Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa
File: tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa (raw, json)
Hash identifier: vN3jsoaAoGFeF0TjPiRbe6ckXH0xWcv5zd/aMhz5Jac=
Subject key identifier: B4:BA:1E:E3:2F:C8:6D:01:FA:14:AA:17:28:A2:E0:70:1F:DF:51:7B
Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial: 01A173825E8BACE4145A389249F0CCE915DA
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa
Signing time: Sun 25 Oct 2026 14:41:26 +0000
ROA not before: Sun 25 Oct 2026 14:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15562
IP address blocks: 2001:67c:208c::/48 maxlen: 48
2a0e:b240::/48 maxlen: 48
2a0e:b240:118::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:82:5e:8b:ac:e4:14:5a:38:92:49:f0:cc:e9:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Validity
Not Before: Oct 25 14:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ba1ee32fc86d01fa14aa1728a2e0701fdf517b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:a3:6f:28:1c:97:b4:22:7f:ed:6e:6e:46:
3c:e8:ad:17:83:0c:63:f2:78:19:6f:81:49:af:c0:
f4:5c:91:22:b3:dc:79:52:37:85:db:4b:22:f9:9e:
06:73:37:5e:e1:e9:a9:5c:df:6a:f8:d8:43:77:aa:
ee:25:28:d8:f2:68:0c:d5:6c:a9:ff:56:58:a0:82:
e2:63:0b:1a:5d:ae:04:e0:e9:ed:8e:d3:84:54:81:
8f:db:3c:37:5a:c5:f2:e8:d0:ad:05:3b:30:fb:58:
09:15:3d:83:d9:92:66:0c:bb:d5:3e:45:1a:43:b5:
ca:b3:c3:fb:95:f6:10:c9:c3:68:ee:57:8d:c1:f4:
d9:e4:08:19:f3:23:54:05:b0:65:ac:d3:73:9f:50:
d0:c6:0c:1c:90:db:1e:06:12:26:99:06:f9:a0:83:
17:ef:9c:0c:fd:a0:c1:f8:e0:db:03:9a:a9:c8:df:
3f:14:ed:94:1d:9b:e0:2a:e8:0f:97:cd:16:d9:97:
02:86:c0:39:8a:66:60:24:a6:1e:ee:d7:53:90:4d:
02:d9:46:10:1e:c4:68:98:e1:13:fb:2e:ae:47:17:
5a:52:b3:c8:41:d1:52:c9:c5:f0:d8:bc:14:9a:4a:
d1:83:e1:bd:28:dd:46:77:92:20:12:b5:d8:ca:8c:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:1E:E3:2F:C8:6D:01:FA:14:AA:17:28:A2:E0:70:1F:DF:51:7B
X509v3 Authority Key Identifier:
keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/tLoe4y_IbQH6FKoXKKLgcB_fUXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:208c::/48
2a0e:b240::/48
2a0e:b240:118::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ee:bb:b8:27:26:d5:05:5b:e6:06:24:0e:1d:a7:fc:12:82:
8d:04:7d:cf:01:87:b7:bc:b2:7d:41:6d:8b:f3:25:97:85:fd:
c8:5d:51:fb:a0:d3:62:df:2e:8d:25:27:cf:ca:c4:db:df:3f:
9f:66:ca:7a:f7:22:4b:72:10:72:c0:b6:7a:fd:13:09:2f:30:
9d:d6:2e:24:58:07:06:0e:02:98:42:df:be:88:3d:6b:09:62:
ec:46:f8:6e:8d:2c:81:ae:b5:39:27:7e:16:f3:85:26:76:02:
44:1e:0b:f5:62:43:96:21:a3:8b:a8:c8:db:d7:be:d1:f5:28:
7c:1c:b5:2f:59:4e:17:56:7f:ce:04:41:c4:0a:6c:c5:06:6f:
da:cd:2b:c9:d6:b7:b5:cf:15:59:83:04:a6:6e:78:78:b4:14:
56:0d:04:bb:d8:b6:05:e3:63:c5:70:70:7a:63:4c:84:6d:ac:
d2:78:23:84:0c:6c:8e:e0:6f:29:06:55:c6:5a:41:3e:e5:7e:
60:5a:04:45:ed:03:80:87:1c:4e:58:03:18:9a:b9:55:49:25:
80:60:ee:84:ff:8c:1e:e9:5a:88:d6:5f:47:9b:ed:5c:39:24:
9f:18:03:f6:8b:8e:c8:3a:9e:f3:55:a2:a1:02:df:62:45:bc:
98:4b:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:38 2026 by rpki-client