Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lTnInmCve7WBwK5cncKY9DK-Avg.roa
File: lTnInmCve7WBwK5cncKY9DK-Avg.roa (raw, json)
Hash identifier: 0naL+DjESeRC0NUOoLXpYVI1gXaYWHRgIkLwt/8/C1c=
Subject key identifier: 95:39:C8:9E:60:AF:7B:B5:81:C0:AE:5C:9D:C2:98:F4:32:BE:02:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CEFE641BDCA782590B8D4B929FD3CA4EE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lTnInmCve7WBwK5cncKY9DK-Avg.roa
Signing time: Sun 15 Mar 2026 05:09:30 +0000
ROA not before: Sun 15 Mar 2026 05:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204604
IP address blocks: 2a02:2fc0:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:e6:41:bd:ca:78:25:90:b8:d4:b9:29:fd:3c:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 15 05:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9539c89e60af7bb581c0ae5c9dc298f432be02f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:fb:74:aa:30:72:1f:ef:f0:1a:78:31:95:
7c:40:bd:32:8c:b0:74:91:08:74:a1:fe:36:98:50:
7e:f5:43:18:eb:0d:bd:75:43:48:d2:6c:c9:90:68:
2b:1e:f1:36:a3:2b:07:85:d8:27:85:f9:0d:a7:3f:
b4:77:3e:cd:d4:77:1c:dd:87:52:db:e9:43:71:e0:
76:b8:35:ad:92:07:50:af:85:11:0c:ec:0c:50:95:
d5:65:80:f4:e2:d5:18:c7:a2:b8:60:3c:c2:80:6f:
62:b5:7f:36:cb:7c:4b:1e:85:67:20:35:0d:e6:21:
69:17:24:5e:98:a6:f7:6a:58:25:be:80:ed:b2:dc:
c6:9a:49:ab:24:ef:7e:88:af:b2:2d:f1:09:4f:5b:
17:fd:e9:ab:44:3e:b9:df:8b:4b:34:d4:29:78:72:
51:d6:41:fe:13:6f:65:cf:65:29:5b:e4:a1:a3:d9:
9e:fb:d4:01:c4:7f:1d:4b:3c:28:ae:01:62:ac:59:
8e:10:dc:18:79:6b:c8:c6:24:1a:53:13:8b:8b:3f:
45:4b:4e:0e:0f:56:fa:2b:12:f0:3e:5c:9e:5a:2e:
10:d4:30:75:1d:d5:d6:2c:20:9e:31:2d:7e:6c:89:
03:a9:57:5d:11:20:48:ec:eb:23:8b:59:58:2a:91:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:C8:9E:60:AF:7B:B5:81:C0:AE:5C:9D:C2:98:F4:32:BE:02:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lTnInmCve7WBwK5cncKY9DK-Avg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
6a:df:33:5f:04:12:df:73:a7:c3:d3:f4:18:a6:b7:f5:ad:b2:
81:bc:31:fa:fb:70:5d:a2:e5:1d:5e:d3:2a:e4:d5:2f:ac:7c:
bd:75:6a:f0:f3:ee:70:10:79:99:7f:84:ab:bd:38:30:5d:60:
2e:4c:37:5c:46:da:40:87:27:b7:9b:51:7c:43:e9:8b:b8:3c:
35:bb:3b:08:4c:3f:fe:5c:94:01:f0:63:b5:14:8b:cb:6c:3c:
9f:e0:2f:80:f8:6a:78:3b:ba:b7:0f:e6:42:87:ad:18:47:18:
27:73:fe:66:04:3c:19:e0:3b:25:1c:11:6c:ce:49:a9:c0:be:
ab:6a:47:61:93:b5:1c:b7:36:02:b7:90:3f:cf:bf:51:81:98:
e9:2e:ed:de:83:f3:21:07:25:d4:88:5c:53:95:40:72:6b:01:
6e:a2:47:83:f1:44:d0:aa:9c:25:0c:0e:4f:6e:e2:96:54:56:
17:52:71:b0:80:5b:02:93:a3:27:ec:65:cf:ce:0f:12:e3:af:
0b:c9:9d:fa:77:a0:b7:57:58:41:61:05:26:3e:f6:40:35:83:
a5:f4:a8:2a:06:db:2c:b0:a4:22:6c:f7:00:ac:6a:a8:eb:06:
2f:15:9c:0b:8f:61:65:ca:6c:1a:84:42:2b:62:f5:1b:af:61:
d8:d4:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:32 2026 by rpki-client