Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/Lhu_m8K0hO-B20-9FDp5wAOEs9k.roa
File: Lhu_m8K0hO-B20-9FDp5wAOEs9k.roa (raw, json)
Hash identifier: 0n7LeVg9RAlpaMVVnvdfErPU23+J/bwoPerPsg0RFEI=
Subject key identifier: 2E:1B:BF:9B:C2:B4:84:EF:81:DB:4F:BD:14:3A:79:C0:03:84:B3:D9
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 019EACB741A8EADF5F750D2A6729110D112B
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/Lhu_m8K0hO-B20-9FDp5wAOEs9k.roa
Signing time: Tue 09 Jun 2026 14:09:11 +0000
ROA not before: Tue 09 Jun 2026 14:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214490
IP address blocks: 185.194.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:b7:41:a8:ea:df:5f:75:0d:2a:67:29:11:0d:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Jun 9 14:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e1bbf9bc2b484ef81db4fbd143a79c00384b3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:79:d7:5e:c4:ff:b9:d7:bb:d0:6f:64:d8:
df:e1:64:c2:8a:f5:1f:f7:50:c9:b1:32:4a:4a:28:
97:a0:1a:81:f8:34:9c:f6:09:1f:85:d2:57:af:3a:
0c:fc:41:9f:ff:4e:53:26:04:65:b1:de:e4:4a:d2:
86:60:bb:14:03:ba:86:92:f5:63:bb:ec:ff:a9:20:
9e:5f:7e:0e:35:5f:b6:3e:d4:97:cf:5b:cf:e7:77:
65:cb:3a:a8:ab:dd:fa:79:12:dc:37:19:4e:a3:62:
b4:98:5c:36:a3:f6:c4:b3:d0:fd:27:65:38:95:c3:
a8:48:fc:34:b7:0c:b3:14:10:ab:0b:86:f2:db:d7:
8b:99:e7:99:81:ed:8c:9f:fa:d9:c3:ab:f2:ff:3f:
6e:67:48:e9:fc:85:4a:5e:a7:7c:d0:31:4e:3f:e1:
08:49:8c:7e:5e:a8:3a:5f:ef:93:04:7c:d1:22:82:
f1:53:01:61:1f:9f:1f:d0:6e:2d:5f:0d:d3:94:ca:
0b:48:a2:08:39:9a:11:b7:bd:9f:cf:67:53:b8:00:
e9:a7:46:17:29:c4:c7:3c:cb:ac:65:2e:33:2b:85:
b6:5f:5e:6d:17:7d:45:7b:3c:b4:a7:ba:be:33:b7:
1c:31:3f:34:56:1b:d1:cf:32:03:35:d6:7b:53:f2:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:BF:9B:C2:B4:84:EF:81:DB:4F:BD:14:3A:79:C0:03:84:B3:D9
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/Lhu_m8K0hO-B20-9FDp5wAOEs9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.234.0/23
Signature Algorithm: sha256WithRSAEncryption
88:2a:0f:6c:b1:68:56:e9:18:30:f8:29:5f:4a:ce:46:1e:43:
78:87:ad:3f:62:b9:1b:02:0c:3a:75:5c:eb:19:8c:4d:cb:52:
ee:89:5c:94:28:a1:ce:9d:cd:f5:6e:aa:2a:c9:0a:7d:cd:b6:
04:dd:a9:0c:b4:0d:ea:bf:ed:19:c9:d9:ec:77:0d:50:52:4a:
df:3f:3f:07:b2:76:1a:99:0a:e9:fd:1f:c1:2a:05:ea:d4:5d:
eb:3a:63:b5:bd:bb:1a:56:81:a6:5c:0d:1d:c2:a9:90:a0:8e:
1b:14:d4:06:2d:63:dd:25:62:df:06:79:0b:65:db:13:84:9d:
2e:3d:b7:b3:7c:f3:98:0b:11:fe:e5:9f:37:ce:97:ca:cd:89:
65:bb:11:6f:3d:92:96:c2:f1:5e:a8:8d:ab:c0:15:cd:1f:83:
1d:bc:34:ed:a5:57:88:a9:81:15:cf:42:f1:71:2c:ae:ec:da:
e4:85:ad:69:5b:8b:90:da:b0:c2:5a:48:d3:40:bc:e0:8a:2e:
74:cf:66:10:b9:34:80:80:16:55:87:48:80:a8:89:19:2f:c4:
af:8c:cb:76:38:ed:66:5c:92:cd:1e:eb:32:90:80:6e:52:13:
5f:eb:81:f0:3f:60:55:2f:05:0e:ef:96:db:26:b4:0f:b8:05:
6d:4e:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:15 2026 by rpki-client