Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lZXBlaKtZuKTRVGIHqkhtPj9ne0.roa
File: lZXBlaKtZuKTRVGIHqkhtPj9ne0.roa (raw, json)
Hash identifier: lL23XPdoymmAZ3GXgclE1EG24FJ5Lgbdb1NVgE1L8hQ=
Subject key identifier: 95:95:C1:95:A2:AD:66:E2:93:45:51:88:1E:A9:21:B4:F8:FD:9D:ED
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019E83109A7B9986842C732AB7AD8DF78C66
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lZXBlaKtZuKTRVGIHqkhtPj9ne0.roa
Signing time: Mon 01 Jun 2026 12:02:43 +0000
ROA not before: Mon 01 Jun 2026 12:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a11:79c0::/29 maxlen: 32
2a11:f5c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:10:9a:7b:99:86:84:2c:73:2a:b7:ad:8d:f7:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jun 1 12:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9595c195a2ad66e2934551881ea921b4f8fd9ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:23:bd:2e:9c:61:c4:0f:78:c1:e8:1e:19:
51:32:c6:b0:61:22:d4:98:f7:79:4d:ee:77:8c:db:
f7:87:6e:68:8e:e4:39:63:c0:51:be:96:03:dd:2a:
35:d6:5e:0e:1e:aa:08:d2:78:fb:06:ea:3b:c6:f4:
cd:09:7a:99:bb:70:4d:01:a1:5d:f0:5e:4e:cb:c2:
a5:6e:84:bc:a5:da:d9:93:37:79:61:be:a3:cc:02:
82:d1:48:a4:d9:f4:14:41:cd:1b:f1:24:6b:2e:42:
fb:33:13:3b:df:25:a6:80:8f:d3:28:97:2d:47:5d:
04:1f:a7:66:29:a5:4e:0b:6e:d9:0c:39:ca:99:a6:
a3:c8:6e:e6:ae:c7:61:e3:c7:c2:33:f1:ae:af:04:
a8:e6:f1:b3:31:39:0b:b0:fd:96:0f:2d:ab:e8:1c:
b3:f2:5b:d1:73:50:0b:92:36:68:74:f5:af:35:28:
93:f8:4c:5c:93:c2:90:d8:0d:fc:90:5e:47:90:12:
55:24:66:dd:17:50:00:85:a7:72:46:fb:14:b0:7d:
24:2b:68:3a:02:fe:45:df:5d:18:dc:9f:ab:49:00:
e4:e3:33:b9:94:9d:7d:4a:7b:f9:25:a9:a4:c0:41:
82:a8:8b:bc:1b:d4:e0:86:57:e0:74:4e:73:8c:75:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:C1:95:A2:AD:66:E2:93:45:51:88:1E:A9:21:B4:F8:FD:9D:ED
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/lZXBlaKtZuKTRVGIHqkhtPj9ne0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:79c0::/29
2a11:f5c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:d0:84:ac:36:5e:a2:2d:ab:33:1e:e1:5f:d1:b5:cb:d6:79:
7a:4a:ff:eb:54:1c:47:15:be:55:6f:12:8f:49:2e:fc:90:6e:
51:84:bf:0d:98:a3:b3:cc:0e:b1:da:67:e3:f4:a4:ec:99:50:
78:cb:8c:26:c1:f0:3c:4c:5b:03:73:9e:41:de:2f:df:c0:a5:
81:26:76:09:e3:d6:e9:bd:a0:8d:0c:eb:89:90:41:e4:18:69:
a8:34:ac:11:99:08:16:b3:6b:f3:05:71:88:59:79:22:a5:03:
e7:d8:06:4f:7a:ce:16:a4:2f:27:94:70:01:36:81:d0:09:77:
c9:8c:c2:7e:d3:e1:4f:44:84:9d:03:d9:18:42:ff:57:38:0c:
40:3b:76:78:61:a4:5e:8f:c0:e7:a6:f2:e1:da:74:c2:23:3d:
b9:32:3b:b7:f1:18:86:cc:5a:8c:d0:0a:89:c1:c5:e8:25:9e:
f0:c7:e7:7a:31:c6:72:01:ae:ae:ec:b7:89:0c:f4:3b:ee:f4:
09:70:12:f6:d5:da:a7:8a:3b:d4:7b:f7:62:9c:c9:c8:f7:68:
4c:2a:b2:f8:db:c6:cb:46:ad:d0:61:6b:22:15:2d:43:08:fb:
6a:60:d4:27:19:99:95:40:d0:81:67:56:ec:08:1d:02:75:0e:
cf:49:a6:7d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ6DEJp7mYaELHMqt62N94xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjYwNjAxMTIwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTk1YzE5NWEyYWQ2NmUyOTM0NTUxODgxZWE5MjFiNGY4ZmQ5ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOkjvS6cYcQPeMHoHhlRMsawYSLU
mPd5Te53jNv3h25ojuQ5Y8BRvpYD3So11l4OHqoI0nj7Buo7xvTNCXqZu3BNAaFd
8F5Oy8KlboS8pdrZkzd5Yb6jzAKC0Uik2fQUQc0b8SRrLkL7MxM73yWmgI/TKJct
R10EH6dmKaVOC27ZDDnKmaajyG7mrsdh48fCM/GurwSo5vGzMTkLsP2WDy2r6Byz
8lvRc1ALkjZodPWvNSiT+Exck8KQ2A38kF5HkBJVJGbdF1AAhadyRvsUsH0kK2g6
Av5F310Y3J+rSQDk4zO5lJ19Snv5JamkwEGCqIu8G9TghlfgdE5zjHXrzwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJWVwZWirWbik0VRiB6pIbT4/Z3tMB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvbFpYQmxhS3RadUtUUlZHSUhxa2h0UGo5bmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhF5wAMF
AyoR9cAwDQYJKoZIhvcNAQELBQADggEBAFrQhKw2XqItqzMe4V/RtcvWeXpK/+tU
HEcVvlVvEo9JLvyQblGEvw2Yo7PMDrHaZ+P0pOyZUHjLjCbB8DxMWwNznkHeL9/A
pYEmdgnj1um9oI0M64mQQeQYaag0rBGZCBaza/MFcYhZeSKlA+fYBk96zhakLyeU
cAE2gdAJd8mMwn7T4U9EhJ0D2RhC/1c4DEA7dnhhpF6PwOem8uHadMIjPbkyO7fx
GIbMWozQConBxeglnvDH53oxxnIBrq7st4kM9Dvu9AlwEvbV2qeKO9R792Kcycj3
aEwqsvjbxstGrdBhayIVLUMI+2pg1CcZmZVA0IFnVuwIHQJ1Ds9Jpn0=
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:56 2026 by rpki-client