Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l4LcWXMDc95KCHSRXSgJl-_0wiY.roa
File: l4LcWXMDc95KCHSRXSgJl-_0wiY.roa (raw, json)
Hash identifier: uxGYIVNoMacqtYM4lkzBJRQK5mnP9q2ks3ynlDrWPUw=
Subject key identifier: 97:82:DC:59:73:03:73:DE:4A:08:74:91:5D:28:09:97:EF:F4:C2:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A19F3B94A2A50BCAA37BB367EE66CC1FED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l4LcWXMDc95KCHSRXSgJl-_0wiY.roa
Signing time: Tue 03 Nov 2026 02:27:24 +0000
ROA not before: Tue 03 Nov 2026 02:27:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219236
IP address blocks: 217.69.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:3b:94:a2:a5:0b:ca:a3:7b:b3:67:ee:66:cc:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 02:27:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9782dc59730373de4a0874915d280997eff4c226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:a3:d6:74:a8:ce:35:c2:f0:07:c6:ee:70:
2b:49:51:57:24:2b:18:4b:ec:2e:64:6a:ae:a4:44:
a8:df:48:70:a0:9d:50:08:59:38:cf:c0:06:75:7a:
63:60:3e:fc:fc:04:fa:49:5a:87:b7:99:63:5f:4e:
a9:ed:63:ef:04:d5:d8:4d:34:8a:a6:7d:46:d8:a4:
5c:35:61:14:bd:61:f5:0c:37:23:76:dd:05:88:e9:
b1:d8:32:67:b8:f6:f7:d8:a6:70:ff:54:c2:41:f4:
01:4e:95:5e:34:31:b5:25:35:ea:90:de:9b:ab:ba:
30:82:ef:a9:f2:c0:6c:8c:c2:a1:4f:ff:de:6b:e9:
58:0c:81:44:85:ce:38:ac:29:05:9a:a7:43:82:92:
70:0f:2f:e8:f0:b2:c7:8c:97:ea:4f:81:f6:75:37:
68:ea:10:51:24:7e:46:df:0d:11:f3:05:e2:e0:df:
89:c9:ab:62:79:b3:7c:d9:31:5c:1a:b6:46:41:6e:
f0:24:5b:32:3a:64:b1:1b:a7:5b:9b:00:1b:d3:69:
ec:23:65:2f:7a:2b:b3:77:c9:6f:59:c3:f0:c6:d6:
c1:04:24:dc:f9:a1:1a:bc:fc:7d:4f:41:96:5f:93:
5c:d3:06:7c:79:34:48:50:40:8f:b5:f9:02:a4:6f:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:DC:59:73:03:73:DE:4A:08:74:91:5D:28:09:97:EF:F4:C2:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l4LcWXMDc95KCHSRXSgJl-_0wiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.69.165.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e6:0e:a9:77:4c:eb:22:6b:63:8f:be:52:ee:54:4e:97:7c:
25:14:24:8f:55:2a:21:75:81:3b:e5:ca:9c:1a:da:1c:53:27:
e7:a0:b1:4f:9e:3b:3c:60:d2:98:c5:eb:0a:83:44:19:ff:c9:
63:63:ee:28:c2:31:fd:e6:b2:70:f8:33:c9:56:ad:86:4f:36:
de:be:a0:db:7d:23:38:f3:ec:28:46:04:f3:2c:f3:f8:bc:27:
8c:dc:12:ae:de:32:67:e1:54:c6:91:76:40:ee:a1:89:ec:38:
df:6b:60:3c:48:0a:05:99:e8:8c:3f:3f:23:df:54:15:3e:57:
41:fe:4c:77:77:c9:ed:dd:a1:3b:ef:2c:4e:fe:3b:6c:e1:fb:
8d:89:ea:81:ad:bc:28:c1:80:55:75:90:98:b1:66:7d:8d:a5:
82:74:39:c2:be:81:8b:2b:cc:a7:64:8c:75:81:5f:9e:80:0f:
17:68:a6:db:b9:98:40:db:ce:13:fb:da:7f:7f:ef:cc:eb:de:
93:b4:20:3c:2c:4d:0c:ed:44:e4:c2:fa:cd:1b:b6:22:64:ab:
ee:da:bb:bf:e6:15:0d:6d:e6:d6:44:4b:06:88:97:43:6a:dc:
7a:7d:e0:ef:10:29:6a:67:8d:b2:7c:a3:d9:9e:a9:5a:6a:0f:
8a:44:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:23:13 2026 by rpki-client