Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L-9C2ZEjQjqVW-LvByRSaBMDXck.roa
File: L-9C2ZEjQjqVW-LvByRSaBMDXck.roa (raw, json)
Hash identifier: 1pLtuIg0amAVCcrVzTDLILQJhzu4jiuuUjGjNUM1yn0=
Subject key identifier: 2F:EF:42:D9:91:23:42:3A:95:5B:E2:EF:07:24:52:68:13:03:5D:C9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E5A3D5BD88B740693DE79988F8280282
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L-9C2ZEjQjqVW-LvByRSaBMDXck.roa
Signing time: Mon 28 Sep 2026 01:31:54 +0000
ROA not before: Mon 28 Sep 2026 01:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214838
IP address blocks: 200.102.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:a3:d5:bd:88:b7:40:69:3d:e7:99:88:f8:28:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 28 01:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fef42d99123423a955be2ef0724526813035dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:2c:56:6a:7e:21:12:60:7d:af:f7:05:5e:
6e:d7:8f:fb:80:2a:fc:3d:f2:e5:f9:d2:45:ac:46:
46:cc:af:87:c5:e4:3d:49:d7:3d:4f:1a:df:58:54:
28:8a:f3:46:26:a8:7f:2a:45:69:65:5c:dc:e9:dc:
d6:e3:cc:6f:a2:8a:24:c6:c3:d0:96:91:ae:36:22:
0c:36:7e:1c:28:19:4d:bc:2a:bd:01:34:98:37:9c:
67:9e:92:bb:fa:80:e9:a4:0f:ce:22:07:b4:ff:be:
3f:ad:dc:13:d6:90:7a:1c:0d:71:52:a9:95:0c:d7:
86:73:32:d8:cc:e9:d2:b5:37:f4:b7:22:36:7e:3c:
f5:07:7d:69:e7:97:db:be:3e:4f:09:bb:21:aa:1b:
e0:8e:de:eb:55:ad:9f:fd:9d:4f:73:6b:d2:dd:1c:
d6:06:c3:20:81:be:ce:13:a9:34:e0:7c:1c:bb:10:
4e:14:83:36:d9:e5:c3:2f:f7:c9:00:95:2c:ec:43:
75:98:98:1d:9a:e5:63:42:26:56:14:58:7c:c5:54:
9d:c0:e1:16:34:1e:36:ac:0f:41:4d:71:1b:3a:d2:
00:0c:2d:67:e0:90:a8:39:c3:a2:ab:1a:d3:65:ac:
1e:1d:0d:d0:b0:e0:91:b8:76:b8:ed:d7:1b:83:0c:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:42:D9:91:23:42:3A:95:5B:E2:EF:07:24:52:68:13:03:5D:C9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L-9C2ZEjQjqVW-LvByRSaBMDXck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.93.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:33:1c:d3:21:7a:85:08:26:37:e7:ce:34:bc:a1:ad:c6:3d:
0a:71:e7:4d:ad:f4:f5:54:05:5d:be:37:79:51:13:0e:b4:e4:
af:8a:86:26:b9:bb:49:f1:be:ee:ef:a3:48:9a:aa:84:6b:e2:
ec:64:a1:b6:f3:b4:ec:31:22:bb:64:14:f2:4e:c1:16:e5:6d:
67:29:17:9a:d3:3d:28:b4:f7:1c:ed:4b:89:88:54:61:46:74:
19:b1:a9:73:87:6f:32:5c:5e:1b:f0:d3:1c:dc:8a:65:95:92:
5c:93:06:05:dc:00:b5:f3:0d:f3:b8:6b:a8:78:11:ff:34:c1:
76:94:e3:6f:75:33:05:3c:d0:6a:1b:6d:9c:71:8d:50:55:a2:
7f:cb:ce:8b:3b:fe:05:48:80:fc:1f:cb:f3:a9:c8:39:fe:0d:
26:5f:ab:95:18:5f:e2:42:41:2f:9e:95:11:e8:f4:5f:43:21:
42:a6:c3:0e:0f:bc:83:15:9f:aa:74:a8:23:2c:d6:7b:42:bf:
0c:77:20:72:42:89:8c:75:02:af:64:a0:3d:0f:93:6a:b9:9b:
5c:1a:b8:8d:de:ea:7d:db:05:3d:1d:bd:25:5c:27:cd:7f:3e:
d1:29:31:be:76:c8:bd:75:28:5e:c2:0b:7e:57:e9:07:18:ab:
b8:e2:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:03:34 2026 by rpki-client