Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lFFdMfsKFTxBVqdFVLDp_jY32Eo.roa
File: lFFdMfsKFTxBVqdFVLDp_jY32Eo.roa (raw, json)
Hash identifier: NCzKn6Ax4rIsbhcd+K28ccdnLSigziPWU7Bn/wfyNFE=
Subject key identifier: 94:51:5D:31:FB:0A:15:3C:41:56:A7:45:54:B0:E9:FE:36:37:D8:4A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D87352328EFF6E76D4C6B72B0682
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lFFdMfsKFTxBVqdFVLDp_jY32Eo.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a0e:8780::/29 maxlen: 29
2a0e:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:73:52:32:8e:ff:6e:76:d4:c6:b7:2b:06:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94515d31fb0a153c4156a74554b0e9fe3637d84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:fd:11:d7:cf:08:85:44:9e:dc:d7:e0:ae:
2c:3b:16:af:ce:a6:14:2e:9c:14:27:5c:f4:8a:7c:
e2:c1:22:50:4b:96:62:99:68:06:79:7c:cb:7a:83:
02:ba:99:dc:4e:1b:00:97:c0:bc:29:e8:44:f5:c9:
22:c7:2d:6e:75:59:da:c9:ee:dd:82:9d:c7:a2:fe:
91:33:c2:32:e4:a5:7d:f3:a8:6c:1b:c2:d7:00:51:
dd:61:73:ed:f4:a0:a2:40:7e:6c:47:a6:43:24:73:
a2:e0:7c:e8:97:03:ac:41:72:23:64:49:0f:dd:79:
53:5b:85:2f:d5:72:f2:04:9d:7f:cb:8c:41:76:2f:
51:e7:66:c7:53:05:8e:78:59:b3:14:0f:2e:59:57:
83:1b:c3:6f:cd:5a:8d:96:58:a7:51:40:59:45:51:
a8:3c:13:ab:9b:4f:cb:ff:05:19:08:95:cb:3a:16:
96:3a:7b:59:dc:ad:98:75:63:88:b2:4b:7f:9b:b8:
c6:4b:31:b8:83:78:6a:cd:4d:bd:c4:ea:8c:34:62:
6f:e8:af:67:d8:aa:53:4c:b3:74:5a:8f:52:8e:f1:
0e:1a:16:3e:17:74:9e:ff:d7:42:d9:13:e8:70:c2:
57:52:d4:11:60:f3:3f:84:ed:ea:0e:93:a3:36:7a:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:5D:31:FB:0A:15:3C:41:56:A7:45:54:B0:E9:FE:36:37:D8:4A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lFFdMfsKFTxBVqdFVLDp_jY32Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8780::/29
2a0e:a580::/29
Signature Algorithm: sha256WithRSAEncryption
87:fb:07:30:0e:c3:5d:34:2d:58:f6:5c:4b:b6:6b:07:6b:f7:
91:8b:b8:6b:37:5d:85:d2:d4:77:4c:f9:1c:cc:1f:7f:c3:c0:
b6:13:08:9a:bb:aa:67:29:b2:a9:90:b2:a5:ce:29:31:76:8b:
f1:4d:8f:d3:bd:19:3a:e2:2c:4c:9b:c9:b6:81:03:3f:be:be:
5b:10:9f:67:68:6d:f2:e3:16:10:e7:31:26:0c:64:af:fd:c1:
51:1c:1e:7a:0b:c7:2c:0c:2e:f3:0c:e5:af:f8:b7:73:46:3a:
9a:e6:ec:e7:67:80:97:1f:ed:31:24:aa:4f:51:4d:64:88:ce:
d2:91:9c:4f:10:76:d4:86:32:2c:18:a7:cf:45:b0:0b:ec:51:
c6:ed:86:93:c1:33:10:f9:8c:aa:7b:1c:41:fd:25:e8:90:f8:
05:b0:df:e0:5e:ff:97:81:72:54:79:20:08:91:47:0d:42:69:
8b:1f:49:ef:d3:65:40:14:6a:21:f3:65:b5:35:51:1a:d5:8d:
14:11:8e:76:70:44:b8:4c:93:ef:c3:c4:c4:2a:70:19:73:37:
25:67:63:60:4a:e3:1f:e7:97:43:df:e6:e6:0f:ab:90:c4:ed:
0c:e5:9c:37:72:34:d0:b5:98:90:76:88:83:e8:c7:77:59:5d:
62:0e:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:39 2026 by rpki-client