Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/LcJySuGogAooQWq-3hWvNHJeetU.roa
File: LcJySuGogAooQWq-3hWvNHJeetU.roa (raw, json)
Hash identifier: dRN2fRRBzV718qeTbblsq2rKV/3Uopvdasw9bsddc/8=
Subject key identifier: 2D:C2:72:4A:E1:A8:80:0A:28:41:6A:BE:DE:15:AF:34:72:5E:7A:D5
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019C42A25CE675873FBAC2F4E652168F3EA5
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/LcJySuGogAooQWq-3hWvNHJeetU.roa
Signing time: Mon 09 Feb 2026 13:41:02 +0000
ROA not before: Mon 09 Feb 2026 13:41:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 80.253.246.0/24 maxlen: 24
91.151.88.0/24 maxlen: 24
91.151.89.0/24 maxlen: 24
91.151.95.0/24 maxlen: 24
212.108.107.0/24 maxlen: 24
213.142.148.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.159.0/24 maxlen: 24
2a0f:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:a2:5c:e6:75:87:3f:ba:c2:f4:e6:52:16:8f:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Feb 9 13:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc2724ae1a8800a28416abede15af34725e7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:8a:89:01:99:fe:0f:38:cc:da:2c:ac:e5:
8b:eb:b4:a2:07:67:e1:2d:ba:d1:f1:7d:35:d7:e7:
85:32:1a:3a:ea:b8:0f:e0:36:bc:8f:43:1d:13:d0:
ab:59:b1:fc:56:cf:53:56:a3:08:df:58:ea:16:bd:
98:88:fc:d6:82:5f:89:0d:bf:e8:32:ac:3e:b6:ea:
ab:6b:9d:6c:e3:42:2b:10:95:a8:3e:59:45:a0:39:
1d:c5:93:62:f0:3d:d0:92:53:ac:29:f0:ff:81:dc:
78:0e:a7:9f:97:f0:0e:9f:fb:ba:9f:e0:52:6c:1b:
48:84:57:17:10:d2:0d:23:cb:32:e8:dc:92:8f:4a:
f7:75:e3:23:4a:c3:57:c5:37:7e:07:2d:7e:ff:f1:
96:88:e4:7e:ab:49:53:21:fa:d3:be:4b:4f:1b:5e:
94:e1:e3:be:75:ce:28:ff:3d:dd:cb:10:ec:5a:bf:
6c:8f:b7:5c:44:84:19:a2:86:d2:20:e2:c8:d6:ef:
82:6a:26:ad:e3:ec:2e:dd:e5:9e:84:ff:70:3b:3f:
2b:5a:7e:2d:16:ce:0b:01:27:fa:7a:13:52:3b:0e:
11:dc:60:9c:2d:56:10:d2:8e:cf:ec:a3:80:15:94:
8a:a4:ec:22:5a:a6:89:21:12:74:93:10:7c:ee:be:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:72:4A:E1:A8:80:0A:28:41:6A:BE:DE:15:AF:34:72:5E:7A:D5
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/LcJySuGogAooQWq-3hWvNHJeetU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
212.108.107.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
IPv6:
2a0f:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
26:3b:b2:1b:c0:54:61:de:e3:3c:81:cf:bd:a4:bd:12:4b:0c:
c0:4c:9c:a2:78:bc:51:7e:ac:38:bf:c1:bf:a2:c3:54:9a:ea:
76:43:48:0e:cd:79:95:ef:a2:03:31:f1:6b:64:25:de:6d:93:
1b:fb:6d:04:94:72:d2:35:d0:ff:b9:95:b1:35:c1:12:1c:62:
64:0e:8d:0c:08:3b:30:06:cd:0a:02:a1:4b:fa:5f:48:02:58:
2b:c8:41:e8:32:6b:0b:75:13:c7:21:7a:ad:a0:3e:f2:0d:1a:
63:f0:da:06:5a:76:b0:23:3e:2d:49:49:59:79:e8:ed:4b:f9:
96:ee:77:a0:0f:bb:80:12:c4:de:e0:aa:64:40:f8:89:26:6a:
16:e2:3c:8b:f0:bd:c5:b3:1e:ac:31:d5:eb:91:cc:12:7e:0e:
2b:ac:af:29:39:c5:d4:ae:c7:0a:58:30:2e:62:30:47:94:58:
20:ca:60:36:2e:61:eb:89:70:32:3b:ad:25:e7:41:ff:52:22:
47:e5:d5:ad:e0:94:49:54:9f:2b:7c:3b:b8:9c:ad:0f:09:64:
07:66:38:c4:b1:4c:db:3c:67:cc:c1:42:02:71:07:c3:d8:d5:
02:49:aa:18:1a:df:f1:24:c8:ae:83:d4:b3:21:a8:85:06:2e:
10:56:31:ba
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZxColzmdYc/usL05lIWjz6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjYwMjA5MTM0MTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGMyNzI0YWUxYTg4MDBhMjg0MTZhYmVkZTE1YWYzNDcyNWU3YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5mKiQGZ/g84zNosrOWL67SiB2fh
LbrR8X011+eFMho66rgP4Da8j0MdE9CrWbH8Vs9TVqMI31jqFr2YiPzWgl+JDb/o
Mqw+tuqra51s40IrEJWoPllFoDkdxZNi8D3QklOsKfD/gdx4Dqefl/AOn/u6n+BS
bBtIhFcXENINI8sy6NySj0r3deMjSsNXxTd+By1+//GWiOR+q0lTIfrTvktPG16U
4eO+dc4o/z3dyxDsWr9sj7dcRIQZoobSIOLI1u+Caiat4+wu3eWehP9wOz8rWn4t
Fs4LASf6ehNSOw4R3GCcLVYQ0o7P7KOAFZSKpOwiWqaJIRJ0kxB87r51rwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFC3CckrhqIAKKEFqvt4VrzRyXnrVMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEvTGNKeVN1R29nQW9vUVdxLTNoV3ZOSEplZXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAUP32AwQB
W5dYAwQAW5dfAwQA1GxrAwQA1Y6UAwQA1Y6XAwQA1Y6fMA0EAgACMAcDBQMqD78A
MA0GCSqGSIb3DQEBCwUAA4IBAQAmO7IbwFRh3uM8gc+9pL0SSwzATJyieLxRfqw4
v8G/osNUmup2Q0gOzXmV76IDMfFrZCXebZMb+20ElHLSNdD/uZWxNcESHGJkDo0M
CDswBs0KAqFL+l9IAlgryEHoMmsLdRPHIXqtoD7yDRpj8NoGWnawIz4tSUlZeejt
S/mW7negD7uAEsTe4KpkQPiJJmoW4jyL8L3Fsx6sMdXrkcwSfg4rrK8pOcXUrscK
WDAuYjBHlFggymA2LmHriXAyO60l50H/UiJH5dWt4JRJVJ8rfDu4nK0PCWQHZjjE
sUzbPGfMwUICcQfD2NUCSaoYGt/xJMiug9SzIaiFBi4QVjG6
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:17 2026 by rpki-client