Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa
File: lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa (raw, json)
Hash identifier: QmN5YcqljhCgdP2JOMV6nb5xM3S3y5gCkyo63tNhBUQ=
Subject key identifier: 95:FE:14:5F:0C:02:89:2B:4A:30:F1:52:30:FC:8D:33:48:36:CD:9F
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 019EFF85C0BD9557AF4A8A27C9432B3840F3
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa
Signing time: Thu 25 Jun 2026 16:03:36 +0000
ROA not before: Thu 25 Jun 2026 16:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219361
IP address blocks: 2a0a:87c0::/48 maxlen: 48
2a0a:87c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:85:c0:bd:95:57:af:4a:8a:27:c9:43:2b:38:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Jun 25 16:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95fe145f0c02892b4a30f15230fc8d334836cd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:d6:4c:f1:00:ed:01:75:f9:1b:82:60:43:
6d:32:30:fa:32:b7:02:11:03:17:87:1e:a2:29:f4:
33:61:6f:c7:32:d5:a3:76:3b:c2:e4:ca:17:f1:a7:
df:7b:45:3a:24:55:6e:a5:a6:fb:c7:44:2f:ae:1e:
75:49:8d:28:20:01:e1:09:4f:8d:68:23:51:34:72:
44:33:40:ed:f3:b3:0e:7d:83:f8:74:ee:27:8c:93:
54:70:bc:4e:9e:52:59:ee:f4:b8:7d:58:fb:e6:46:
e4:7d:b6:46:39:a6:c7:bc:fb:49:c2:3c:57:46:47:
aa:cc:b0:e0:23:d1:0f:b8:ae:81:2b:90:a4:ea:16:
41:84:60:97:00:6c:67:1a:c6:d6:bc:53:7c:c0:5a:
c8:2d:26:00:f1:0c:06:30:7f:35:cd:fe:e1:da:a6:
44:fd:c1:84:fa:60:32:80:d0:74:e5:6b:74:57:4f:
f0:83:b6:0c:d3:0b:0b:1e:f2:4d:59:48:e2:73:8b:
1e:7c:b3:a0:bc:4e:a3:65:cf:8f:6f:d3:5c:5e:46:
60:9b:90:f4:e3:a4:ac:99:12:0a:6b:e8:cb:c5:16:
8f:fa:19:5e:a3:16:38:69:e2:1c:b7:f9:29:23:70:
8b:79:4f:13:42:06:71:1d:c5:f5:ad:ad:28:4f:4f:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:14:5F:0C:02:89:2B:4A:30:F1:52:30:FC:8D:33:48:36:CD:9F
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0::/47
Signature Algorithm: sha256WithRSAEncryption
1a:30:c4:4e:d1:e7:31:40:5b:d3:2a:b5:5c:96:e5:f3:9a:14:
c1:8d:ce:b7:dc:3c:46:ff:ca:7b:42:09:9d:e0:c3:df:f1:87:
30:0b:25:1c:e1:6c:04:f3:d1:b7:75:44:e8:ed:30:2e:8e:31:
89:ce:bb:41:4b:7f:24:fe:a1:fe:83:7f:6d:43:8a:2b:79:2c:
25:60:97:7a:ce:a7:50:73:4a:53:06:b3:e0:9a:9d:7f:97:1c:
cd:71:94:4c:c1:b7:27:4d:f2:94:01:bc:aa:67:e0:de:15:47:
96:da:3c:67:17:03:63:91:23:12:7e:30:a7:0e:24:42:29:51:
f3:2a:a0:57:57:5f:76:fb:0f:22:d4:46:8f:ce:3e:22:95:66:
18:7c:37:59:72:dc:0e:8d:72:92:38:99:eb:42:cf:54:ec:0f:
56:0f:29:b9:95:7d:25:a4:d4:a0:71:b8:43:ea:38:5d:be:f9:
2b:dd:99:63:b3:31:30:b6:80:92:84:66:83:45:9a:85:04:7d:
cf:29:69:c9:cf:59:03:c6:43:aa:9b:31:33:23:51:d6:fa:99:
eb:d6:7c:50:19:05:3f:d5:7d:3a:69:7b:19:c7:83:1b:2d:46:
4c:2e:52:b2:46:3a:8b:0d:37:af:77:2e:e1:2a:9b:96:f2:e1:
1b:7f:05:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:26 2026 by rpki-client