Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lClW6W-_UDpwFCHyVPUl6653A-U.roa
File: lClW6W-_UDpwFCHyVPUl6653A-U.roa (raw, json)
Hash identifier: gWRH2Rti6+BzsrBzzg3BJY6kPa3jXIK6hVANddqZWuM=
Subject key identifier: 94:29:56:E9:6F:BF:50:3A:70:14:21:F2:54:F5:25:EB:AE:77:03:E5
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A0CDCA60EE1637D3BB7816F74C103C7C9B
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lClW6W-_UDpwFCHyVPUl6653A-U.roa
Signing time: Wed 23 Sep 2026 10:23:07 +0000
ROA not before: Wed 23 Sep 2026 10:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218601
IP address blocks: 2a0a:87c0:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ca:60:ee:16:37:d3:bb:78:16:f7:4c:10:3c:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Sep 23 10:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=942956e96fbf503a701421f254f525ebae7703e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:0a:9d:15:a4:4e:d3:0b:36:e5:e7:d0:bd:
46:e3:b4:99:0c:ac:d0:d6:9d:f7:a4:92:fc:58:02:
fd:0b:1d:a5:b6:6c:bd:8f:9f:33:cf:7b:dd:04:f6:
b6:4c:b0:bb:8f:fa:c7:ab:76:4b:5d:9a:ba:c4:60:
6b:f9:da:87:56:16:87:48:95:84:c8:06:b4:88:eb:
39:d7:bd:77:55:af:56:62:ec:c3:9e:7b:d1:99:ad:
62:36:cc:2f:b4:1e:0c:d2:1a:bc:bb:46:8a:31:4e:
7e:a2:97:05:f7:bb:c0:10:6a:ef:fa:99:b9:c6:f2:
7c:2c:61:b6:50:53:d7:5c:b4:01:44:f4:b7:db:3d:
9c:80:3c:8c:db:a6:5f:b5:e2:30:17:b7:b4:34:f9:
fc:c1:5e:b2:b7:e8:06:8d:f7:fc:06:f3:5b:aa:f3:
2d:f5:a0:d8:58:60:73:09:d9:56:9b:3a:a7:f8:af:
02:8c:89:95:4d:83:03:97:4b:db:0a:dd:2c:eb:c9:
c5:b6:ec:ab:00:f8:89:7b:c5:c2:7c:11:a2:7a:3f:
20:ad:d2:34:ac:28:15:bb:b0:0f:d9:d3:4e:62:99:
8d:7b:32:07:a8:8a:cb:4f:73:9b:be:47:af:2c:16:
cd:a1:81:c5:b4:d5:26:44:48:ab:5f:de:a5:4b:0f:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:56:E9:6F:BF:50:3A:70:14:21:F2:54:F5:25:EB:AE:77:03:E5
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lClW6W-_UDpwFCHyVPUl6653A-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
69:87:0f:f0:d5:8d:e1:bf:87:f9:8b:77:b8:24:be:37:90:14:
1c:63:39:4c:85:8a:54:7c:09:76:f1:ab:15:04:af:cb:ef:95:
2a:61:ab:e8:78:b6:d9:ef:34:a3:b2:84:a6:25:9f:1e:5d:0d:
c6:b7:4d:fa:ff:7a:7b:02:47:bd:e9:5f:82:e8:de:65:df:74:
17:d0:2d:01:69:3b:a7:fb:db:fe:de:86:4b:d8:73:a0:b3:33:
ab:82:ba:b8:63:c1:4e:5d:e8:59:bf:c5:61:6d:9e:88:f4:1b:
46:26:4a:95:2a:0d:56:8d:f3:05:2d:b1:3b:71:e7:01:7b:5a:
98:e2:c6:e1:60:43:9a:ba:57:77:15:c0:d7:99:94:f9:ee:ae:
2e:59:c6:62:2e:9b:15:64:2c:58:b3:61:3d:f7:5d:f5:7f:d5:
c4:fc:7e:e7:56:5f:9c:5f:2d:d8:f8:50:8f:3f:9e:ad:dd:6e:
ad:a5:93:75:d0:9c:c9:22:7b:cd:58:fc:aa:53:0a:e2:7f:51:
46:f1:7d:2c:1b:32:1b:fc:5e:d2:2a:ac:3b:0a:76:7a:f3:cd:
62:3b:03:be:b9:7a:59:59:41:e7:b1:49:76:8b:fa:ed:65:28:
51:90:16:6f:e9:c4:89:20:1d:f2:d4:02:45:a1:56:02:1a:19:
dc:17:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:36:34 2026 by rpki-client