Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LoBTaz2xLj3CcRkPMHJIxz4AxJU.roa
File: LoBTaz2xLj3CcRkPMHJIxz4AxJU.roa (raw, json)
Hash identifier: p6oSdijMprFiuRt/K82wrFKbXgvsdM586/9svnO7GU4=
Subject key identifier: 2E:80:53:6B:3D:B1:2E:3D:C2:71:19:0F:30:72:48:C7:3E:00:C4:95
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A1933C01EC4004E6E202F3C6844FE0F1CC
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LoBTaz2xLj3CcRkPMHJIxz4AxJU.roa
Signing time: Sat 31 Oct 2026 18:32:25 +0000
ROA not before: Sat 31 Oct 2026 18:32:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 95.81.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:3c:01:ec:40:04:e6:e2:02:f3:c6:84:4f:e0:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 31 18:32:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e80536b3db12e3dc271190f307248c73e00c495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:66:4c:eb:17:6f:d2:d2:fc:24:33:fe:01:
2e:d1:4a:48:2e:d4:19:4e:5f:38:f3:08:f4:8a:db:
2a:c8:28:58:85:02:a8:16:57:3b:66:d9:ae:28:73:
ba:5b:5d:54:0f:3f:2e:39:7f:aa:50:7a:33:93:16:
95:e0:1a:7f:c7:6c:4e:cc:b1:34:91:0b:8d:7d:25:
8a:bd:44:3d:88:fb:a0:a5:67:c9:96:d3:e7:b4:55:
c8:52:02:25:5d:6f:90:e5:c3:e2:95:95:0c:53:f7:
25:a7:55:6d:bb:68:50:a7:ee:f4:3b:a4:25:79:1b:
1d:c0:55:7f:f6:74:05:05:73:b0:4c:32:27:18:56:
51:db:2d:73:ce:de:31:8e:60:49:d6:fd:44:95:0a:
e7:99:85:32:5d:37:02:ab:4a:08:00:ae:63:16:31:
4e:9e:24:27:62:c1:c4:b8:06:43:9a:4c:7b:24:af:
56:de:6c:33:63:46:69:7b:6d:34:75:4c:67:ff:73:
5b:e9:68:08:e1:b4:b0:05:c1:ae:89:a5:9f:eb:e9:
01:83:db:39:04:d7:00:c2:b5:ef:dc:45:b8:81:f5:
bd:32:d6:1f:69:a0:21:24:bf:51:66:84:56:22:6e:
55:0e:67:7b:54:8d:c9:d5:79:9b:38:97:5e:09:ef:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:53:6B:3D:B1:2E:3D:C2:71:19:0F:30:72:48:C7:3E:00:C4:95
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LoBTaz2xLj3CcRkPMHJIxz4AxJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:03:28:3a:9b:7f:fc:54:c0:30:e1:25:b2:61:dc:45:b4:a1:
6d:05:73:bd:a0:c7:2d:2c:b9:55:ea:18:95:aa:72:22:e9:29:
9f:5d:82:a6:b7:dd:42:15:1d:e9:d6:d4:41:8d:bd:25:c8:88:
22:f6:44:0a:20:f8:7a:dd:02:04:79:b4:fb:61:4a:de:f9:57:
a2:cc:d0:4c:50:65:90:d9:59:cf:a2:a0:c2:b6:22:e9:ec:21:
b7:41:a4:33:b0:1e:b1:f4:2b:38:62:9b:65:f2:40:6e:59:ce:
0d:a5:e6:4c:41:7d:2e:e9:e6:04:57:10:df:e8:22:06:4a:47:
37:e3:e1:fe:15:30:ce:83:82:a7:9d:88:c2:f0:bd:dd:65:6f:
46:3a:42:4b:37:95:01:ab:0d:65:0e:29:8b:f1:f5:24:a8:66:
57:2e:fc:72:01:43:b1:65:ce:3a:c7:6e:e2:70:db:97:82:6c:
b7:f1:a0:b7:20:90:48:18:6e:83:c0:5e:96:75:4b:24:2e:a4:
1b:cd:da:e4:e6:5f:7c:21:09:e9:e5:29:f3:26:9b:74:e2:a1:
40:0f:d1:d5:1d:cd:80:d7:f7:20:53:d8:15:cd:d8:a2:ee:77:
86:b0:92:52:55:72:c5:22:0f:d9:ec:65:18:aa:2c:aa:c9:30:
9e:19:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:24 2026 by rpki-client