Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LYcuob5nBFbh7n613P7zBmvuRi8.roa
File: LYcuob5nBFbh7n613P7zBmvuRi8.roa (raw, json)
Hash identifier: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=
Subject key identifier: 2D:87:2E:A1:BE:67:04:56:E1:EE:7E:B5:DC:FE:F3:06:6B:EE:46:2F
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F236853DA3CF271116AF1BD74833F8889
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LYcuob5nBFbh7n613P7zBmvuRi8.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206754
IP address blocks: 2a04:5d00:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:53:da:3c:f2:71:11:6a:f1:bd:74:83:3f:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d872ea1be670456e1ee7eb5dcfef3066bee462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:73:b0:63:53:bb:6b:d7:1d:a3:51:8e:f6:
ad:ce:4d:bc:73:7b:ab:15:1e:be:ff:9e:54:d0:92:
30:89:0c:4c:d3:d0:e8:d7:85:20:73:4a:f9:f7:a1:
fc:7e:ad:fa:7c:32:fb:4b:63:43:37:4a:ad:f7:a1:
04:f9:15:3f:b0:55:bf:24:37:fa:66:3a:d5:13:33:
0d:4a:a3:4f:9e:7b:7d:93:0d:6d:73:11:a2:37:fb:
47:af:09:3b:e6:24:c7:99:70:04:8f:5a:53:c6:34:
6c:a0:c4:1a:20:0e:e0:2b:e6:5a:c8:ef:64:60:b7:
a5:dd:75:f9:1e:7c:98:0a:9b:69:ee:1e:0a:a1:fc:
aa:ec:d9:bc:f6:1a:0c:1d:db:6d:80:ae:a4:86:36:
28:42:fe:91:cd:df:ae:a6:83:58:09:32:6f:f2:83:
05:b5:ca:ab:72:3d:f3:3e:df:10:a8:ce:ac:23:e9:
9e:13:d1:05:d2:1b:b4:e4:76:49:af:eb:fa:0d:7e:
08:1e:3d:e5:18:d0:3b:ee:a8:32:f1:7e:0d:7f:3e:
ca:48:b8:17:bc:69:2a:a2:36:62:be:71:a8:e7:07:
22:88:cf:8d:dd:e7:cc:00:3d:8d:77:03:79:cb:7d:
30:64:85:92:2c:3c:b1:99:43:15:bb:6a:b3:fe:73:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:87:2E:A1:BE:67:04:56:E1:EE:7E:B5:DC:FE:F3:06:6B:EE:46:2F
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LYcuob5nBFbh7n613P7zBmvuRi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
0e:96:be:35:92:e4:e6:82:b6:01:85:c9:c1:f0:71:b0:c3:38:
4b:82:e4:ce:69:bd:fc:79:42:83:c1:9e:51:6b:cf:55:31:29:
df:32:16:6e:d5:f3:97:f5:4a:1b:dc:6a:e7:7e:15:53:79:95:
a5:06:4b:f9:76:87:9f:73:b6:ff:3c:59:03:6d:9b:d5:46:77:
d9:43:6d:a7:75:af:8c:59:d6:26:9a:2a:e0:f1:56:42:42:1a:
1f:2d:2b:fe:67:14:a5:fc:d1:35:b2:30:84:36:7e:10:2b:f9:
c6:84:71:fd:a5:e4:f3:dd:68:1c:0b:b4:76:9a:76:ab:47:ee:
3c:95:74:41:2d:50:3d:32:fb:e6:d4:e8:ad:ad:ac:5c:e0:a6:
e1:5c:7e:49:4e:29:80:96:ea:55:9f:ae:b5:ae:d9:23:1b:d9:
13:d3:0f:67:1f:62:e9:b1:80:c9:cb:a5:9c:bb:c5:11:32:f1:
0a:31:e8:e7:97:c4:eb:53:72:f1:73:0b:c7:6b:b8:80:f6:b0:
27:1f:4b:4d:4c:10:61:63:6e:80:84:52:48:1b:ff:d9:cc:c7:
46:67:3f:d4:43:1c:92:1a:39:0b:24:ef:1e:e4:10:0e:27:aa:
73:7a:f5:a7:06:a6:60:20:83:c5:ce:71:40:c3:39:31:b7:2a:
ef:dd:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:28 2026 by rpki-client