Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LEGFGuG6Zz1eMqa4kl_SpfKYSVg.roa
File: LEGFGuG6Zz1eMqa4kl_SpfKYSVg.roa (raw, json)
Hash identifier: T4mVjCxTIckd5hNcL2ZKuwQiGvOEGnlmixLrK7QcB/w=
Subject key identifier: 2C:41:85:1A:E1:BA:67:3D:5E:32:A6:B8:92:5F:D2:A5:F2:98:49:58
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F268DEEE2D12AE15F2CB7CD5E6CC8B9B5
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LEGFGuG6Zz1eMqa4kl_SpfKYSVg.roa
Signing time: Fri 03 Jul 2026 05:57:43 +0000
ROA not before: Fri 03 Jul 2026 05:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a10:fa80:5::/48 maxlen: 48
2a10:fa80:6::/48 maxlen: 48
2a10:fa80:2000::/36 maxlen: 36
2a10:fa81:f00::/40 maxlen: 40
2a10:fa81:2943::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:8d:ee:e2:d1:2a:e1:5f:2c:b7:cd:5e:6c:c8:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 3 05:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c41851ae1ba673d5e32a6b8925fd2a5f2984958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:68:94:6d:21:01:78:ca:66:1b:96:38:a1:
ff:39:c3:f3:a7:04:2c:41:72:3e:3f:33:93:b2:9d:
c4:a6:18:f8:cd:3e:e6:dc:67:d9:95:b0:40:00:92:
e8:77:f1:e5:ac:ed:db:b4:61:f3:b8:a6:ee:51:77:
e8:c5:64:a9:0c:29:fa:01:59:59:46:b3:3b:85:fb:
46:f1:44:c8:23:b4:0c:ed:7d:ff:c5:f1:3b:c3:f2:
eb:20:03:4d:60:70:b7:db:9d:1a:36:02:5b:bd:db:
99:07:35:9d:33:5b:96:04:3a:88:86:1c:66:0c:5a:
05:03:16:81:d7:f5:6e:7c:cb:19:21:78:af:d7:ce:
89:72:5f:4d:e4:90:09:65:82:dd:c0:cc:29:d1:fa:
5d:94:d8:6e:9e:57:01:07:58:cd:3d:eb:ed:c0:f0:
a9:ae:e4:1b:7c:2b:92:5b:18:13:ae:db:a4:67:c0:
e6:7b:d2:72:1e:74:56:b0:94:34:98:bb:e2:e3:af:
d2:a2:8d:2f:14:12:5b:65:a8:a9:25:40:57:a0:5a:
27:0e:2d:77:17:38:12:d4:44:62:3e:b5:90:d5:13:
d7:07:db:08:93:86:07:24:4a:a9:62:a9:15:ed:62:
50:10:94:9c:12:62:27:aa:98:6b:3c:03:e6:1a:d2:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:85:1A:E1:BA:67:3D:5E:32:A6:B8:92:5F:D2:A5:F2:98:49:58
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/LEGFGuG6Zz1eMqa4kl_SpfKYSVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5::-2a10:fa80:6:ffff:ffff:ffff:ffff:ffff
2a10:fa80:2000::/36
2a10:fa81:f00::/40
2a10:fa81:2943::/48
Signature Algorithm: sha256WithRSAEncryption
91:46:ce:e9:e1:ac:ee:29:40:6a:fa:80:df:b3:f3:24:c6:ae:
0d:c2:4c:e4:44:41:65:60:69:f8:be:c9:6a:b3:0d:c2:fd:e8:
15:d4:9c:d8:eb:6e:e6:6d:f3:c3:1c:4a:d0:41:0f:86:05:a1:
9f:ec:6c:6f:be:b4:e6:0e:61:6f:e8:9f:5a:6d:f0:ad:9e:25:
66:9d:0e:c5:31:9a:6e:55:b9:b8:06:d8:22:33:09:81:96:00:
81:93:61:99:96:9a:50:dc:46:71:36:83:61:31:35:16:e9:c1:
7a:da:38:85:7d:13:87:b2:ad:36:ce:c7:7c:57:a0:5f:d8:4d:
db:6d:91:46:4c:51:f9:e0:f8:4c:09:ea:9e:cb:81:c7:81:83:
3f:f2:d9:a0:05:9b:53:6f:2b:6b:53:6e:db:1d:cd:93:ce:dd:
73:e8:74:3e:49:af:c7:d0:c1:a7:3c:35:8f:b3:4a:ae:45:ef:
be:34:c7:01:5a:d0:01:68:1b:a6:d0:0f:cb:aa:f5:ad:65:2b:
d7:6b:06:b0:18:36:a6:2e:76:11:07:b3:c2:8c:5c:0a:47:b2:
d7:9c:7a:87:84:cd:4c:c4:8e:84:02:69:cb:27:0f:c7:93:c1:
fa:2a:6d:4f:87:a5:e4:fb:37:69:32:bd:c4:57:3d:4a:43:f8:
1d:b2:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:54 2026 by rpki-client