Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lxfMLWQQncBvzT5T0L7WXPYYRaE.roa
File: lxfMLWQQncBvzT5T0L7WXPYYRaE.roa (raw, json)
Hash identifier: GhJeQx+hG4Ww9rz8ka19pMlPyLM1aVBee7aKROvXSB8=
Subject key identifier: 97:17:CC:2D:64:10:9D:C0:6F:CD:3E:53:D0:BE:D6:5C:F6:18:45:A1
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D7AC5FFF0E342C96632CF717E312
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lxfMLWQQncBvzT5T0L7WXPYYRaE.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:5c00::/29 maxlen: 29
2a11:76c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:ac:5f:ff:0e:34:2c:96:63:2c:f7:17:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9717cc2d64109dc06fcd3e53d0bed65cf61845a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:99:15:53:a7:ae:c8:79:e9:7c:89:3f:ef:
11:cd:3c:c3:49:fd:ea:18:36:3a:80:3a:5b:13:92:
2e:77:ea:2c:c3:a7:b3:5f:bf:c0:3f:66:2f:1b:58:
a1:be:88:77:09:6c:61:46:ae:ac:ec:a8:24:93:b5:
50:f2:f4:41:b0:47:ea:73:6c:dc:b7:f0:4d:b0:c0:
d4:b0:bb:81:4a:6f:82:86:d4:90:b0:9d:53:b2:6d:
85:66:4e:47:36:d9:2f:d6:18:f7:f0:b5:96:3b:19:
44:0b:6f:8a:4c:e2:b3:22:d9:6f:d3:65:1d:c9:ee:
76:54:aa:c6:94:a7:1b:9a:6f:da:47:df:bf:a6:c4:
f9:71:4b:8b:f2:e7:25:e1:08:b8:a6:83:91:00:91:
fe:22:79:fb:11:e0:a4:fd:d1:ad:32:a4:b0:80:20:
52:64:fa:0d:ec:56:ab:25:dd:c5:da:e7:5f:b2:75:
8b:02:53:2f:c7:ab:22:f4:2a:ee:7b:59:91:1a:c6:
40:51:b5:46:88:4e:39:af:a6:19:b2:f7:ec:0e:52:
a1:f9:c5:5a:14:33:77:27:d8:9b:4f:c9:4c:85:c7:
ee:c0:bd:b4:0f:0e:b9:bf:0c:22:f6:93:a5:9c:a0:
5e:99:7c:47:b9:8e:b8:87:81:93:0a:50:b2:b5:b9:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:CC:2D:64:10:9D:C0:6F:CD:3E:53:D0:BE:D6:5C:F6:18:45:A1
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lxfMLWQQncBvzT5T0L7WXPYYRaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5c00::/29
2a11:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:ee:93:c6:d2:10:15:54:9b:38:2c:b3:06:bc:53:f1:9d:59:
ef:3c:9a:1f:cc:b4:cf:b3:fa:f2:07:15:7a:1e:2f:f4:83:81:
cf:d1:92:82:72:2e:a7:32:3f:3c:4a:b0:0a:52:b4:4f:6e:e6:
a6:66:f9:9e:27:31:e8:03:31:89:32:4a:9b:81:34:f3:8c:de:
38:e1:b5:03:09:fa:c9:bd:8d:d0:93:cc:67:39:3b:c0:06:0a:
fe:e8:8d:a3:c7:46:6a:e4:a3:2e:3f:10:f3:b1:06:17:d6:76:
d2:8f:56:6d:2e:10:2b:95:4b:9e:ee:ec:1b:06:4d:5e:63:41:
f4:63:35:be:f8:c2:fa:a5:77:bf:d8:93:6d:df:d2:a3:31:5c:
da:82:2b:4d:1d:6d:80:a6:1a:b5:2b:e5:7c:ef:89:a0:5c:12:
a0:f5:6b:46:36:0f:f5:a1:e5:12:76:39:f1:19:fb:13:3b:8f:
82:a1:2b:39:fc:93:56:87:99:38:9d:18:8f:b5:6e:27:bc:76:
1c:ff:51:bc:c1:ae:6f:71:bf:12:23:ac:aa:3d:87:bc:86:87:
bc:78:98:b3:e2:d7:61:ff:86:99:8e:89:4d:1d:7a:fc:bd:9b:
ca:a3:10:0b:f8:2c:e2:cb:28:16:96:20:1e:8f:68:2c:5c:6d:
92:61:0c:84
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDIsNesX/8ONCyWYyz3F+MSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE3Y2MyZDY0MTA5ZGMwNmZjZDNlNTNkMGJlZDY1Y2Y2MTg0NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20CZFVOnrsh56XyJP+8RzTzDSf3q
GDY6gDpbE5Iud+osw6ezX7/AP2YvG1ihvoh3CWxhRq6s7Kgkk7VQ8vRBsEfqc2zc
t/BNsMDUsLuBSm+ChtSQsJ1Tsm2FZk5HNtkv1hj38LWWOxlEC2+KTOKzItlv02Ud
ye52VKrGlKcbmm/aR9+/psT5cUuL8ucl4Qi4poORAJH+Inn7EeCk/dGtMqSwgCBS
ZPoN7FarJd3F2udfsnWLAlMvx6si9Crue1mRGsZAUbVGiE45r6YZsvfsDlKh+cVa
FDN3J9ibT8lMhcfuwL20Dw65vwwi9pOlnKBemXxHuY64h4GTClCytbmyxwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJcXzC1kEJ3Ab80+U9C+1lz2GEWhMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvbHhmTUxXUVFuY0J2elQ1VDBMN1dYUFlZUmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhFcAAMF
AyoRdsAwDQYJKoZIhvcNAQELBQADggEBAAvuk8bSEBVUmzgsswa8U/GdWe88mh/M
tM+z+vIHFXoeL/SDgc/RkoJyLqcyPzxKsApStE9u5qZm+Z4nMegDMYkySpuBNPOM
3jjhtQMJ+sm9jdCTzGc5O8AGCv7ojaPHRmrkoy4/EPOxBhfWdtKPVm0uECuVS57u
7BsGTV5jQfRjNb74wvqld7/Yk23f0qMxXNqCK00dbYCmGrUr5XzviaBcEqD1a0Y2
D/Wh5RJ2OfEZ+xM7j4KhKzn8k1aHmTidGI+1bie8dhz/UbzBrm9xvxIjrKo9h7yG
h7x4mLPi12H/hpmOiU0devy9m8qjEAv4LOLLKBaWIB6PaCxcbZJhDIQ=
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:43 2026 by rpki-client