Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LO0LIOhQkg16rs-BY4SOcXjtysk.roa
File: LO0LIOhQkg16rs-BY4SOcXjtysk.roa (raw, json)
Hash identifier: 4c5etSCpuob1tM8YqusSIerf9kYXVXZV27RQriwvRTs=
Subject key identifier: 2C:ED:0B:20:E8:50:92:0D:7A:AE:CF:81:63:84:8E:71:78:ED:CA:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C8010FC28B25BF988E02552FF2135ACA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LO0LIOhQkg16rs-BY4SOcXjtysk.roa
Signing time: Tue 22 Sep 2026 07:25:07 +0000
ROA not before: Tue 22 Sep 2026 07:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0f:31c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:01:0f:c2:8b:25:bf:98:8e:02:55:2f:f2:13:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 07:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ced0b20e850920d7aaecf8163848e7178edcac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:51:58:a1:bf:75:c4:f4:67:94:39:f1:ec:
21:99:64:ab:71:e1:db:ee:69:65:d7:39:d3:4f:ff:
87:6d:41:ec:a1:4f:d2:6d:ea:d9:df:08:14:e0:66:
ae:67:4e:41:d2:88:c0:f5:3e:71:8b:e2:fa:2c:b1:
f4:6c:81:86:72:3a:8f:da:20:d4:30:0a:5e:49:98:
b0:af:2e:78:9e:50:2c:f6:e5:97:02:68:7c:10:b7:
6f:a5:0f:68:29:45:63:a4:27:bc:49:ab:e5:90:ba:
f5:d0:23:b3:09:82:0c:6e:8b:13:b4:e5:27:59:95:
99:b4:09:09:37:e6:06:75:0e:8b:e2:b8:28:eb:04:
c2:26:3a:6a:f4:a9:6d:69:d8:a1:11:af:04:f3:1c:
0d:11:d4:dd:9a:d1:b9:51:8f:ea:56:4c:7d:07:b8:
4d:07:80:a9:99:5c:f9:f2:52:87:3c:32:d8:80:40:
1f:04:59:d6:fa:3a:99:c1:ea:0a:7e:d0:72:62:ed:
48:c8:f1:21:b6:49:8f:35:b8:c5:dd:25:f7:66:b8:
00:38:e1:14:dd:5a:1c:a7:91:ce:38:b2:ed:23:dc:
b8:e2:9f:e6:fb:b4:ac:6e:d3:b6:92:e4:65:b5:7e:
3f:27:22:c4:8d:6d:fb:b1:f1:22:09:cb:08:d4:e3:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:0B:20:E8:50:92:0D:7A:AE:CF:81:63:84:8E:71:78:ED:CA:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LO0LIOhQkg16rs-BY4SOcXjtysk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:31c5::/32
Signature Algorithm: sha256WithRSAEncryption
b9:fe:47:b7:97:b7:6e:ec:c1:17:09:b3:b7:74:b9:26:61:7b:
12:35:9d:0c:b3:0d:00:66:e2:6b:31:d6:9a:e1:6d:7d:dc:ce:
98:30:89:2e:db:68:8d:e2:98:dc:c0:c6:99:47:d4:a6:40:24:
54:b1:1f:d5:11:9d:83:e5:21:73:a3:c3:a2:11:a0:23:e0:ad:
e8:79:f4:9e:0f:c8:84:97:18:97:87:5d:97:b3:37:f3:c0:cf:
ee:aa:44:c6:a7:d2:32:60:75:9b:ee:5e:1f:15:1a:cf:d5:1a:
2a:28:c4:61:6d:84:4c:c7:da:4c:30:25:3e:86:c4:de:43:bf:
33:73:59:a6:8b:e2:cf:32:19:89:96:07:cd:f8:6e:e2:13:58:
43:8a:a4:0a:83:15:f1:4d:f6:4f:cc:ef:85:ee:7b:08:28:5a:
9c:69:cb:6e:44:6d:28:e2:af:9c:07:bb:c7:6f:12:cb:ec:f8:
ba:2a:45:b1:48:08:0d:e1:14:b1:19:91:1d:65:2b:14:2a:12:
dc:03:9d:fc:ee:c9:90:33:e5:c5:09:18:14:b0:15:3f:4d:b9:
d3:4f:d8:c3:44:c9:ef:91:5e:87:19:b5:75:6d:75:b4:d5:d1:
5a:c1:5d:3e:49:dd:f2:84:d8:11:d7:ad:81:00:ef:6b:ca:47:
d6:0c:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:45:36 2026 by rpki-client