Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lGzpaSpHrEFe3On71rh7LCQDpNc.roa
File: lGzpaSpHrEFe3On71rh7LCQDpNc.roa (raw, json)
Hash identifier: x67Fx+mYJJ/pVZGXvSgqpcqQfMuQHdgk4NqnmNENyww=
Subject key identifier: 94:6C:E9:69:2A:47:AC:41:5E:DC:E9:FB:D6:B8:7B:2C:24:03:A4:D7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1927BC0C9626DFD92ECF19982D1FE5079
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lGzpaSpHrEFe3On71rh7LCQDpNc.roa
Signing time: Sat 31 Oct 2026 15:02:26 +0000
ROA not before: Sat 31 Oct 2026 15:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218241
IP address blocks: 2a06:9801:159a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:7b:c0:c9:62:6d:fd:92:ec:f1:99:82:d1:fe:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 31 15:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=946ce9692a47ac415edce9fbd6b87b2c2403a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:1a:c1:15:c5:2c:5f:8a:b6:19:e0:ca:bc:
3d:d0:8e:98:21:ac:09:39:72:c9:33:ba:e1:fd:0b:
ab:b8:8b:8d:38:5d:40:45:39:8d:9c:d4:0b:bd:8f:
54:6e:17:38:a9:f9:04:3a:fa:5d:0a:c4:42:15:8c:
0f:e3:bc:ce:31:5e:15:46:b2:64:da:66:5e:79:14:
c0:16:40:0d:34:ff:5e:ef:3f:30:40:87:7a:5f:43:
20:72:c8:e2:b4:a7:9c:a0:6f:c7:ac:79:62:4d:83:
10:b9:ab:df:39:ec:a5:9e:cd:71:f9:fd:a9:ed:93:
16:11:31:fb:83:93:de:7e:67:1d:4e:fe:58:9b:81:
6b:b5:12:c0:86:d4:fb:a7:dd:22:bc:50:09:7a:a5:
d5:16:2f:93:f8:76:72:c8:c6:c9:7d:29:64:9b:59:
b2:b3:cb:30:8a:d5:84:3c:a5:89:4b:13:5d:f0:41:
36:e1:e5:5e:39:82:ce:63:41:a4:43:3b:9b:56:32:
44:1e:e9:2b:40:2c:03:5b:0d:79:9d:2c:b2:b3:61:
18:0f:fa:17:cc:1d:a7:ac:13:cc:01:ab:aa:93:a9:
9d:3e:75:00:b3:34:45:59:93:b7:8a:db:1a:ce:a9:
4c:ac:07:66:23:56:f6:c6:68:e7:33:10:9b:43:c2:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:E9:69:2A:47:AC:41:5E:DC:E9:FB:D6:B8:7B:2C:24:03:A4:D7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lGzpaSpHrEFe3On71rh7LCQDpNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:159a::/48
Signature Algorithm: sha256WithRSAEncryption
6c:b7:48:fe:b7:20:91:b4:12:52:21:70:c7:4a:76:0c:12:63:
fc:e1:db:7c:41:b0:60:11:10:27:52:77:1d:b4:a3:49:08:70:
9b:8e:b3:9d:dc:04:f7:1e:57:75:d9:a7:dc:67:33:09:0b:bf:
c9:7e:7c:95:c6:6b:66:a1:99:a3:ac:00:ad:9c:8b:65:e3:d5:
31:96:09:b2:45:22:6c:0b:ef:fd:73:e8:37:63:96:fb:81:e1:
3f:04:58:b0:4d:49:f3:89:a9:f0:7b:94:83:a0:78:3a:9a:4d:
25:fd:d5:dd:0b:de:57:5d:8b:64:53:16:04:4f:1f:57:4a:c4:
f6:43:8d:c1:62:60:bc:38:fb:cd:54:7c:9d:35:02:17:57:86:
2b:40:52:0d:34:fe:3d:87:5e:59:fd:21:08:33:9c:8a:c2:0a:
33:11:fe:50:1e:ea:53:97:d4:cd:c5:b2:47:e1:16:0d:1d:8f:
d5:ed:af:7b:49:bd:c7:11:71:8d:15:1b:d6:f3:9b:2a:6f:41:
cc:92:47:19:f8:d8:c2:b9:8c:ef:47:d5:ab:39:2a:be:b0:28:
13:f8:f4:b8:05:7c:e2:4b:d4:08:0a:1f:c5:4c:12:7e:fe:c4:
11:e1:10:b8:fe:fd:70:4c:1e:43:5d:5a:32:c6:93:7a:59:75:
d2:0e:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:09 2026 by rpki-client