Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa
File: ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa (raw, json)
Hash identifier: nVGzjeuQbZBgx3j88p/HXhsvqoQ3LPEn12/DTiOeylY=
Subject key identifier: 21:23:FF:2D:15:22:DC:7F:AA:52:24:4E:29:12:D3:5C:6D:19:09:28
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CC30A24E5A72D32D45069658D5FB
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208529
IP address blocks: 2a0c:e304:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:30:a2:4e:5a:72:d3:2d:45:06:96:58:d5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2123ff2d1522dc7faa52244e2912d35c6d190928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:ea:36:c0:95:21:7b:cf:58:94:99:42:8b:
a7:bc:04:09:21:7d:c7:01:2a:55:a9:02:c4:0a:11:
f9:73:4c:c8:31:02:5f:88:c9:a6:fd:21:c5:40:8c:
cd:ad:50:7b:31:dd:8c:07:36:d0:20:88:74:9f:e2:
df:49:d4:4e:7a:83:54:52:df:0f:67:41:cf:21:d7:
cb:90:26:6a:a9:75:e5:c2:dd:85:d5:09:80:93:e2:
14:f1:d1:4b:bb:22:bf:d8:c6:ba:cc:9a:3b:d9:6c:
8e:73:f3:f9:90:ef:5b:db:96:bc:46:1c:12:aa:a0:
f7:1c:d0:a7:fe:a9:e4:49:1f:a1:1a:da:ac:66:55:
f8:d9:7e:5a:0e:aa:67:9a:1e:db:69:0d:a1:8a:07:
fd:ab:78:12:91:ed:40:90:40:4c:3e:e1:78:47:46:
7a:c4:e6:88:f4:ed:58:69:d7:31:29:8f:0e:0b:eb:
fe:51:be:84:6b:16:37:7f:a1:12:45:67:84:5e:1f:
ca:91:b6:3d:c9:8b:49:7d:76:53:cb:ec:58:e8:a1:
92:f0:ca:c7:6c:84:10:96:b2:09:fc:24:35:95:0f:
09:6a:e8:65:b7:7f:e3:c9:e7:68:a3:b8:4c:35:37:
4d:53:eb:b9:1f:8b:92:48:8c:90:34:34:8c:1b:05:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:FF:2D:15:22:DC:7F:AA:52:24:4E:29:12:D3:5C:6D:19:09:28
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ISP_LRUi3H-qUiROKRLTXG0ZCSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e304:1::/48
Signature Algorithm: sha256WithRSAEncryption
1f:73:e5:f8:a8:4d:6f:13:a9:ea:0f:a3:f7:d4:97:58:1d:88:
3b:72:04:fb:d8:8f:6e:2d:98:04:99:00:ca:38:d5:3b:3f:b2:
5d:92:0b:ef:bb:f0:7b:17:c6:c6:f4:80:64:8a:9e:19:f4:29:
bf:1a:e6:da:f9:a9:51:48:6b:ad:a7:31:41:b3:88:32:f1:b1:
9b:21:07:81:e8:bf:ca:dc:39:83:c5:27:ac:9a:d1:16:9e:88:
35:45:4c:5e:4d:fa:f9:e5:4a:c1:ba:e0:ef:31:a9:a0:3e:7d:
7a:23:fd:95:4a:06:b9:88:8d:b4:6b:54:79:18:b8:3e:18:37:
06:97:33:f1:9d:8d:1c:ac:b7:d2:e3:0c:12:e8:e1:ab:db:4a:
42:4d:8b:b2:93:24:d0:42:89:dc:87:7c:d0:61:30:a4:98:16:
db:2b:10:f6:3e:41:50:43:c3:18:a2:da:ca:72:56:26:8e:75:
69:d1:1a:0e:7f:e4:7d:24:f3:99:00:57:f2:0d:db:5c:b8:1c:
dc:34:e8:2e:32:94:60:a7:ff:b1:03:7b:d0:75:f5:44:61:f7:
41:11:f7:36:50:85:da:a0:81:17:3e:cd:d2:05:3e:4c:1e:59:
24:2f:53:67:de:b1:05:1d:5f:bc:40:01:7c:a0:7b:8a:ff:6b:
03:98:39:05
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaMwwok5actMtRQaWWNX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Y2VmNmMxYzJkNGQ1ZDdlMjZlYTU5MzRjZTE4M2IyOThm
MjliZmMwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTIzZmYyZDE1MjJkYzdmYWE1MjI0NGUyOTEyZDM1YzZkMTkwOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEjqNsCVIXvPWJSZQounvAQJIX3H
ASpVqQLEChH5c0zIMQJfiMmm/SHFQIzNrVB7Md2MBzbQIIh0n+LfSdROeoNUUt8P
Z0HPIdfLkCZqqXXlwt2F1QmAk+IU8dFLuyK/2Ma6zJo72WyOc/P5kO9b25a8RhwS
qqD3HNCn/qnkSR+hGtqsZlX42X5aDqpnmh7baQ2higf9q3gSke1AkEBMPuF4R0Z6
xOaI9O1YadcxKY8OC+v+Ub6EaxY3f6ESRWeEXh/KkbY9yYtJfXZTy+xY6KGS8MrH
bIQQlrIJ/CQ1lQ8Jauhlt3/jyedoo7hMNTdNU+u5H4uSSIyQNDSMGwWOcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCEj/y0VItx/qlIkTikS01xtGQkoMB8GA1UdIwQY
MBaAFFnO9sHC1NXX4m6lk0zhg7KY8pv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvSVNQX0xSVWkzSC1xVWlST0tSTFRYRzBaQ1NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgzjBAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQAfc+X4qE1vE6nqD6P31JdYHYg7cgT72I9uLZgE
mQDKONU7P7Jdkgvvu/B7F8bG9IBkip4Z9Cm/Guba+alRSGutpzFBs4gy8bGbIQeB
6L/K3DmDxSesmtEWnog1RUxeTfr55UrBuuDvMamgPn16I/2VSga5iI20a1R5GLg+
GDcGlzPxnY0crLfS4wwS6OGr20pCTYuykyTQQonch3zQYTCkmBbbKxD2PkFQQ8MY
otrKclYmjnVp0RoOf+R9JPOZAFfyDdtcuBzcNOguMpRgp/+xA3vQdfVEYfdBEfc2
UIXaoIEXPs3SBT5MHlkkL1Nn3rEFHV+8QAF8oHuK/2sDmDkF
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:38 2026 by rpki-client