Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/LCWWGgiEkfv8IQFbDtZx-krsGxo.roa
File: LCWWGgiEkfv8IQFbDtZx-krsGxo.roa (raw, json)
Hash identifier: h0XnQpGh2D7sxxvTcL/GJXSaEJwSVHnwUOU+xwPMPZI=
Subject key identifier: 2C:25:96:1A:08:84:91:FB:FC:21:01:5B:0E:D6:71:FA:4A:EC:1B:1A
Certificate issuer: /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial: 019CFDC652726280CBA47EECA67A179BD271
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/LCWWGgiEkfv8IQFbDtZx-krsGxo.roa
Signing time: Tue 17 Mar 2026 21:49:18 +0000
ROA not before: Tue 17 Mar 2026 21:49:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201182
IP address blocks: 2001:678:1204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:c6:52:72:62:80:cb:a4:7e:ec:a6:7a:17:9b:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Validity
Not Before: Mar 17 21:49:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c25961a088491fbfc21015b0ed671fa4aec1b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:bb:c4:8d:b0:02:17:b4:17:20:db:fb:4a:
01:aa:3e:46:e6:c7:5c:ee:f0:aa:8a:31:c1:47:ec:
5c:fb:9b:4d:7c:52:f6:8f:46:3f:0c:3c:96:02:c3:
c2:5e:58:23:0b:2a:67:12:1f:d6:cc:d5:0f:26:98:
5b:e3:52:01:6e:17:69:96:7b:43:31:94:fe:60:04:
52:1f:9d:7d:b4:b2:4f:14:f8:b3:8c:3c:28:46:e6:
d2:89:e8:dc:e7:f1:83:b1:4f:f5:51:1d:9f:ea:20:
df:0d:de:50:65:b0:95:b6:ec:cb:8c:9d:7c:df:50:
be:57:8f:be:4b:4d:be:76:e2:54:10:6d:07:49:f8:
a5:7a:ff:66:0f:4c:0e:a6:e1:f8:e1:28:dd:9a:72:
0f:cd:06:e8:c1:19:21:cc:c9:af:22:5c:e4:ea:ba:
e7:95:2e:40:19:9e:3b:03:76:79:7e:8e:14:90:c2:
fe:93:ef:66:87:e3:39:5e:5b:64:20:c3:ba:af:56:
55:92:3c:80:d6:2c:61:17:3b:f7:61:15:d4:56:52:
3d:0e:51:7a:c7:41:15:32:cb:e0:c1:69:80:79:ac:
3a:87:7f:4b:f5:d4:d9:ad:be:f3:c1:7f:7f:54:ce:
7f:2b:5b:79:7d:ec:21:e2:f3:68:dd:74:f6:7a:91:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:25:96:1A:08:84:91:FB:FC:21:01:5B:0E:D6:71:FA:4A:EC:1B:1A
X509v3 Authority Key Identifier:
keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/LCWWGgiEkfv8IQFbDtZx-krsGxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1204::/48
Signature Algorithm: sha256WithRSAEncryption
15:5c:b1:02:63:57:88:2b:ef:f8:f6:dd:fb:57:c4:3c:40:20:
7a:6d:c7:70:ec:c2:75:0f:53:cf:dc:a9:ea:d8:c5:91:cc:52:
14:dd:82:61:1a:65:4b:91:91:98:9b:bf:ab:ab:76:65:5d:e6:
97:00:8b:dd:93:17:b0:bf:2e:87:d0:54:fa:85:cb:36:8c:7d:
d3:d0:6b:bf:07:df:29:b7:fc:c3:68:e9:de:86:4b:b3:8b:a7:
f5:3f:cf:6a:dd:34:ce:ef:5d:b5:72:99:0a:cb:07:ed:12:f4:
9d:53:49:a7:87:80:20:f9:7f:c0:0f:15:aa:b1:d8:02:21:5e:
78:53:bf:d7:a3:c9:ed:84:92:8f:c5:e9:ed:26:19:32:ce:e9:
c0:0f:97:68:aa:9e:d4:be:0c:1d:ee:5f:9c:a4:ca:59:e1:b9:
0b:a7:47:49:f8:c6:18:d5:8d:18:67:bf:e3:5b:53:2c:36:9f:
8c:f8:69:51:e8:87:90:e4:c6:d9:8b:d5:80:d1:84:4b:62:78:
90:4c:00:15:d4:70:77:df:88:eb:92:dd:50:9d:3e:d4:4c:bb:
6d:45:69:09:56:23:38:66:49:e3:57:38:93:ce:d8:b9:9b:10:
ec:a3:ad:b4:b8:88:e2:1f:d2:9e:2f:1e:f4:43:28:1c:04:6c:
65:3d:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:17 2026 by rpki-client