Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/lJwPx_YfXagzrWfCaDbeHMh9VSU.roa
File: lJwPx_YfXagzrWfCaDbeHMh9VSU.roa (raw, json)
Hash identifier: lpKb9Ke9ORsiJSWDSA7lflKj6VXsYAISsmKT3+p+SJU=
Subject key identifier: 94:9C:0F:C7:F6:1F:5D:A8:33:AD:67:C2:68:36:DE:1C:C8:7D:55:25
Certificate issuer: /CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Certificate serial: 019F2368DA077F11C7B47FC6EAABF2BE5CA4
Authority key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/lJwPx_YfXagzrWfCaDbeHMh9VSU.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212416
IP address blocks: 2001:67c:f18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:07:7f:11:c7:b4:7f:c6:ea:ab:f2:be:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949c0fc7f61f5da833ad67c26836de1cc87d5525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:7f:54:4b:33:60:a3:ab:de:35:1d:07:8d:
66:48:50:9c:4b:7f:85:45:95:38:ae:49:d5:6e:e1:
61:d0:5c:1e:a4:4d:e4:8d:4d:9d:6f:e6:7b:e2:8e:
a0:d6:39:3d:64:46:13:bf:1b:38:14:2c:ba:b5:76:
db:e0:c8:bb:4d:e7:72:5f:45:7f:75:0e:ce:d6:74:
79:37:9d:58:94:86:33:ba:fd:de:63:c1:c7:a5:45:
1c:9b:e7:b6:76:0a:9e:82:4a:33:7f:87:33:94:17:
e5:24:e4:29:33:19:01:36:11:3c:08:78:ce:ab:28:
e8:74:a3:e8:25:a1:85:dd:4c:b0:41:d3:6d:35:8b:
05:e0:79:3f:5a:22:c6:37:ed:a7:d8:ba:8d:ac:55:
ce:c7:11:b4:20:c8:2e:fb:54:89:d9:3c:04:37:e1:
15:93:e0:d3:c8:21:e9:bb:bd:6b:c2:ca:a7:23:4a:
af:6c:32:2f:46:88:4d:fb:db:7f:96:81:85:a0:00:
26:c8:69:d6:d1:f5:92:44:17:4f:6b:7c:c9:d2:d3:
cc:81:47:c9:82:de:6c:24:69:05:08:b8:25:dd:17:
d7:80:c5:1e:10:e1:ec:c9:ef:3f:31:c0:a3:c2:4d:
12:10:bc:18:a5:98:6d:41:25:eb:a4:b3:dc:d4:45:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:0F:C7:F6:1F:5D:A8:33:AD:67:C2:68:36:DE:1C:C8:7D:55:25
X509v3 Authority Key Identifier:
keyid:7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/lJwPx_YfXagzrWfCaDbeHMh9VSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f18::/48
Signature Algorithm: sha256WithRSAEncryption
8e:92:d0:a9:2d:30:3c:ab:b4:ff:db:fc:3c:cd:4c:b4:81:dc:
48:12:e2:4a:1b:a4:ab:16:2a:f4:75:a9:df:d9:f6:1a:09:a4:
5f:9f:b9:b3:93:4f:fe:35:46:56:ea:99:90:ef:1e:34:a5:42:
48:de:fc:21:0e:d3:2c:3d:53:73:1d:06:90:d9:b9:ef:04:86:
f6:cb:0f:c3:a5:ea:fa:cc:c8:8f:5c:5d:35:0b:ed:98:f5:c4:
cb:9a:8c:66:bd:14:ce:f5:52:d8:52:45:20:83:76:82:0c:2b:
18:fe:ab:39:45:01:f6:28:1c:9e:4e:43:60:c9:ad:0e:47:2e:
b1:bf:6f:ca:3a:c0:ba:e2:35:cd:a2:04:aa:c7:66:12:0e:51:
4e:e8:45:dd:b2:4a:e9:33:e4:3a:d3:f0:d4:83:4b:5a:cc:9b:
c8:cf:66:aa:6f:4f:fe:c8:5d:ef:23:7d:80:5a:9d:13:c0:81:
08:d8:69:e3:5d:c2:06:ae:9d:e7:ab:94:91:f0:c3:26:72:cb:
94:cb:fc:c8:a1:51:fa:5e:d7:cb:6c:3b:3f:a7:93:63:c4:0b:
11:21:60:d2:1c:3d:23:8b:6a:d9:a0:89:6f:43:8f:45:56:14:
35:42:d5:31:d8:2b:d0:9f:51:6b:7a:ae:71:e8:57:80:ed:5f:
4b:9b:36:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaNoHfxHHtH/G6qvyvlykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzE5ZDQ3YTI3OGU4YzVmMWNiYjJmY2YyYmQwYjI2NzZh
MzY1ZWMwHhcNMjYwNzAyMTUxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDljMGZjN2Y2MWY1ZGE4MzNhZDY3YzI2ODM2ZGUxY2M4N2Q1NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWl/VEszYKOr3jUdB41mSFCcS3+F
RZU4rknVbuFh0FwepE3kjU2db+Z74o6g1jk9ZEYTvxs4FCy6tXbb4Mi7TedyX0V/
dQ7O1nR5N51YlIYzuv3eY8HHpUUcm+e2dgqegkozf4czlBflJOQpMxkBNhE8CHjO
qyjodKPoJaGF3UywQdNtNYsF4Hk/WiLGN+2n2LqNrFXOxxG0IMgu+1SJ2TwEN+EV
k+DTyCHpu71rwsqnI0qvbDIvRohN+9t/loGFoAAmyGnW0fWSRBdPa3zJ0tPMgUfJ
gt5sJGkFCLgl3RfXgMUeEOHsye8/McCjwk0SELwYpZhtQSXrpLPc1EUYFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJScD8f2H12oM61nwmg23hzIfVUlMB8GA1UdIwQY
MBaAFH7BnUeieOjF8cuy/PK9CyZ2o2XsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNHZFI2SjQ2TVh4eTdMODhyMExKbmFqWmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQt
YzViMGVmNGU3YmM2LzEvbEp3UHhfWWZYYWd6cldmQ2FEYmVITWg5VlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQtYzViMGVmNGU3YmM2
LzEvZnNHZFI2SjQ2TVh4eTdMODhyMExKbmFqWmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8Y
MA0GCSqGSIb3DQEBCwUAA4IBAQCOktCpLTA8q7T/2/w8zUy0gdxIEuJKG6SrFir0
danf2fYaCaRfn7mzk0/+NUZW6pmQ7x40pUJI3vwhDtMsPVNzHQaQ2bnvBIb2yw/D
per6zMiPXF01C+2Y9cTLmoxmvRTO9VLYUkUgg3aCDCsY/qs5RQH2KByeTkNgya0O
Ry6xv2/KOsC64jXNogSqx2YSDlFO6EXdskrpM+Q60/DUg0tazJvIz2aqb0/+yF3v
I32AWp0TwIEI2GnjXcIGrp3nq5SR8MMmcsuUy/zIoVH6XtfLbDs/p5NjxAsRIWDS
HD0ji2rZoIlvQ49FVhQ1QtUx2CvQn1Freq5x6FeA7V9Lmza9
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:37 2026 by rpki-client