Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lFVnv43JGFMjXUtMDg1t8_wpiXE.roa
File: lFVnv43JGFMjXUtMDg1t8_wpiXE.roa (raw, json)
Hash identifier: YLYniFH+If3bpoeshgJ5j5KDhpm+zPn+w+d9vNOzd7M=
Subject key identifier: 94:55:67:BF:8D:C9:18:53:23:5D:4B:4C:0E:0D:6D:F3:FC:29:89:71
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01A0044B21D8EC80E4A8FAD782EB780392E3
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lFVnv43JGFMjXUtMDg1t8_wpiXE.roa
Signing time: Sat 15 Aug 2026 07:20:27 +0000
ROA not before: Sat 15 Aug 2026 07:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 2a12:b3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:4b:21:d8:ec:80:e4:a8:fa:d7:82:eb:78:03:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Aug 15 07:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=945567bf8dc91853235d4b4c0e0d6df3fc298971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:a6:21:a7:a7:6b:d7:61:a3:0a:05:57:52:
4b:38:58:76:1c:79:cb:9e:2b:34:6d:8d:f7:5e:7b:
b4:b1:20:04:51:50:38:45:34:38:c0:75:a6:73:da:
58:99:39:69:e0:78:b4:70:25:3e:a9:87:25:87:e7:
0f:74:0d:e2:8d:d6:5b:94:10:25:05:31:c7:75:17:
b4:fb:03:41:1c:64:9b:75:af:1d:7b:6d:00:ab:f2:
55:9e:11:c4:e8:dd:a4:9c:64:f9:8f:86:79:67:29:
ba:13:94:99:ac:aa:cf:ef:ad:d1:50:c1:62:f9:13:
98:20:c8:5d:58:05:81:af:d7:d0:41:b0:5b:07:2b:
2f:57:7b:fb:ac:51:8c:45:75:05:20:f7:91:3b:bb:
c6:76:f3:71:b7:38:2e:e6:c0:6a:38:8d:17:c2:a2:
32:15:04:8a:55:6c:d7:61:eb:6d:3b:25:a1:9e:7e:
ed:b9:7a:88:e4:0e:30:04:ea:3d:87:70:45:d6:21:
3c:9c:48:eb:0f:19:00:d4:c2:b7:cf:a5:dd:17:85:
78:54:88:e1:23:e3:2b:4f:1f:53:2b:c9:37:a4:ae:
db:95:22:f6:ca:82:e4:43:99:e2:fc:dd:f9:3f:18:
cf:a7:4b:3e:5c:de:4a:e3:2d:7c:a3:d5:12:a1:bc:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:67:BF:8D:C9:18:53:23:5D:4B:4C:0E:0D:6D:F3:FC:29:89:71
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/lFVnv43JGFMjXUtMDg1t8_wpiXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b3c0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e5:50:46:32:0e:4c:bd:06:a3:c8:9f:06:7d:fe:4a:c7:ee:
e3:40:af:41:66:58:8c:a0:e3:72:a1:e9:96:d3:66:da:4a:68:
d8:f1:9f:89:90:39:66:99:77:dc:32:f7:3f:43:d1:42:25:f8:
c5:7b:be:92:51:00:09:d4:1f:b2:ae:8b:69:52:fe:6b:fb:47:
82:c9:42:42:2c:90:74:30:e5:1b:a4:76:4a:9d:0a:13:fb:b1:
d9:06:0f:e6:9c:55:89:a1:79:3d:2e:d9:65:1f:6c:83:78:b8:
7b:2f:a3:04:15:dc:27:d4:10:6a:87:d7:6d:02:18:fa:cc:3f:
19:34:57:74:e7:42:71:62:5e:88:43:af:49:04:12:28:30:3d:
8c:17:d0:b8:c1:1e:4e:6e:c8:09:38:17:f8:0c:06:20:63:35:
2c:01:65:2d:48:7e:36:c0:d1:d9:6a:55:09:2a:72:c3:24:2a:
77:84:33:aa:72:f8:41:6a:04:ce:2e:b5:fe:05:68:3a:d2:f5:
81:63:62:70:2a:92:b0:bf:23:e8:c1:4b:c1:55:00:e6:34:90:
2f:db:05:88:3f:cc:ef:b7:30:8f:01:0d:f1:dc:e4:0e:47:04:
7a:fd:54:d4:ff:5b:a3:b9:7f:7b:23:15:a9:78:40:8d:56:e1:
bc:08:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:31:17 2026 by rpki-client