Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/LsTr7Vivk39ZgCbG387swerRK6c.roa
File: LsTr7Vivk39ZgCbG387swerRK6c.roa (raw, json)
Hash identifier: qnydcWksp1kG77yb//mZBlPJ1UQa9L4iT4xclFDE6nk=
Subject key identifier: 2E:C4:EB:ED:58:AF:93:7F:59:80:26:C6:DF:CE:EC:C1:EA:D1:2B:A7
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C308D191B7F02240AD06D9D84473A
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/LsTr7Vivk39ZgCbG387swerRK6c.roa
Signing time: Thu 02 Jul 2026 11:17:20 +0000
ROA not before: Thu 02 Jul 2026 11:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9312
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:30:8d:19:1b:7f:02:24:0a:d0:6d:9d:84:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec4ebed58af937f598026c6dfceecc1ead12ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:5c:35:7a:3e:e2:81:c6:32:6e:1b:ca:ea:
db:1c:e6:f8:41:46:a1:67:e6:34:c1:55:01:0e:ef:
06:ba:e3:4b:f9:80:59:90:5c:6d:bf:b7:3f:32:b5:
7e:45:89:02:58:27:c6:81:9c:e7:bb:93:b4:1f:ae:
64:d0:4f:73:93:16:9d:30:15:bb:4d:7b:95:9c:2d:
29:5a:96:24:9b:51:6a:d3:26:ad:58:63:bb:f6:eb:
3e:da:f7:47:62:29:ab:db:67:03:3f:5e:98:fb:1b:
01:86:14:de:1c:d4:00:47:25:66:6c:a4:21:d4:9a:
17:98:a7:12:e6:c7:b4:f8:cf:d5:cc:b4:43:2f:01:
70:6e:98:36:51:48:31:d8:58:3f:88:8a:d2:19:d0:
65:c6:a1:3a:b1:a7:89:cf:68:9e:e3:1e:a0:16:1c:
bc:c7:29:a5:fa:32:91:c5:d1:51:5b:c0:37:26:9e:
49:60:cc:72:21:11:7a:1b:b7:ef:c8:e8:58:61:f9:
f6:44:2a:16:0a:df:90:46:56:e6:38:c7:fc:19:4e:
10:dd:85:82:f5:b0:a7:a2:58:49:e5:c7:17:19:91:
8d:90:ae:29:82:61:04:28:f3:a3:bc:80:e2:dc:e4:
17:ba:e1:d5:86:6d:69:a9:3f:1b:a8:05:38:a2:e2:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:EB:ED:58:AF:93:7F:59:80:26:C6:DF:CE:EC:C1:EA:D1:2B:A7
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/LsTr7Vivk39ZgCbG387swerRK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e0:38:18:3f:43:6e:ea:bf:50:7d:ef:1e:36:f2:c4:86:14:
96:d4:b7:10:f7:e2:45:08:4d:c6:ab:ad:0c:52:1f:72:c8:d4:
b7:5d:40:f2:cf:b4:40:8b:b0:ce:19:01:b4:67:47:95:05:90:
8c:72:92:9e:8d:74:01:80:f8:68:a2:72:21:70:81:a3:8b:98:
96:c9:f9:90:87:e7:26:bc:8f:e5:c1:82:2e:22:b0:10:97:58:
ca:df:60:34:9a:e4:f3:51:a0:54:1a:18:92:16:70:a7:d3:c8:
2f:a4:24:08:72:bf:c1:6f:8c:ee:71:0f:00:a2:c2:db:c2:5a:
04:d6:18:fc:a1:4c:0f:b1:97:35:1b:a6:b4:7d:0c:ff:a3:c8:
8e:96:54:e3:a6:1f:49:6a:16:5c:86:a4:5b:d1:ce:28:3f:28:
fb:0c:21:6a:2c:11:91:3e:6d:cb:26:98:7d:ad:1c:1e:1d:3b:
f2:1e:35:3b:b0:a3:80:00:b7:90:3d:09:98:e8:06:1a:ec:7c:
53:b4:a1:c2:6e:48:db:cc:43:62:4e:fe:3f:af:c0:1f:b7:c0:
9e:86:9a:63:ef:25:b1:a8:a9:ac:0a:c2:0c:a3:1d:6d:24:4b:
99:40:10:0a:0c:ad:2b:95:eb:6e:e6:3c:57:96:27:80:66:9a:
7d:9e:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:25 2026 by rpki-client