Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/lvoESynxGs8QQ1gSI7uSU5aJOa8.roa
File: lvoESynxGs8QQ1gSI7uSU5aJOa8.roa (raw, json)
Hash identifier: WQPeTT1BDYDE31ZmiWVSPheSbgxBN05cjVVgD0w9pdc=
Subject key identifier: 96:FA:04:4B:29:F1:1A:CF:10:43:58:12:23:BB:92:53:96:89:39:AF
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0EAC85CEB01357C646FE5E23F467D7037
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/lvoESynxGs8QQ1gSI7uSU5aJOa8.roa
Signing time: Tue 29 Sep 2026 01:29:54 +0000
ROA not before: Tue 29 Sep 2026 01:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219442
IP address blocks: 2a0d:d940:201d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:c8:5c:eb:01:35:7c:64:6f:e5:e2:3f:46:7d:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 29 01:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96fa044b29f11acf1043581223bb9253968939af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:a4:c4:be:b4:ac:86:ba:26:ed:1f:d0:bb:
46:38:fb:32:19:62:bf:91:76:29:20:04:35:74:98:
3e:8d:43:4f:d8:d8:63:23:b7:5a:0d:2a:06:fd:b6:
45:64:56:b2:15:67:37:8e:75:6d:03:16:13:4f:d0:
00:6a:2f:c0:52:33:c9:c3:1d:2f:49:a0:47:00:87:
21:62:20:78:b5:1f:ab:47:a4:e8:ac:ea:8d:4a:0d:
49:72:9b:74:b6:f4:8b:94:bd:72:9b:d5:75:0a:87:
5a:02:a2:cc:1b:df:8b:ee:85:0d:9b:0d:17:81:1d:
d5:9b:c6:ab:07:c6:30:f9:23:f7:7f:64:2a:1b:a7:
a1:9b:98:dd:54:5d:91:87:08:ed:9a:a0:f0:92:15:
76:e4:e3:68:1a:81:9a:59:4d:cf:55:ed:b6:70:f0:
10:d6:e5:da:1b:e3:6a:b4:7e:b7:3c:ca:b3:5c:69:
8d:65:ad:f5:91:5b:ce:58:c7:20:1d:bd:8b:23:d9:
de:eb:50:35:cf:3f:76:82:32:02:5e:20:65:35:32:
69:26:c9:d8:99:80:e3:50:58:e1:15:f8:f2:3b:14:
83:f5:9d:2e:19:6c:3e:8e:35:6b:74:b0:43:17:1f:
04:8a:41:ae:f3:7b:1d:bc:ed:52:78:fa:1c:34:5c:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:04:4B:29:F1:1A:CF:10:43:58:12:23:BB:92:53:96:89:39:AF
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/lvoESynxGs8QQ1gSI7uSU5aJOa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201d::/48
Signature Algorithm: sha256WithRSAEncryption
e3:07:e1:be:4d:f9:21:96:5c:5d:fb:a4:65:46:35:88:bc:1e:
32:2e:54:dd:14:d1:4b:e6:54:a7:a2:3e:6c:b7:06:15:91:75:
47:59:8b:64:6c:cc:18:5f:5d:92:19:6e:66:20:2e:a1:59:70:
fa:4f:11:2a:25:98:8e:cd:02:a1:94:2d:36:c1:6a:16:09:a5:
aa:26:83:2e:7c:da:03:b5:fe:9f:84:08:d8:96:76:8b:89:ed:
ca:41:5d:63:85:ea:51:99:35:d1:8e:2c:45:a4:b6:94:2c:37:
80:fc:41:34:31:92:30:8e:b8:aa:6e:ca:9a:b7:eb:25:aa:47:
3d:59:e0:83:4d:7d:c4:cf:f7:46:aa:32:9f:14:bf:e6:ee:3d:
24:29:ae:e9:92:d6:14:8a:36:43:bd:c4:ae:68:95:63:3b:ce:
fa:85:3b:47:d8:95:0d:78:bf:a7:78:86:46:83:82:c7:8f:0a:
4c:f3:fa:50:2b:cc:cb:4c:0f:cb:f0:7f:99:f9:12:2a:40:b4:
7f:36:15:38:50:8d:a5:d6:ce:0e:1d:14:e6:42:07:17:e8:16:
5e:6d:40:05:61:77:2e:08:00:3a:ca:4a:48:fd:b2:fe:f9:48:
36:6f:eb:28:84:48:65:e4:65:21:a9:f3:59:93:6e:16:04:2b:
33:92:30:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDqyFzrATV8ZG/l4j9GfXA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwOTI5MDEyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmZhMDQ0YjI5ZjExYWNmMTA0MzU4MTIyM2JiOTI1Mzk2ODkzOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YakxL60rIa6Ju0f0LtGOPsyGWK/
kXYpIAQ1dJg+jUNP2NhjI7daDSoG/bZFZFayFWc3jnVtAxYTT9AAai/AUjPJwx0v
SaBHAIchYiB4tR+rR6TorOqNSg1Jcpt0tvSLlL1ym9V1CodaAqLMG9+L7oUNmw0X
gR3Vm8arB8Yw+SP3f2QqG6ehm5jdVF2RhwjtmqDwkhV25ONoGoGaWU3PVe22cPAQ
1uXaG+NqtH63PMqzXGmNZa31kVvOWMcgHb2LI9ne61A1zz92gjICXiBlNTJpJsnY
mYDjUFjhFfjyOxSD9Z0uGWw+jjVrdLBDFx8EikGu83sdvO1SePocNFxLSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJb6BEsp8RrPEENYEiO7klOWiTmvMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvbHZvRVN5bnhHczhRUTFnU0k3dVNVNWFKT2E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQCAd
MA0GCSqGSIb3DQEBCwUAA4IBAQDjB+G+Tfkhllxd+6RlRjWIvB4yLlTdFNFL5lSn
oj5stwYVkXVHWYtkbMwYX12SGW5mIC6hWXD6TxEqJZiOzQKhlC02wWoWCaWqJoMu
fNoDtf6fhAjYlnaLie3KQV1jhepRmTXRjixFpLaULDeA/EE0MZIwjriqbsqat+sl
qkc9WeCDTX3Ez/dGqjKfFL/m7j0kKa7pktYUijZDvcSuaJVjO876hTtH2JUNeL+n
eIZGg4LHjwpM8/pQK8zLTA/L8H+Z+RIqQLR/NhU4UI2l1s4OHRTmQgcX6BZebUAF
YXcuCAA6ykpI/bL++Ug2b+sohEhl5GUhqfNZk24WBCszkjC8
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:55 2026 by rpki-client