Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/las45E-41ZT6rgVEVBfk8yBDcNM.roa
File: las45E-41ZT6rgVEVBfk8yBDcNM.roa (raw, json)
Hash identifier: SODSExrjayR2qgDuDLJB7f1Ll8+PZJY1fvnH/V4iMAE=
Subject key identifier: 95:AB:38:E4:4F:B8:D5:94:FA:AE:05:44:54:17:E4:F3:20:43:70:D3
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B23987EDCCF1FB9644CAC8831F970
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/las45E-41ZT6rgVEVBfk8yBDcNM.roa
Signing time: Wed 14 Oct 2026 12:20:13 +0000
ROA not before: Wed 14 Oct 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a06:b3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:23:98:7e:dc:cf:1f:b9:64:4c:ac:88:31:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95ab38e44fb8d594faae05445417e4f3204370d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:3e:c3:d5:76:d7:2c:eb:61:68:4e:ee:04:
81:be:62:4d:7b:e9:a3:72:3e:59:9c:f7:d2:b0:75:
51:01:36:04:ae:13:68:38:63:dd:30:7f:cc:3e:aa:
2e:e7:ea:c4:db:4f:56:74:1f:61:14:1f:50:6b:22:
03:c7:68:e5:03:65:9d:ed:3a:56:43:e4:c3:e0:f1:
04:e4:9b:36:6f:58:7a:60:22:48:03:d3:22:ac:13:
69:b4:8e:e6:a7:c8:91:b4:35:1d:24:f1:ae:58:50:
c8:2b:f1:9e:89:cf:2b:53:15:0c:60:ff:80:ed:42:
72:3f:b6:79:32:89:a5:c3:ac:26:07:91:90:41:8e:
90:03:b3:1d:5f:81:ae:c4:62:99:f2:8b:1f:90:d6:
9c:7f:da:79:85:78:4f:ab:69:c2:da:8f:aa:d3:0c:
2b:99:d9:8e:ce:c6:fc:82:a2:c5:39:c2:df:1b:d4:
3f:d3:72:78:2a:a3:3b:df:21:48:54:f3:a7:4a:a7:
b9:fd:20:56:0f:4f:48:e8:3b:6b:f5:f1:31:10:55:
1d:b6:00:73:4f:3b:f9:ac:f5:35:cd:23:b4:06:44:
3b:cc:a8:70:90:a3:eb:b4:2f:69:74:3f:34:5d:96:
95:e9:e3:3e:6c:a6:77:2a:16:04:b3:25:d6:9b:7b:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:38:E4:4F:B8:D5:94:FA:AE:05:44:54:17:E4:F3:20:43:70:D3
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/las45E-41ZT6rgVEVBfk8yBDcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:b8:71:61:7c:60:5f:c2:d6:53:17:11:e8:bc:c4:1d:6c:3f:
cb:82:f7:b6:25:fd:24:99:d5:be:2b:6e:0e:d0:19:90:8e:98:
4e:bb:a1:12:fc:ca:92:d3:2b:dc:fe:a1:41:3f:4a:f5:f7:95:
30:f1:58:32:e9:ed:aa:4f:0a:b8:a4:2c:ee:b1:52:94:f4:18:
b4:8d:eb:cd:6b:93:50:c2:a2:a0:ba:05:14:e6:9c:7a:25:de:
1f:3b:d9:cb:6f:16:3b:3e:ae:ca:47:53:69:b6:bf:97:1a:a3:
33:d8:0a:49:d5:37:f2:7a:f0:75:9d:c7:c0:7c:d4:87:ec:98:
71:5c:c2:4a:3d:6a:ba:e4:38:12:ed:65:88:e7:46:4d:18:ff:
b4:3d:96:4d:f0:8b:b0:75:4f:10:41:74:19:ed:1f:1d:99:1f:
d3:97:39:99:16:20:cc:92:3d:fe:c4:05:5a:00:02:16:ee:e9:
4f:02:67:16:5e:bc:7e:30:46:0e:30:34:a6:78:3a:3b:bf:09:
df:51:e6:ac:3e:0c:5d:67:6a:c2:48:2c:db:60:ff:e8:ad:77:
5f:4d:73:47:a0:8e:1d:3c:c4:fa:1a:0b:6e:43:fd:d7:fe:4f:
3f:3c:74:c9:21:a4:c7:dc:c1:ec:5e:fb:7a:51:b9:43:fa:93:
9d:3a:a8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:18 2026 by rpki-client