Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lPDLnISpigN3SzpMYG1tzHNnK8s.roa
File: lPDLnISpigN3SzpMYG1tzHNnK8s.roa (raw, json)
Hash identifier: U1kHoWJO9dVtwmh0yAzoSxY6qDp9oHzYWmb62bs4HPk=
Subject key identifier: 94:F0:CB:9C:84:A9:8A:03:77:4B:3A:4C:60:6D:6D:CC:73:67:2B:CB
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01A13A2173E3A69B1F7374BA5C73BE423C57
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lPDLnISpigN3SzpMYG1tzHNnK8s.roa
Signing time: Wed 14 Oct 2026 11:17:13 +0000
ROA not before: Wed 14 Oct 2026 11:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212556
IP address blocks: 2001:740:10::/48 maxlen: 48
2001:740:11::/48 maxlen: 48
2001:740:12::/48 maxlen: 48
2001:740:13::/48 maxlen: 48
2001:740:14::/48 maxlen: 48
2001:740:15::/48 maxlen: 48
2001:740:16::/48 maxlen: 48
2001:740:17::/48 maxlen: 48
2001:740:18::/48 maxlen: 48
2001:740:19::/48 maxlen: 48
2001:740:1a::/48 maxlen: 48
2001:740:1b::/48 maxlen: 48
2001:740:1c::/48 maxlen: 48
2001:740:1d::/48 maxlen: 48
2001:740:1e::/48 maxlen: 48
2001:740:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:21:73:e3:a6:9b:1f:73:74:ba:5c:73:be:42:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Oct 14 11:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94f0cb9c84a98a03774b3a4c606d6dcc73672bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:19:99:04:e7:af:1c:05:e8:21:44:9f:da:
ff:ec:10:85:74:66:e3:ad:30:98:c5:3d:18:0c:8c:
e4:61:b6:33:e7:e3:f5:cc:4b:0f:a6:ce:d9:bb:83:
1a:e4:44:27:f2:1a:87:86:d0:5d:1d:46:c3:75:3a:
47:13:07:72:f3:b2:fd:b8:94:90:57:32:b9:97:e2:
a4:35:a1:a7:9b:6a:82:78:cc:87:1f:be:73:4a:03:
57:0a:b7:fe:68:06:e0:0c:2a:0b:9f:a9:2b:a0:ca:
c1:07:b9:e6:78:d9:b5:54:13:e3:3d:99:bf:87:54:
5c:20:53:51:7f:79:aa:37:72:5f:70:e4:a6:f1:2b:
a6:87:d2:9e:c5:67:59:08:9f:8f:de:db:53:4a:9a:
75:29:3b:4b:6c:44:d8:8b:f3:da:d7:68:59:3b:d9:
47:d5:e5:02:01:ac:ed:3a:1d:17:4a:5c:d4:85:e5:
e1:5a:2d:ae:8c:1f:e2:61:df:45:96:73:69:d1:67:
e7:03:84:f2:51:b3:73:20:18:00:6f:1d:09:05:8a:
84:b9:54:cc:38:98:bf:ae:b7:c6:da:66:52:db:e0:
79:3c:35:49:c6:49:10:b1:6c:e1:18:87:1a:53:7a:
b4:a1:78:f1:e1:a1:17:f5:e1:cd:bb:be:06:06:75:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:CB:9C:84:A9:8A:03:77:4B:3A:4C:60:6D:6D:CC:73:67:2B:CB
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lPDLnISpigN3SzpMYG1tzHNnK8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:740:10::/44
Signature Algorithm: sha256WithRSAEncryption
03:bb:4a:b1:7e:0a:26:69:99:0e:37:0b:d9:53:fe:f4:2f:a0:
d0:aa:08:53:6e:08:2f:c0:01:e4:e6:80:f3:ba:e8:f0:c8:5b:
bf:a3:88:24:0c:0c:86:de:c5:4c:5d:1d:33:6b:7a:a6:33:5c:
d0:a1:48:04:df:8d:fe:cf:68:79:57:8a:52:ad:75:30:13:d6:
99:99:08:6c:d8:c2:2e:38:4a:ef:74:86:d1:57:88:13:bb:bc:
39:59:12:82:ec:6c:63:1c:a6:45:79:ac:04:e6:29:37:cf:b7:
a5:51:9b:36:06:51:f8:98:0e:b7:e5:c8:4e:df:98:4f:98:4d:
b1:e0:ab:f8:b9:07:d4:aa:58:b2:6c:e3:dc:7a:0e:9c:d9:3d:
64:fb:3b:5d:89:9f:2a:d5:66:fd:9f:74:21:6a:48:7e:5c:de:
03:c7:0d:14:52:23:db:ff:da:e3:ef:6b:95:c4:41:ed:2b:26:
50:e3:af:59:0d:55:4b:a4:60:4c:54:cb:76:2c:9e:a3:8e:28:
77:4b:1e:f9:75:43:f3:ae:c8:3e:a1:c5:74:ae:be:38:a9:c5:
26:9e:ab:a0:a5:0c:04:41:ef:6d:29:29:39:3f:57:b9:48:2a:
d7:21:48:e5:eb:97:d0:f2:c7:be:fd:b6:78:c5:7a:ca:32:24:
52:bb:81:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE6IXPjppsfc3S6XHO+QjxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4
ZDA1NTcwHhcNMjYxMDE0MTExNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGYwY2I5Yzg0YTk4YTAzNzc0YjNhNGM2MDZkNmRjYzczNjcyYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30kZmQTnrxwF6CFEn9r/7BCFdGbj
rTCYxT0YDIzkYbYz5+P1zEsPps7Zu4Ma5EQn8hqHhtBdHUbDdTpHEwdy87L9uJSQ
VzK5l+KkNaGnm2qCeMyHH75zSgNXCrf+aAbgDCoLn6kroMrBB7nmeNm1VBPjPZm/
h1RcIFNRf3mqN3JfcOSm8Sumh9KexWdZCJ+P3ttTSpp1KTtLbETYi/Pa12hZO9lH
1eUCAaztOh0XSlzUheXhWi2ujB/iYd9FlnNp0WfnA4TyUbNzIBgAbx0JBYqEuVTM
OJi/rrfG2mZS2+B5PDVJxkkQsWzhGIcaU3q0oXjx4aEX9eHNu74GBnWhvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJTwy5yEqYoDd0s6TGBtbcxzZyvLMB8GA1UdIwQY
MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt
OWRjYTVjYzgwZGQ5LzEvbFBETG5JU3BpZ04zU3pwTVlHMXR6SE5uSzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5
LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEHQAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQADu0qxfgomaZkONwvZU/70L6DQqghTbggvwAHk
5oDzuujwyFu/o4gkDAyG3sVMXR0za3qmM1zQoUgE343+z2h5V4pSrXUwE9aZmQhs
2MIuOErvdIbRV4gTu7w5WRKC7GxjHKZFeawE5ik3z7elUZs2BlH4mA635chO35hP
mE2x4Kv4uQfUqliybOPceg6c2T1k+ztdiZ8q1Wb9n3Qhakh+XN4Dxw0UUiPb/9rj
72uVxEHtKyZQ469ZDVVLpGBMVMt2LJ6jjih3Sx75dUPzrsg+ocV0rr44qcUmnqug
pQwEQe9tKSk5P1e5SCrXIUjl65fQ8se+/bZ4xXrKMiRSu4G3
-----END CERTIFICATE-----
Generated at Wed Oct 14 23:41:11 2026 by rpki-client