:7b:6d:e4:57:74:cd:
ac:0d:96:57:23:7a:10:a5:0b:b3:4a:9c:74:91:28:9f:ba:df:
3e:9c:19:e1:b7:39:ba:f2:34:eb:b5:b2:fe:01:58:09:59:74:
4a:53:a5:42:06:fb:3a:da:ed:f6:cc:35:fc:4f:69:44:67:e8:
f2:e4:12:23:13:82:b5:66:77:f7:76:d9:f1:0e:ff:0b:82:3e:
e5:c1:ce:1c:de:d4:be:d2:ba:d8:9b:cd:20:11:db:cc:75:3e:
04:82:43:4b:3e:23:af:4c:6d:04:89:fd:24:16:cb:d2:c9:38:
4b:9f:11:5f:35:31:e5:00:0e:e4:51:90:0d:5f:b3:f1:ad:ef:
9e:f2:81:22:32:b1:07:ab:28:6f:65:4c:b2:32:04:d7:af:64:
68:1e:f1:62:fa:09:ad:c8:41:3c:85:0d:6e:b3:8d:f8:da:93:
5a:2a:45:85:3d:f5:22:23:8c:d6:5d:6f:69:d6:93:f4:ae:89:
55:21:b9:1c:6f:44:6a:58:b9:b1:e7:83:92:da:b9:9f:d8:b2:
ac:68:6e:fa:4d:a0:cc:5f:bb:44:cc:6a:e4:2b:8d:14:fb:22:
ec:0e:a7:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCvGjvtwscRJ8JKYoJfCH6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjIxYzIxM2ZjMDY5YzgyMTU1ZmVhMTdlOWI3ZmI4MmZl
NmI3ZjIwHhcNMjYwOTE3MTEyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGM3NDU5NzBiMTk3OGQ5NGE0MzE1YWRhMjY1ODZiYTAxNzk1MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9+W1L+ojJCFE47Jle+lIxy/phc
RNHlCl1KNWEQImDcBF4e3IMDzCFn7P23ulwijDrAxcGzQChwWrlvc4XlSCYRtRPR
rcerHjp88qk5XwF0Hl5371LiF4oWFLt0GHkCphNygXplc0HAQN/ONc9cUgooH0Mp
f30aPa2lhJnS9zio7n5oF3UqRgpd17WD5jVvXCZkQNpG4oSdbdUTcxlsUv3G5lXM
HtV7YiX3PpY2SDMetr8obKITn1f44PEZBYkb29ZPiTJEAg71jfXqtv5NFzIU+OH6
r/ceCmHVnrBD1tHMY5yGsW07DO0dTq3x8hZRdjmRe9cdWDloYBcbgiNf4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3HRZcLGXjZSkMVraJlhroBeVJbMB8GA1UdIwQY
MBaAFGDyHCE/wGnIIVX+oX6bf7gv5rfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBJY0lUX0FhY2doVmY2aGZwdF91Q19tdF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MThlNjUtMjdiNC00NzU5LWFhM2Et
NWFkODU1OTJmZmU5LzEvTGNkRmx3c1plTmxLUXhXdG9tV0d1Z0Y1VWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81MThlNjUtMjdiNC00NzU5LWFhM2EtNWFkODU1OTJmZmU5
LzEvWVBJY0lUX0FhY2doVmY2aGZwdF91Q19tdF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bGgMA0G
CSqGSIb3DQEBCwUAA4IBAQCCedET+ojft/AVfqu8IdutZqICiN+oDGAcfHop/5p7
beRXdM2sDZZXI3oQpQuzSpx0kSifut8+nBnhtzm68jTrtbL+AVgJWXRKU6VCBvs6
2u32zDX8T2lEZ+jy5BIjE4K1Znf3dtnxDv8Lgj7lwc4c3tS+0rrYm80gEdvMdT4E
gkNLPiOvTG0Eif0kFsvSyThLnxFfNTHlAA7kUZANX7Pxre+e8oEiMrEHqyhvZUyy
MgTXr2RoHvFi+gmtyEE8hQ1us4342pNaKkWFPfUiI4zWXW9p1pP0rolVIbkcb0Rq
WLmx54OS2rmf2LKsaG76TaDMX7tEzGrkK40U+yLsDqcz
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:14 2026 by rpki-client