Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/LHKcw1T_xip-dQxjFBPkIK8lD-g.roa
File: LHKcw1T_xip-dQxjFBPkIK8lD-g.roa (raw, json)
Hash identifier: sNHczNheeTOetPwxKMLP2zssG5kyELZ3Q0OnzJ3Pj7k=
Subject key identifier: 2C:72:9C:C3:54:FF:C6:2A:7E:75:0C:63:14:13:E4:20:AF:25:0F:E8
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 01A11DB4BC97930F358531C72BBED9EEBF48
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/LHKcw1T_xip-dQxjFBPkIK8lD-g.roa
Signing time: Thu 08 Oct 2026 22:49:06 +0000
ROA not before: Thu 08 Oct 2026 22:49:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215715
IP address blocks: 2001:678:135c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:b4:bc:97:93:0f:35:85:31:c7:2b:be:d9:ee:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Oct 8 22:49:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c729cc354ffc62a7e750c631413e420af250fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:97:fb:70:b7:12:2f:0a:3c:83:1e:af:f8:
72:2a:70:01:65:1c:cb:2e:79:1d:ce:0a:6a:cf:1b:
dc:17:08:c0:37:60:45:77:88:9f:e8:e3:b4:05:ec:
52:9d:18:c8:93:35:7c:33:c2:fe:29:1a:e5:1f:dd:
19:bf:fd:4e:e8:5e:f0:68:f7:72:8c:aa:52:09:bb:
bf:85:63:bb:c1:4e:bd:fb:c3:89:c6:c2:cc:1d:9c:
fe:ee:35:97:64:7a:f9:62:d0:a4:fb:bc:2a:7c:30:
57:44:6e:bc:02:17:94:af:c1:7c:a0:9a:89:43:fd:
1d:7f:de:19:60:d4:38:53:1e:e2:0e:06:bf:18:c3:
c6:26:6f:08:13:92:2a:5c:fe:94:a7:1c:a2:95:c8:
12:bb:b8:f0:a7:a2:36:b4:27:8b:95:61:62:12:8b:
eb:91:c2:95:f7:95:5f:5f:bb:ba:72:dc:14:bd:fe:
2c:de:43:b8:8d:e2:00:52:6a:54:28:23:36:86:b3:
b6:8d:4e:28:8c:7f:3c:30:40:ac:22:c7:61:3a:12:
b8:d0:1d:6d:f1:98:c3:93:90:c9:3d:06:4d:dd:14:
32:05:c8:c2:53:40:eb:bb:f3:a5:d7:e0:fc:42:6a:
aa:81:0b:63:0d:06:cb:b1:c7:ea:bb:b0:9d:9c:0a:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:9C:C3:54:FF:C6:2A:7E:75:0C:63:14:13:E4:20:AF:25:0F:E8
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/LHKcw1T_xip-dQxjFBPkIK8lD-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:135c::/48
Signature Algorithm: sha256WithRSAEncryption
6d:80:4b:98:43:b4:d6:09:e6:e8:c4:c9:a3:40:dd:83:32:83:
90:e9:bc:8c:16:de:f6:13:2d:93:30:bb:77:69:5a:21:13:7e:
24:57:58:a9:6e:84:9d:e7:91:90:ab:46:0f:71:67:d0:ef:45:
19:18:b4:20:03:3a:8c:7d:34:b4:57:56:ce:59:3f:bd:38:77:
ca:7a:10:12:ee:2a:f9:3c:ac:a0:4b:64:44:41:ef:cd:91:6e:
37:68:57:46:91:a9:9f:97:ff:c1:b5:98:66:b9:48:54:8e:57:
58:5f:64:c2:21:08:1e:75:1c:85:f1:02:38:77:54:14:a0:f6:
f3:e5:97:79:cc:f5:4d:f2:af:c3:95:68:bf:fd:7c:1f:df:e1:
f7:d1:b5:b2:32:27:fb:bc:0f:26:53:e4:3f:cf:4c:6f:35:bc:
02:7c:1b:bc:2b:6f:63:ff:9d:f7:84:93:a4:1b:c4:3c:8e:35:
51:90:7a:9f:c2:d9:49:15:ba:35:d5:26:cd:5f:be:33:10:cb:
80:c1:ad:40:af:fb:83:12:46:63:9e:47:94:0d:46:e4:f5:d5:
df:bf:df:08:d1:d8:0a:8e:5d:04:8b:a3:19:e3:fe:02:d7:40:
47:56:5b:aa:39:e3:2f:50:9f:79:a0:7f:b9:64:b9:cb:2f:98:
e6:52:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:00 2026 by rpki-client