Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/LImeWPjRU0bTYqqH-HKe4xkFuc0.roa
File: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (raw, json)
Hash identifier: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=
Subject key identifier: 2C:89:9E:58:F8:D1:53:46:D3:62:AA:87:F8:72:9E:E3:19:05:B9:CD
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019E2D7006E66F194DDC4E625880B4FFAA95
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/LImeWPjRU0bTYqqH-HKe4xkFuc0.roa
Signing time: Fri 15 May 2026 20:59:36 +0000
ROA not before: Fri 15 May 2026 20:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 185.126.72.0/22 maxlen: 22
185.126.76.0/22 maxlen: 22
185.168.157.0/24 maxlen: 24
185.174.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:70:06:e6:6f:19:4d:dc:4e:62:58:80:b4:ff:aa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: May 15 20:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c899e58f8d15346d362aa87f8729ee31905b9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:14:77:81:d3:61:14:d6:d0:55:32:fe:26:
f4:07:61:68:ec:86:9b:ee:f9:e5:12:69:04:ec:56:
2c:e5:7d:a9:50:e7:9c:6f:55:df:5f:70:0d:95:13:
0a:a9:45:f1:e6:f8:b9:0e:28:c3:d1:f5:3b:18:a9:
40:e5:ab:b7:d9:31:35:4b:7a:c4:c1:6e:25:db:9b:
c3:f7:3a:4d:7f:d7:93:cd:6f:f4:cd:ff:40:4d:26:
6e:2d:0e:71:87:97:dd:30:55:0b:65:22:b3:33:9c:
30:b4:a9:dc:b6:2e:e7:d6:30:6e:d4:86:c4:55:9d:
0b:ea:13:51:71:e5:9a:2b:14:2f:84:cd:e2:4a:2f:
91:c7:4a:2d:70:96:55:73:f3:a6:b7:02:dc:3f:bc:
54:b3:6a:78:c9:18:12:64:7d:f5:9c:12:9e:ad:49:
8b:9d:d0:00:ac:df:5e:34:55:c5:bb:29:74:72:37:
a4:03:f4:6b:56:e0:dd:35:d3:80:cf:6d:2d:ae:ec:
71:62:98:70:52:ab:5a:63:54:2e:f1:51:76:1f:0d:
fe:8e:4a:11:fe:bd:1c:bc:22:e7:f8:1c:13:50:07:
89:fa:a8:26:88:41:5d:e7:44:9e:88:44:62:ad:61:
f8:df:67:2b:4f:a1:81:a7:01:50:6f:1a:28:7c:03:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:9E:58:F8:D1:53:46:D3:62:AA:87:F8:72:9E:E3:19:05:B9:CD
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/LImeWPjRU0bTYqqH-HKe4xkFuc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.72.0/21
185.168.157.0/24
185.174.88.0/23
Signature Algorithm: sha256WithRSAEncryption
42:88:14:0c:d5:bf:bc:cb:36:c3:21:47:13:38:52:57:4a:f4:
a1:ba:cf:61:ed:af:e8:f2:7d:5a:e0:14:0f:e9:32:1c:77:be:
b0:77:20:1f:b4:74:2e:bc:c5:45:7b:c9:2e:f5:a5:a2:47:c3:
eb:c0:93:d7:5f:4f:37:6c:83:b8:ca:87:ba:00:2f:98:3c:f0:
f4:c0:52:90:40:5d:80:f6:f0:b8:a6:7b:ba:02:70:05:62:8e:
49:4d:e6:dc:5c:8b:6c:ae:ac:f2:8e:dd:61:dc:e0:77:ab:92:
ec:8a:de:34:30:25:48:d2:40:2b:4d:35:ba:4b:0d:80:96:62:
35:7b:0c:1f:54:8d:61:39:fa:6b:3d:d1:4b:dd:c2:1b:d3:5f:
74:93:a4:22:49:76:14:17:2d:5f:ec:3c:cc:03:16:9e:5e:4f:
e2:a5:f5:de:92:3a:d7:4a:34:aa:ed:a7:0e:69:d1:f5:c2:aa:
16:cb:52:18:68:62:b3:ec:c8:a6:a8:e7:29:f6:68:23:31:ae:
8a:ca:aa:6c:91:21:36:d0:da:1c:e7:4d:50:50:1b:36:f0:18:
26:24:e9:86:62:18:dc:cc:b8:d6:8d:97:03:76:44:bf:e7:67:
33:03:c8:be:6f:48:b4:eb:0c:01:59:55:0b:38:12:31:01:14:
57:3d:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:15 2026 by rpki-client