Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lJ_FSBE-949sPCiSpEyZySdrTKM.roa
File: lJ_FSBE-949sPCiSpEyZySdrTKM.roa (raw, json)
Hash identifier: dH33Sa3Yry3TNjfjBFsbKuiOk8jDZEsK2UQtsETnpIo=
Subject key identifier: 94:9F:C5:48:11:3E:F7:8F:6C:3C:28:92:A4:4C:99:C9:27:6B:4C:A3
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A1741A57F8FFF403E383B4F48B2E8C047E
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lJ_FSBE-949sPCiSpEyZySdrTKM.roa
Signing time: Sun 25 Oct 2026 17:27:25 +0000
ROA not before: Sun 25 Oct 2026 17:27:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402923
IP address blocks: 64.83.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:1a:57:f8:ff:f4:03:e3:83:b4:f4:8b:2e:8c:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Oct 25 17:27:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949fc548113ef78f6c3c2892a44c99c9276b4ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:89:9d:5b:df:a5:33:f8:43:f3:1e:1e:a8:
b8:b5:fa:cb:de:d2:fd:9e:b5:9e:17:15:cb:e6:c8:
75:92:4e:c0:07:8d:57:f1:ba:71:8a:33:07:7d:af:
7c:b3:f0:c0:88:e3:c8:b4:af:e6:ce:33:ec:83:6a:
6c:e0:da:16:f5:05:9f:7f:55:4a:9d:3b:97:21:e2:
04:3c:a2:54:9d:c4:27:09:57:e6:1e:0d:47:75:82:
f3:29:06:2a:05:ef:60:de:90:6b:ea:ba:a0:4b:2a:
8f:25:6a:6e:fd:da:85:e0:c4:92:46:53:28:8a:9c:
9a:55:77:71:0f:17:b4:f9:44:6d:b9:66:59:b7:85:
b1:42:bc:57:cc:8d:48:8b:94:02:1a:ae:32:b1:2b:
f1:96:48:76:19:d4:da:82:f6:1b:47:59:20:27:27:
e3:89:23:fb:d1:12:78:06:59:18:37:1f:fe:56:71:
39:80:9d:fd:c2:2c:f5:4d:5d:0c:69:d8:5e:16:73:
9e:3c:3a:a8:70:3c:ba:7f:a6:ec:a2:88:61:cd:cb:
37:e3:ed:8a:57:7c:a0:d4:58:35:ad:9b:78:7e:00:
87:bf:a9:1a:6b:92:96:13:8d:37:e8:df:90:04:77:
3b:98:e6:cf:73:8f:bd:c8:56:a7:d1:70:01:be:84:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:C5:48:11:3E:F7:8F:6C:3C:28:92:A4:4C:99:C9:27:6B:4C:A3
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/lJ_FSBE-949sPCiSpEyZySdrTKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:c5:b1:f6:7d:b8:5c:fd:76:cf:8b:9c:e6:81:a9:60:12:e4:
00:21:d0:89:22:43:2f:20:69:55:0f:b8:f4:0f:4d:61:b2:5b:
1d:85:5c:87:fd:4b:52:75:5c:65:94:03:47:24:15:25:4e:2b:
9b:c0:e5:8e:13:eb:2b:3b:bc:25:a5:fb:b9:98:07:19:24:f9:
5e:69:ca:50:ff:d0:0d:24:19:ea:54:8a:c5:75:2b:e8:e2:b7:
26:52:8c:8b:fb:ae:f3:2b:77:56:1d:42:81:74:94:7e:d7:e2:
16:18:3d:8f:5d:e2:46:41:4c:aa:8c:b1:08:62:ae:43:d2:6f:
0e:96:1a:ee:32:bc:2e:26:c9:b5:a0:c3:f5:8e:6b:34:d5:85:
22:f2:0a:99:dd:13:f2:b8:cb:f1:dd:5a:04:c8:f8:85:95:5d:
35:be:98:e7:e0:9b:0b:0c:2d:13:c5:61:91:14:f3:b6:cf:54:
8a:77:fd:cd:55:35:70:fe:a9:1a:db:ed:a7:bd:47:3d:85:ba:
3b:ae:4f:fb:4f:62:04:be:cd:f5:7c:30:ec:a2:75:af:29:6b:
06:fe:ff:e2:6b:04:40:2f:a0:15:e2:d9:11:78:0d:15:10:e5:
6c:7d:97:b0:92:33:4c:91:62:f8:7f:d5:a2:3c:51:09:d9:0d:
5a:43:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:19:33 2026 by rpki-client