Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/lMbycOyKsNQEYDbbnO8jLbNPRkE.roa
File: lMbycOyKsNQEYDbbnO8jLbNPRkE.roa (raw, json)
Hash identifier: eTJe4v/IqH8HQqSSHHi7pyJmR8yUrAqAwUv/AvrAmLo=
Subject key identifier: 94:C6:F2:70:EC:8A:B0:D4:04:60:36:DB:9C:EF:23:2D:B3:4F:46:41
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 019FF2060EE7F3024581A4ABA69E48409FCA
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/lMbycOyKsNQEYDbbnO8jLbNPRkE.roa
Signing time: Tue 11 Aug 2026 18:11:51 +0000
ROA not before: Tue 11 Aug 2026 18:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154824
IP address blocks: 2a0b:a500:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:06:0e:e7:f3:02:45:81:a4:ab:a6:9e:48:40:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Aug 11 18:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94c6f270ec8ab0d4046036db9cef232db34f4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:99:d0:0f:3c:b6:37:e3:1b:0c:e6:f7:c0:
04:07:c8:5c:b9:7e:98:c7:29:b5:bb:aa:04:a9:29:
cb:ce:53:f3:04:4a:53:ca:c1:cc:ee:36:2b:99:2c:
e1:3b:a1:34:0e:e6:ad:f6:31:75:98:01:d9:bb:74:
e9:ed:52:79:1e:4b:9e:d8:db:8b:53:15:c8:89:d5:
09:11:f3:93:b3:74:a7:d7:bb:32:90:ac:7a:6a:bc:
2e:11:af:2b:cd:e2:ef:c9:77:2b:9d:99:20:f2:72:
9e:03:38:e7:74:dc:c9:a9:e3:5c:fc:66:b0:54:64:
67:84:79:ca:b5:25:1a:74:84:94:a4:17:ce:d9:dd:
90:87:16:de:8b:86:e4:b3:44:3a:fb:e7:e4:79:7e:
fa:06:e0:20:1f:7a:61:d2:92:0e:00:1b:f3:a6:f0:
0f:df:25:1b:6e:52:c1:cb:43:fb:60:b6:be:0b:04:
d6:e6:18:18:db:a7:42:c9:fb:54:72:6f:db:23:15:
be:75:2c:1b:59:a2:55:e8:fd:5f:18:2e:30:6d:e6:
f7:5f:ee:5a:5c:50:bd:d5:98:0c:6c:c1:20:73:00:
7f:61:34:fc:66:b4:e7:82:33:06:c7:1e:d3:0a:ff:
e2:da:cb:5d:12:57:37:52:00:4a:9b:a5:83:0a:2a:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:F2:70:EC:8A:B0:D4:04:60:36:DB:9C:EF:23:2D:B3:4F:46:41
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/lMbycOyKsNQEYDbbnO8jLbNPRkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500:1001::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a5:da:70:74:25:65:46:3a:8d:27:61:e1:41:e0:de:27:a9:
62:40:fe:df:e1:13:83:59:1c:6f:e4:33:3d:de:31:ac:d3:67:
eb:f1:90:5e:91:e8:74:02:b7:c9:16:bc:f9:c7:04:bd:4d:b0:
63:9a:32:79:98:8a:b0:63:ec:f4:d3:1a:15:5a:ae:4f:89:66:
1d:35:d3:ad:92:2e:41:d5:46:13:e7:40:9c:ba:0f:ae:c9:5d:
51:4c:69:1f:dc:d5:1b:51:43:d8:ac:d3:45:10:96:82:5a:ce:
80:0f:e2:d9:db:20:f9:63:bc:78:22:13:b8:ee:01:e5:8f:a3:
d9:81:6e:42:dd:a5:c5:6a:ca:17:14:46:a3:62:94:73:38:37:
b1:31:a6:c8:f3:50:df:bb:c0:e2:0d:e6:5e:90:fb:f7:03:e1:
64:b5:4a:fa:7b:a6:eb:56:65:90:93:62:05:a8:8e:ac:e3:ee:
8c:c1:3b:bc:3f:55:12:b5:8e:86:f4:a4:d2:11:3b:a9:4d:c5:
b0:c8:2b:03:6b:db:d4:80:b7:4a:a2:8f:cb:53:8d:9c:94:ec:
b0:e1:51:aa:a9:f5:dc:23:21:b5:d5:f9:df:74:f2:84:a5:6e:
9b:8a:43:bf:3a:8b:52:35:f5:96:d2:b2:1c:e8:1a:00:55:1d:
85:fe:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:04 2026 by rpki-client