Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa
File: lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa (raw, json)
Hash identifier: wA7yzfQgmx3kHbuFrXJdkVaMKtNXen5NHHeqTyxqclU=
Subject key identifier: 94:F9:2C:5D:61:CD:12:39:3C:28:15:35:AC:DA:8C:48:9E:7F:29:7C
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A112D3640ABD910B4A9EB8BCF4DD820BDC
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa
Signing time: Tue 06 Oct 2026 20:06:45 +0000
ROA not before: Tue 06 Oct 2026 20:06:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 2a14:6782:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:d3:64:0a:bd:91:0b:4a:9e:b8:bc:f4:dd:82:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 6 20:06:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94f92c5d61cd12393c281535acda8c489e7f297c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:d2:4c:22:22:c4:6f:cf:f8:e2:e1:34:3f:
af:34:83:ac:bf:0d:85:f9:df:fc:dc:70:43:3e:76:
d8:9a:0a:67:f6:25:a0:3e:72:35:e1:c5:b6:51:f8:
89:45:dc:b1:fb:7c:39:a0:e2:70:ff:ac:8f:9b:a8:
d5:8e:75:54:5d:f2:bc:a3:8d:55:ba:9e:cb:c7:9c:
e5:04:43:e9:01:14:07:fc:4f:89:aa:f4:46:f6:6c:
e5:fc:5d:45:44:0f:ab:12:66:2f:6e:ea:c6:a7:e9:
00:20:a3:78:7f:1a:6d:52:0e:a4:54:f6:a0:11:3e:
10:c6:78:92:94:5b:50:2a:80:bd:2d:0c:95:8e:7d:
2e:ca:33:ce:09:2c:8a:97:16:b0:3c:fe:8d:ae:2f:
a3:38:08:41:a4:f2:4c:76:23:08:51:c5:c9:7b:d3:
23:b3:07:13:fd:f2:fc:b5:c7:c8:cc:f8:af:91:40:
6c:14:87:32:a0:40:a7:5c:a0:cb:62:a8:5a:23:5f:
d1:96:af:43:07:f9:2a:cb:da:06:eb:a2:79:59:ca:
41:ec:83:8c:15:fc:a3:11:3a:be:d7:b9:86:84:71:
e4:85:4d:a0:85:7b:48:b0:e9:77:98:81:d8:96:43:
ce:37:c7:7a:1e:4a:b9:02:f9:10:a0:3a:dd:38:af:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F9:2C:5D:61:CD:12:39:3C:28:15:35:AC:DA:8C:48:9E:7F:29:7C
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:6::/48
Signature Algorithm: sha256WithRSAEncryption
35:7c:8d:3c:a7:d0:1a:da:1e:28:92:dc:b7:68:e2:b8:c1:9d:
8e:6b:1b:8d:83:46:6e:00:75:ef:54:cc:e0:db:1b:b4:42:39:
05:ba:09:d9:9f:cd:23:43:b5:bf:ec:a8:5a:3f:8c:aa:0d:0c:
4b:46:51:61:d0:65:5a:fd:6f:d0:c4:e2:0b:b6:bb:81:60:5f:
7d:2e:49:65:a6:7f:2a:77:2c:69:6d:d4:9f:54:62:7d:9e:56:
03:ec:f0:c0:86:89:b9:c8:df:b2:4b:cd:4c:51:15:26:78:f1:
fd:7a:40:74:ed:cc:e7:38:a3:ec:1e:52:89:3b:0f:fd:18:8c:
23:b2:19:15:49:b2:d8:aa:8c:57:aa:7f:4a:c1:c6:07:9d:9b:
f5:d5:e0:04:ad:51:8a:2b:0e:7a:80:d5:ee:0a:76:68:6c:6d:
d8:c2:af:d0:01:77:d4:d2:f5:c3:aa:70:95:25:54:57:44:fd:
fc:62:7f:9e:33:44:a0:f5:3f:36:d0:f0:6b:73:c8:20:dc:e3:
84:c4:0a:8c:c9:34:1e:cf:ff:8b:c6:44:8a:09:8f:e0:ed:42:
2b:16:d3:60:a7:fb:10:74:16:20:e3:61:f6:96:99:3c:ca:65:
2f:94:d7:9c:f7:ad:47:30:26:23:1d:ba:db:1a:7a:ec:a4:17:
fc:3f:b9:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaES02QKvZELSp64vPTdggvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYxMDA2MjAwNjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY5MmM1ZDYxY2QxMjM5M2MyODE1MzVhY2RhOGM0ODllN2YyOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodPSTCIixG/P+OLhND+vNIOsvw2F
+d/83HBDPnbYmgpn9iWgPnI14cW2UfiJRdyx+3w5oOJw/6yPm6jVjnVUXfK8o41V
up7Lx5zlBEPpARQH/E+JqvRG9mzl/F1FRA+rEmYvburGp+kAIKN4fxptUg6kVPag
ET4QxniSlFtQKoC9LQyVjn0uyjPOCSyKlxawPP6Nri+jOAhBpPJMdiMIUcXJe9Mj
swcT/fL8tcfIzPivkUBsFIcyoECnXKDLYqhaI1/Rlq9DB/kqy9oG66J5WcpB7IOM
FfyjETq+17mGhHHkhU2ghXtIsOl3mIHYlkPON8d6Hkq5AvkQoDrdOK+JgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJT5LF1hzRI5PCgVNazajEiefyl8MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvbFBrc1hXSE5Fams4S0JVMXJOcU1TSjVfS1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnggAG
MA0GCSqGSIb3DQEBCwUAA4IBAQA1fI08p9Aa2h4okty3aOK4wZ2OaxuNg0ZuAHXv
VMzg2xu0QjkFugnZn80jQ7W/7KhaP4yqDQxLRlFh0GVa/W/QxOILtruBYF99Lkll
pn8qdyxpbdSfVGJ9nlYD7PDAhom5yN+yS81MURUmePH9ekB07cznOKPsHlKJOw/9
GIwjshkVSbLYqoxXqn9KwcYHnZv11eAErVGKKw56gNXuCnZobG3Ywq/QAXfU0vXD
qnCVJVRXRP38Yn+eM0Sg9T820PBrc8gg3OOExAqMyTQez/+LxkSKCY/g7UIrFtNg
p/sQdBYg42H2lpk8ymUvlNec961HMCYjHbrbGnrspBf8P7mj
-----END CERTIFICATE-----
Generated at Sun Oct 18 18:29:06 2026 by rpki-client