Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LuCEi6-dIgSkrB7u6XXrAYJz_pc.roa
File: LuCEi6-dIgSkrB7u6XXrAYJz_pc.roa (raw, json)
Hash identifier: xzhd3ERh4i0BJ5PVKnnFx6nrKcN1GNZWuebms1jHhLo=
Subject key identifier: 2E:E0:84:8B:AF:9D:22:04:A4:AC:1E:EE:E9:75:EB:01:82:73:FE:97
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1CC90C103D624F9D2F5A5EDA78399D01A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LuCEi6-dIgSkrB7u6XXrAYJz_pc.roa
Signing time: Wed 11 Nov 2026 21:43:20 +0000
ROA not before: Wed 11 Nov 2026 21:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218111
IP address blocks: 2a06:9801:15cb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cc:90:c1:03:d6:24:f9:d2:f5:a5:ed:a7:83:99:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 11 21:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee0848baf9d2204a4ac1eeee975eb018273fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ea:7d:57:96:95:7d:50:12:e2:bd:26:7c:
87:c3:30:fc:c8:f2:00:9a:9a:20:56:3b:7d:60:3b:
c2:42:9a:7b:67:f2:cb:78:4e:17:d7:31:b4:ae:53:
a9:91:24:17:b2:90:ae:e1:41:d7:7d:04:d1:c1:f5:
08:f9:ad:b1:5b:85:81:7d:0c:27:b2:16:2f:47:3a:
b3:56:29:16:09:e1:47:e5:4a:4f:54:a0:41:84:8a:
03:8c:d2:be:f7:b1:e7:d7:2f:e6:cb:11:29:e4:4c:
f3:03:11:7b:8f:8a:b9:2c:f3:fb:c6:bd:e3:bd:26:
36:bd:1e:58:78:1c:bd:a7:dd:3a:0c:98:c3:f9:86:
b6:bb:d8:49:d9:c2:47:06:70:6d:3e:64:20:d0:9b:
e3:48:ce:9c:ea:34:91:33:4a:91:a8:9f:06:a3:e9:
f3:2b:15:9e:e4:80:11:af:fb:d5:0c:48:52:01:e8:
a2:0c:aa:03:7e:88:5b:1a:52:3f:0d:03:cb:28:1e:
f5:79:9a:df:48:84:22:e5:86:66:34:ba:8a:21:15:
25:d9:bb:25:78:dd:3b:dc:17:4f:8e:f4:28:5b:63:
b5:b6:45:36:24:6d:a3:9b:cd:6d:6f:20:ed:35:b2:
79:ca:8a:1a:03:27:59:99:a1:6c:dd:4f:00:92:b3:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:84:8B:AF:9D:22:04:A4:AC:1E:EE:E9:75:EB:01:82:73:FE:97
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LuCEi6-dIgSkrB7u6XXrAYJz_pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15cb::/48
Signature Algorithm: sha256WithRSAEncryption
7b:db:ab:8a:9b:d9:a0:18:42:6a:2b:40:31:ca:4e:ff:1e:05:
24:1b:24:70:02:28:33:b0:fd:0d:a6:29:60:7c:f0:2f:96:4a:
ea:08:46:d7:e4:89:22:c7:94:f5:4d:37:7f:a3:be:02:0e:44:
f4:07:67:0b:2d:c8:f5:58:9b:1b:48:16:03:5b:64:79:d6:75:
00:9e:50:1a:dc:5e:eb:b7:9a:73:4c:97:8b:67:7b:4e:dd:87:
b5:9d:34:8c:2b:4f:b6:55:2a:31:09:79:42:92:11:3e:a6:27:
35:cc:fb:0d:b9:53:4d:c8:bc:ff:60:68:e1:b4:fa:e1:6f:ed:
3b:06:c1:a5:09:7f:ff:25:63:b1:f9:e8:57:3a:9d:79:bf:f3:
de:fb:e5:5e:b3:95:f2:79:32:c7:77:78:fe:56:d3:58:1f:25:
7e:5f:b2:0d:0d:03:ea:f7:26:83:cf:2f:00:d8:e0:28:c8:e5:
25:27:6c:22:57:64:83:72:67:44:4e:d0:af:31:fd:1c:3c:5b:
67:c1:dc:88:ef:87:7a:0f:4f:33:7c:7c:4b:ca:fd:3a:3f:fb:
aa:78:68:c8:59:0c:a9:ad:00:76:e3:d2:6b:6b:19:aa:89:18:
a4:02:43:4f:5a:25:b5:ff:26:19:b4:ab:29:ac:0e:f1:28:de:
79:58:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:15 2026 by rpki-client