Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LcBf14oQaoT8DndumatNs_5Aci0.roa
File: LcBf14oQaoT8DndumatNs_5Aci0.roa (raw, json)
Hash identifier: sAKL8EOJqThWYl6iYE58NSLMpISLb9MSsq1Hh766fa8=
Subject key identifier: 2D:C0:5F:D7:8A:10:6A:84:FC:0E:77:6E:99:AB:4D:B3:FE:40:72:2D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F4D8585A1F2A431F61B18808D9B154438
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LcBf14oQaoT8DndumatNs_5Aci0.roa
Signing time: Fri 10 Jul 2026 19:33:43 +0000
ROA not before: Fri 10 Jul 2026 19:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211009
IP address blocks: 2a12:2806::/32 maxlen: 32
2a12:6480::/32 maxlen: 32
2a12:6481::/32 maxlen: 32
2a12:6486::/32 maxlen: 32
2a12:bc82::/32 maxlen: 32
2a12:bc85::/32 maxlen: 32
2a12:cf84::/32 maxlen: 32
2a12:d807::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:85:85:a1:f2:a4:31:f6:1b:18:80:8d:9b:15:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 10 19:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dc05fd78a106a84fc0e776e99ab4db3fe40722d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:ec:a1:22:a3:a2:39:a4:ca:2f:24:a0:5a:
f3:e9:f1:be:ee:c0:b0:c1:c0:a6:fe:65:47:a5:a7:
91:62:74:79:a9:a1:3f:47:bb:f4:4c:e5:76:a5:c7:
8f:9e:10:a9:a1:fa:52:64:33:d0:b3:e4:60:b5:16:
eb:95:32:5c:7a:53:b7:f7:c6:84:a0:c1:1d:fe:70:
99:38:70:b3:4e:48:e5:dc:1f:a3:af:4d:0e:65:14:
4a:a3:a3:49:47:e1:10:be:6b:42:e9:c9:17:bf:4e:
1d:f4:f0:43:5b:50:4e:42:89:c8:6a:b7:9e:d0:75:
c4:36:61:64:9e:b7:18:a2:2f:d5:a9:41:90:ce:4b:
ea:29:f0:9c:26:1c:95:26:e1:d1:bb:07:67:85:5a:
c3:bc:8d:3e:00:66:a2:8d:16:56:11:3d:4d:0f:93:
82:8b:ae:d6:da:bb:c7:8f:ab:90:7d:0e:3f:1d:db:
27:16:68:e8:9c:53:c6:9b:42:88:95:58:29:8f:d5:
31:16:b4:7f:2e:cd:92:a6:4e:c3:9e:ff:15:6e:9c:
c3:8d:6e:9e:e1:9f:a9:81:21:ae:e3:95:b3:7a:63:
29:e5:f6:90:58:38:40:74:d6:72:6e:84:52:60:61:
80:65:2c:c8:ca:e0:aa:e6:7c:45:0d:5f:30:dc:66:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:5F:D7:8A:10:6A:84:FC:0E:77:6E:99:AB:4D:B3:FE:40:72:2D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LcBf14oQaoT8DndumatNs_5Aci0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2806::/32
2a12:6480::/31
2a12:6486::/32
2a12:bc82::/32
2a12:bc85::/32
2a12:cf84::/32
2a12:d807::/32
Signature Algorithm: sha256WithRSAEncryption
25:a4:f8:52:04:61:28:d8:30:67:2b:83:29:01:2a:c7:6a:f6:
4d:d8:31:2e:95:45:de:c7:9f:34:20:7b:b8:42:19:37:16:7d:
bb:d6:f1:1d:04:e5:84:12:5b:62:8c:05:07:e1:31:00:77:88:
29:95:95:a9:2e:64:0b:7a:f9:fa:10:77:70:a7:ca:01:7b:2e:
93:2c:16:8f:00:dd:f4:af:34:5c:79:54:78:35:d0:99:d3:14:
d1:ee:1f:50:1d:56:e9:a1:8a:29:2a:c4:96:75:25:50:30:55:
1d:8b:ca:e6:37:3f:02:d4:cb:81:16:f7:e0:46:51:ca:01:fc:
e3:d2:43:f8:e1:fc:de:72:c4:85:90:7d:0a:fc:d4:16:1e:03:
1a:f0:25:ff:9f:b7:a7:a2:77:b6:93:95:20:c4:01:28:09:ca:
03:a6:38:66:8a:fb:5a:be:51:61:f1:51:c2:91:cb:3f:e6:c7:
32:58:f5:2c:50:af:85:6c:7b:00:57:5a:99:5f:b6:04:1f:7c:
6f:c0:ca:f7:25:17:fa:37:98:22:cb:fa:fe:c6:5b:88:e0:cf:
6d:02:a7:15:b7:c9:a7:1c:a7:dc:a9:49:eb:a7:1a:d2:de:75:
01:9a:f0:88:46:f4:84:89:5a:14:0a:b0:a1:ff:9a:fe:5a:77:
20:19:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:25 2026 by rpki-client