Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/LhR0TaI-3l7vFbmj4OdM5VTznnM.roa
File: LhR0TaI-3l7vFbmj4OdM5VTznnM.roa (raw, json)
Hash identifier: W1ss0alc3roBe8jtNe6rfLpuT1b+r5ADeaOA+2GP03A=
Subject key identifier: 2E:14:74:4D:A2:3E:DE:5E:EF:15:B9:A3:E0:E7:4C:E5:54:F3:9E:73
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C980AA287E3AF0DA9F817FC825D0D7B1
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/LhR0TaI-3l7vFbmj4OdM5VTznnM.roa
Signing time: Tue 22 Sep 2026 14:24:07 +0000
ROA not before: Tue 22 Sep 2026 14:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 2a12:1300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:80:aa:28:7e:3a:f0:da:9f:81:7f:c8:25:d0:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e14744da23ede5eef15b9a3e0e74ce554f39e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:4f:46:dd:ee:3b:d7:39:73:be:c8:d3:6f:
79:cf:20:a1:78:6a:26:8f:1e:21:8f:35:a8:ca:15:
f0:3e:b5:b3:23:14:b6:b9:ac:7a:29:97:ea:48:76:
60:8e:cb:3a:4a:6c:c3:bc:ff:4c:0e:ce:ba:60:1f:
71:54:db:fa:0f:15:17:32:0f:c3:13:d2:23:4b:90:
01:af:ef:28:86:86:07:35:0a:d2:7e:83:bc:cf:34:
7a:cf:de:ad:a1:44:1b:40:48:18:fc:7d:ea:fc:fc:
98:86:44:7f:6a:d2:69:93:9e:24:fd:ac:07:ee:d0:
36:b6:54:7f:ad:b6:2d:85:15:e2:10:e4:d3:ac:f7:
b9:3e:8c:59:a1:cb:ff:e2:68:b0:ef:cf:54:92:1d:
dd:b9:6e:a1:07:ff:f4:a3:1e:3d:70:72:40:72:5d:
6f:09:b4:28:7d:43:54:07:3a:7a:03:d1:0e:f9:06:
cc:c3:12:f4:86:90:a2:52:b9:aa:9a:31:e2:37:49:
8a:47:f6:4c:94:29:0f:a8:78:2e:63:bd:bc:39:d2:
8c:e4:e8:4e:15:09:db:bf:97:b4:b6:17:69:9e:f5:
2a:1e:ee:92:27:76:c6:06:47:23:33:30:22:a8:54:
33:f0:ca:2d:11:c5:ba:08:ee:ab:43:98:b1:83:89:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:74:4D:A2:3E:DE:5E:EF:15:B9:A3:E0:E7:4C:E5:54:F3:9E:73
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/LhR0TaI-3l7vFbmj4OdM5VTznnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1300::/29
Signature Algorithm: sha256WithRSAEncryption
5c:5d:43:ad:43:c1:b3:b9:dd:7e:40:b6:43:af:f0:d9:50:73:
5e:1d:75:37:a0:32:c8:a9:eb:ed:a2:70:ef:5e:d3:69:24:44:
1e:4c:10:33:b8:b8:c8:0f:37:c3:f0:fa:4d:05:d3:1d:24:78:
bb:48:45:4f:fe:90:78:37:0c:02:4d:d2:2f:5f:07:67:b5:9e:
2c:c7:5d:a1:c5:01:97:21:70:1a:e8:27:36:97:c0:3b:cc:7e:
9b:f0:4d:9d:05:0e:1d:de:c8:69:b2:e1:0e:70:97:00:e7:3b:
44:11:39:1d:51:d7:f0:ef:7e:f8:6d:96:5d:85:9d:bd:45:cd:
0e:78:e3:c1:8a:33:23:5c:89:0a:d9:ce:b2:bb:96:68:70:8b:
6c:c4:05:db:41:7b:2f:01:b3:2f:fe:a1:cd:bf:b0:7d:9f:0d:
7b:d7:b8:a9:51:15:5e:e1:cf:91:8d:91:de:e0:11:a5:7c:e9:
7e:de:82:c1:66:9a:69:c6:b4:12:78:b0:82:34:c7:a6:6c:f6:
c7:1f:0b:40:b5:74:b8:21:08:f1:e9:39:1a:97:07:97:55:54:
c9:66:b7:e6:55:be:4f:5f:12:cd:2d:4f:88:e9:5b:6c:05:34:
96:cb:bb:52:60:59:10:78:ba:46:5d:e3:ea:4d:76:88:0e:f9:
8c:0c:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:44 2026 by rpki-client