Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/liV9T2t0sitiU-8rmzmkW6GgPB8.roa
File: liV9T2t0sitiU-8rmzmkW6GgPB8.roa (raw, json)
Hash identifier: 5eLOn+XdnUGy7qRtI42kJOYoj8JuzxBOiwq9tA9IUvA=
Subject key identifier: 96:25:7D:4F:6B:74:B2:2B:62:53:EF:2B:9B:39:A4:5B:A1:A0:3C:1F
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D6A9B192138876D53731FF04CF53
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/liV9T2t0sitiU-8rmzmkW6GgPB8.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a11:8380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:a9:b1:92:13:88:76:d5:37:31:ff:04:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96257d4f6b74b22b6253ef2b9b39a45ba1a03c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:af:c6:e7:dc:26:cc:73:fa:dc:cb:8d:bf:27:
4d:80:32:de:3f:8a:db:7c:d0:45:da:e8:62:56:0a:
5d:d6:ce:48:27:9e:68:2c:f2:b4:8f:6f:99:a4:fc:
04:63:50:fb:09:9b:51:01:20:0a:28:4c:29:59:a0:
77:1e:63:4f:47:c7:60:ab:1b:ad:eb:ee:9c:c8:b6:
09:cb:e1:61:10:d6:60:10:32:ff:93:06:2e:ef:8f:
c5:ef:9c:25:76:83:6b:35:02:f4:43:e6:9a:dd:b6:
87:c1:84:f3:6f:fc:8a:81:ee:d0:7c:12:d7:3e:b4:
52:15:47:12:56:a9:90:9b:98:f0:6e:dd:d5:e9:6d:
57:92:0c:fc:20:6b:04:8d:54:ed:16:47:24:cc:59:
5b:cf:f1:9b:2d:ca:db:ea:42:01:24:a8:19:12:1e:
6c:e3:39:da:1d:4f:d0:a0:2b:b9:a3:e1:43:ca:e4:
81:1b:cb:80:f7:a9:57:21:0c:ff:a7:39:33:56:05:
66:25:b2:0d:8c:2a:93:c0:37:59:89:45:86:9d:54:
ae:9d:93:fb:90:b3:2c:69:fa:3c:17:ea:c9:f7:76:
62:4d:09:70:6b:70:f4:ef:fd:7d:dc:6a:53:21:ce:
64:c6:cb:29:eb:e0:b7:76:ef:01:0a:37:7c:64:11:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:7D:4F:6B:74:B2:2B:62:53:EF:2B:9B:39:A4:5B:A1:A0:3C:1F
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/liV9T2t0sitiU-8rmzmkW6GgPB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8380::/29
Signature Algorithm: sha256WithRSAEncryption
87:cf:0b:78:ef:c0:5f:ca:d6:dc:9c:23:09:0e:da:18:7c:f2:
8d:28:f2:d4:99:20:0f:c2:5f:64:ab:a4:db:1c:2d:56:0a:c2:
d7:fb:29:87:78:0e:1d:5c:92:2a:9d:cd:4f:8f:08:a6:9f:05:
bd:88:6d:8d:83:7f:fa:60:1f:e7:b9:ef:59:af:2e:fb:c9:65:
b4:ec:b8:3c:bb:87:21:db:8d:e8:ed:c2:73:c2:24:7d:b7:49:
5e:0e:db:cc:95:0c:b8:29:38:0c:9c:2a:aa:50:c0:22:f1:be:
4e:ac:92:fd:8a:6d:2d:38:97:b0:49:cc:d1:9a:bb:70:0e:ec:
1a:d2:f9:7e:6c:81:67:a3:84:70:4f:72:10:f8:7d:48:47:cb:
85:8e:71:a8:5f:33:77:55:5e:fa:12:e7:63:7a:92:fa:4b:2c:
f9:93:93:88:5e:fe:7c:4d:a1:29:c0:30:d6:01:ef:2c:15:26:
51:0e:66:b9:5f:b0:9f:2e:9b:12:50:84:ee:4c:aa:b2:03:10:
f0:78:59:c1:32:28:f5:e7:66:c2:8b:f1:75:56:bf:e7:29:18:
09:75:bb:8b:fd:cf:ee:54:a0:61:9e:08:cb:d3:6b:50:7a:10:
8b:bf:03:2f:0d:b0:f9:bb:73:81:9f:9e:13:20:ae:43:b9:db:
3f:fd:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:28:49 2026 by rpki-client