Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/llBxIaRS7lr59y92DVnLZGxKmCE.roa
File: llBxIaRS7lr59y92DVnLZGxKmCE.roa (raw, json)
Hash identifier: T2lUPPx8irvyY4IdUrW5GzHoIn0wCOUBjkwhGSMzJck=
Subject key identifier: 96:50:71:21:A4:52:EE:5A:F9:F7:2F:76:0D:59:CB:64:6C:4A:98:21
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A19AE6E7C0E599D3C8EF7AC7B07902DF15
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/llBxIaRS7lr59y92DVnLZGxKmCE.roa
Signing time: Mon 02 Nov 2026 06:16:26 +0000
ROA not before: Mon 02 Nov 2026 06:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218233
IP address blocks: 2a06:9801:15bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:e6:e7:c0:e5:99:d3:c8:ef:7a:c7:b0:79:02:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 2 06:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96507121a452ee5af9f72f760d59cb646c4a9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:90:f3:77:7c:03:91:aa:35:ae:fc:a0:4b:
40:98:1d:76:ba:b7:7c:46:f3:03:86:43:86:cd:47:
fc:4d:e0:af:16:68:00:ee:fe:54:e5:af:87:58:1c:
94:1e:16:c2:db:b2:50:e5:47:8b:0e:30:d9:54:46:
ce:95:3d:3f:a0:1c:f1:71:c2:a4:3f:23:24:6c:94:
3a:d0:80:d6:a2:10:b1:7f:4b:67:18:67:cc:b9:c6:
21:96:98:a8:7f:fb:b3:20:d2:54:8c:09:4f:0d:fb:
64:3e:f8:93:1e:30:51:71:0d:b5:b4:af:d3:ea:3d:
f4:17:15:6c:d0:90:b7:71:78:db:a3:ca:2a:37:80:
57:c9:39:b3:7c:09:fc:32:5a:40:89:7e:c4:38:9a:
fe:0e:4b:43:bd:c5:15:d8:3d:48:a9:54:9b:62:c2:
84:f2:ea:47:12:42:43:70:f2:90:fb:e7:52:26:f4:
0b:98:71:c1:39:30:d5:7e:1d:0f:55:5a:9d:63:0f:
ab:0d:6a:c9:55:4a:95:d0:a8:b1:1e:09:6c:a6:f4:
42:81:a0:42:71:b5:59:84:e3:39:bf:9b:e7:1a:45:
4e:87:2c:47:b7:59:3e:8e:90:a9:64:9b:6f:f7:a7:
ba:b9:13:77:5e:68:66:2f:c0:82:8b:34:79:a1:10:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:50:71:21:A4:52:EE:5A:F9:F7:2F:76:0D:59:CB:64:6C:4A:98:21
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/llBxIaRS7lr59y92DVnLZGxKmCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15bd::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cc:c6:fe:83:26:68:5a:94:e1:20:9e:74:4d:89:bc:56:a4:
01:4d:55:4d:03:cf:1a:85:96:70:b6:8c:0c:c7:22:f1:d9:38:
22:e5:68:87:e6:1f:b8:6e:56:b5:8c:b8:bc:f3:48:6d:25:3c:
1d:18:05:41:5a:2a:65:33:04:10:a1:b0:01:78:6e:05:00:90:
e3:d5:0d:12:2c:c9:57:6c:cb:f8:e9:ce:e1:26:29:7a:93:14:
89:d0:f5:ee:f0:3f:53:5f:13:36:b9:31:f7:40:33:57:5c:e5:
66:e0:a7:41:af:7f:c1:53:68:a0:1a:39:ea:19:bc:98:28:37:
90:f8:3f:c3:ed:d3:70:af:de:ab:a3:5f:8b:c5:ff:87:79:ef:
b6:a7:c9:62:1a:5b:e2:fb:04:b6:47:4c:05:ee:22:41:5f:be:
05:25:20:1a:5b:96:92:d8:9c:f6:c4:00:e5:33:45:cb:a9:5c:
61:94:01:d9:44:2e:d2:13:48:f3:30:3c:4d:18:d0:67:88:91:
13:9d:9a:2c:b0:88:2e:71:80:93:ed:bc:7c:29:b3:02:c1:0a:
a6:9d:2f:6c:65:0a:65:3c:dc:05:9c:50:85:0f:ac:15:f9:99:
2b:84:dd:57:cd:d0:37:f0:22:2b:39:05:c0:7f:f5:f6:7f:74:
58:25:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:18 2026 by rpki-client