Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h5Lq_YYPO2J2eCk7Uw7rSl9xVPU.roa
File: h5Lq_YYPO2J2eCk7Uw7rSl9xVPU.roa (raw, json)
Hash identifier: Pa9ymSvdSbRsFPy+ilewMHOaE4xPmtiHCH6jo+mXMcw=
Subject key identifier: 87:92:EA:FD:86:0F:3B:62:76:78:29:3B:53:0E:EB:4A:5F:71:54:F5
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1C0D5DE0490E131A5BD43E144FC6D5788
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h5Lq_YYPO2J2eCk7Uw7rSl9xVPU.roa
Signing time: Mon 09 Nov 2026 15:03:23 +0000
ROA not before: Mon 09 Nov 2026 15:03:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 170.168.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:d5:de:04:90:e1:31:a5:bd:43:e1:44:fc:6d:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 9 15:03:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8792eafd860f3b627678293b530eeb4a5f7154f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:8a:09:f3:7a:7b:02:84:40:67:b2:15:7d:
6f:ee:2b:4a:d3:38:9a:ad:44:14:e0:b9:07:76:9f:
bb:db:b1:0f:26:59:9c:55:fc:a9:9a:e7:58:c6:dc:
a3:35:87:92:60:77:53:c4:9f:56:75:29:fa:57:78:
55:9b:59:9c:99:19:df:5e:d2:dc:c2:bb:a0:f9:95:
27:03:3d:c8:24:62:16:28:d1:f8:22:cf:58:7e:d6:
3d:2e:b4:b6:44:b6:fe:9a:eb:dd:71:69:af:99:d5:
9c:c7:96:2b:54:c3:dc:72:b6:1e:b8:28:bb:ad:fe:
a4:95:70:95:d3:34:f4:23:20:9a:10:25:97:d5:6d:
f1:96:8e:9c:a3:98:15:1d:b7:b3:67:5e:75:36:fe:
b8:af:df:13:3a:69:56:1e:1b:0e:31:f7:0c:4b:fc:
1e:1f:4d:03:c9:d9:0c:73:5a:f1:7b:8e:b3:ce:43:
08:4e:ec:8d:04:b0:e3:9b:98:9e:0a:57:f7:4c:04:
55:bb:83:e0:87:8b:6f:b2:3e:f5:ba:24:35:ff:2a:
fd:ba:b3:78:cc:57:b6:30:d6:fe:b9:a4:c0:86:e3:
c8:51:c5:6c:07:20:3e:21:7b:7b:d7:ab:a9:87:99:
43:b6:f2:7f:c7:4e:bf:e4:5c:e2:fc:35:96:e9:18:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:EA:FD:86:0F:3B:62:76:78:29:3B:53:0E:EB:4A:5F:71:54:F5
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/h5Lq_YYPO2J2eCk7Uw7rSl9xVPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:10:81:e8:4d:41:6b:ff:5e:ad:f6:30:91:62:cb:84:59:07:
d3:d7:4e:17:e2:b3:da:3e:7e:86:f8:b3:da:ad:ae:b2:db:16:
94:d3:e0:0d:49:b1:d3:11:1d:67:02:59:e4:95:2c:61:e6:51:
5e:76:7c:5f:51:ca:0a:5d:04:df:52:d5:5d:27:98:e6:db:09:
e0:db:fb:3d:c3:76:7a:e6:16:16:54:1c:9c:37:7e:8b:dc:f9:
ee:e2:84:e0:f1:a6:e0:a5:a2:3f:8c:61:b4:52:97:53:ab:1f:
b2:11:6b:2f:f8:00:32:34:e2:7e:80:c0:3b:99:e0:2e:ca:fc:
9c:87:51:1e:2b:af:28:89:8b:8c:0f:67:1f:69:52:bf:d0:98:
14:80:b7:2f:67:73:3b:f2:00:f5:3c:66:9c:bc:d1:6b:10:5b:
86:44:51:47:1d:ae:38:bc:8b:8b:07:e6:c1:3c:c5:ec:8c:4a:
21:56:62:d6:41:01:e4:9f:04:56:ea:a2:31:dd:fb:77:b4:de:
8d:ee:cc:8e:86:21:37:b8:06:d4:3e:a7:90:fd:49:51:68:ab:
bb:e5:55:f5:0e:cf:3c:29:c0:dd:eb:78:eb:d2:2f:05:fe:06:
db:59:26:b1:d3:0d:57:8d:e1:57:41:ff:67:82:b0:32:c6:be:
9a:99:ab:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:19 2026 by rpki-client