Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/h-LEeBovo9_xTnvgTCMjoI-XRoA.roa
File: h-LEeBovo9_xTnvgTCMjoI-XRoA.roa (raw, json)
Hash identifier: 0hEHKnX2me30T9rIQYzwV67j/t0e3ske2o+krCmE5io=
Subject key identifier: 87:E2:C4:78:1A:2F:A3:DF:F1:4E:7B:E0:4C:23:23:A0:8F:97:46:80
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A0F7CAD141AF1ABBCEE7F1F6D4AE55549E
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/h-LEeBovo9_xTnvgTCMjoI-XRoA.roa
Signing time: Thu 01 Oct 2026 14:07:38 +0000
ROA not before: Thu 01 Oct 2026 14:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218994
IP address blocks: 2a11:1fc0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:ca:d1:41:af:1a:bb:ce:e7:f1:f6:d4:ae:55:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Oct 1 14:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87e2c4781a2fa3dff14e7be04c2323a08f974680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:ac:61:78:b4:bb:9f:2d:98:cf:18:b1:ec:
f0:0b:28:dd:20:f7:bb:be:6c:48:da:5c:b3:9f:66:
97:8b:ca:3e:e7:0b:8d:70:9a:42:9d:2a:94:5b:8c:
1d:13:d2:60:6e:dc:31:fb:70:19:c2:1e:a6:4c:da:
1d:1c:ab:1f:fb:e7:73:65:1a:68:09:d7:8a:e4:51:
da:20:9f:fd:ab:3b:cb:5c:e0:3f:d2:08:a9:f4:4b:
e4:b7:3b:14:bb:23:03:8b:b6:d0:e4:f3:26:8d:76:
29:8e:62:16:97:ce:3f:2a:0a:c9:85:42:bf:37:13:
fd:aa:89:0e:b2:3d:85:9e:2f:a0:12:8f:5e:15:14:
a8:f5:55:8b:a9:c4:ba:c6:0a:14:28:18:e2:c1:01:
28:75:08:6d:3f:46:c4:28:2e:d8:14:11:88:0f:16:
72:f7:18:da:93:41:d6:90:6f:82:cb:31:b7:8e:a4:
9d:f4:74:31:e5:cf:e6:d7:97:41:db:90:65:bb:12:
e8:c7:d7:2a:65:11:16:83:81:cd:05:72:03:63:a4:
4c:34:ee:c2:82:5a:10:e8:01:a4:ab:1a:aa:06:ae:
58:59:a1:0f:aa:48:32:64:6b:1e:2f:e5:f6:f0:b9:
73:d0:e9:ec:17:21:73:cb:91:de:e1:29:ba:c5:8b:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:C4:78:1A:2F:A3:DF:F1:4E:7B:E0:4C:23:23:A0:8F:97:46:80
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/h-LEeBovo9_xTnvgTCMjoI-XRoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc0:13::/48
Signature Algorithm: sha256WithRSAEncryption
55:8b:97:3e:31:ae:13:40:e8:62:ec:da:5a:a0:ce:fd:82:f5:
88:73:83:e5:3c:83:82:40:02:44:44:ed:f8:68:bb:cc:e1:53:
23:c0:04:1a:e0:bb:6e:94:16:31:f9:77:fb:05:13:e9:e7:4c:
37:e7:bf:e1:e2:a7:be:d9:a0:ff:bd:82:2f:73:66:f8:b0:24:
2e:ba:29:8b:37:a4:b5:30:b6:c9:55:9d:06:d9:35:f2:a3:f6:
d4:e2:05:9a:60:09:a4:76:36:94:1e:31:d1:e2:5e:d1:77:8f:
f1:95:1a:3c:6c:72:1f:4d:79:ec:23:ed:7c:5b:70:e2:82:11:
3d:62:a3:3e:ed:05:32:e4:09:d7:91:a9:33:d2:ab:ab:30:4c:
06:5f:9d:b1:5c:20:1a:39:00:67:aa:34:5a:26:15:d0:69:13:
d2:f4:8a:dd:3f:f0:40:c8:6f:d1:6d:1b:dd:7d:4b:74:bb:d4:
c0:ca:8e:fc:1f:d8:ec:e0:88:ae:24:73:65:5f:c6:d5:fc:94:
b1:2a:b6:82:a8:f1:dc:d4:50:71:99:b9:b3:bb:c0:de:ab:31:
80:1d:ef:71:a0:f7:c5:4c:56:0c:f1:58:c5:47:b4:f6:1e:52:
a0:bd:46:21:e6:9e:03:eb:76:cf:f2:c0:26:c7:72:51:d8:a8:
e2:81:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:34 2026 by rpki-client