Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L8K-oCWMXYNNFl2Gtl0axuvyV6o.roa
File: L8K-oCWMXYNNFl2Gtl0axuvyV6o.roa (raw, json)
Hash identifier: MVJp1QeOAa+1WyB2b4sfhybug5Q9aKD/B3oGjiQhkd0=
Subject key identifier: 2F:C2:BE:A0:25:8C:5D:83:4D:16:5D:86:B6:5D:1A:C6:EB:F2:57:AA
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 019FFB76B198A557C4A75F6F62140A7E6634
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L8K-oCWMXYNNFl2Gtl0axuvyV6o.roa
Signing time: Thu 13 Aug 2026 14:11:27 +0000
ROA not before: Thu 13 Aug 2026 14:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212250
IP address blocks: 2a0b:1880::/29 maxlen: 64
2a0b:1880:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:76:b1:98:a5:57:c4:a7:5f:6f:62:14:0a:7e:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Aug 13 14:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fc2bea0258c5d834d165d86b65d1ac6ebf257aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:69:6c:0b:f1:44:dd:c4:2e:48:eb:07:46:
a8:4d:37:99:c8:d3:b6:57:a5:a9:c4:19:6c:70:3f:
d1:cd:68:8a:9a:80:27:aa:8a:7f:5b:47:38:a1:56:
04:1c:0a:73:4d:c9:13:ef:02:bc:b6:c2:75:8c:0a:
0d:f6:36:c3:2f:73:3b:23:f1:74:50:d3:b5:70:e9:
cd:08:5e:a3:bd:f9:d6:d1:7c:d4:41:24:3c:df:4d:
80:d1:51:d9:01:03:25:84:89:0e:c0:ea:d4:42:f5:
b8:e9:66:0a:8a:52:f2:d1:7b:32:a6:d2:45:93:7d:
86:d4:02:8a:ff:d9:1a:8e:7b:29:d3:12:a0:23:88:
98:60:31:23:eb:30:10:a7:ac:a2:b2:ca:bc:b1:47:
1d:c2:03:95:9f:dd:93:42:d2:17:77:ad:cd:10:b8:
d9:be:99:8c:ce:48:62:1c:60:ed:7c:ad:75:e1:61:
f8:20:7f:88:ae:db:56:18:f9:6f:62:a5:93:62:4e:
dd:58:17:b5:e8:b4:17:ba:19:c7:2c:eb:a4:4c:81:
dd:a2:63:42:ac:20:83:39:3c:7f:d1:11:f0:75:26:
ce:ba:5a:cc:21:d2:97:73:71:d1:a9:0a:0e:a7:d3:
9d:de:63:4a:fa:0c:55:5e:52:b0:11:37:5a:a9:38:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:BE:A0:25:8C:5D:83:4D:16:5D:86:B6:5D:1A:C6:EB:F2:57:AA
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L8K-oCWMXYNNFl2Gtl0axuvyV6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
bb:c7:bd:06:b3:a4:c7:5e:87:36:6a:ba:c6:cb:2e:ee:e2:60:
a3:a1:61:3e:a3:4f:d5:4f:44:ac:c8:d8:1b:8f:5c:f8:03:5a:
af:82:af:5c:70:0a:81:57:a3:29:1d:53:5b:7e:27:41:56:19:
93:81:20:fc:68:cc:13:5f:6f:92:fb:43:bb:33:4f:82:ab:d9:
4c:62:2b:3a:7a:37:b8:2d:da:33:fb:3f:33:0f:1e:ea:80:fc:
a8:7c:f8:cd:58:fc:ae:1a:30:db:0f:4b:09:ce:25:ff:02:91:
a7:46:f2:c8:4a:a6:38:86:34:a8:0b:16:6f:f4:38:ce:c6:19:
85:1f:2f:90:4b:59:38:4e:ab:7b:d3:78:aa:29:72:d3:37:a0:
d6:cd:9b:4f:87:a4:ac:31:34:d3:68:b9:27:b8:6f:be:69:18:
8a:f2:5c:c7:58:94:05:68:e1:c8:4d:0a:cc:e8:9b:6a:ad:b3:
3b:c9:bf:a2:be:a8:f5:41:f5:21:05:ab:b0:f2:2c:bb:bd:17:
e6:ef:0c:70:cd:16:03:25:3a:40:ac:13:ca:14:b3:cd:eb:fe:
fb:ab:19:4f:9c:5d:dc:63:74:99:05:63:f3:b9:3a:f5:07:38:
5d:b1:71:44:3f:7b:90:52:b6:35:ce:4d:fd:1a:72:c6:61:e6:
94:bd:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:41 2026 by rpki-client