Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa
File: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (raw, json)
Hash identifier: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=
Subject key identifier: 2D:8C:B7:AB:61:C2:C1:35:5A:10:E3:B2:F2:2E:FA:CE:95:90:0D:04
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23688088F9021BDAD2037AC313A56CE2
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25135
IP address blocks: 2a01:840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:80:88:f9:02:1b:da:d2:03:7a:c3:13:a5:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d8cb7ab61c2c1355a10e3b2f22eface95900d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:cd:b8:29:cc:43:2c:3f:6f:b3:19:fb:e8:
49:5b:5c:c9:3b:be:7e:fb:0d:46:08:28:fd:43:47:
ab:90:3c:0e:2a:28:3b:95:93:33:d2:3b:54:5e:3b:
8b:31:0a:bf:0a:49:2a:f7:3d:41:47:38:5c:43:65:
db:bc:6d:15:63:46:b0:0d:51:d1:2c:fb:21:4a:ec:
68:66:2e:3b:9d:93:3d:78:87:6f:5a:e9:ad:b5:9e:
af:c4:b8:83:bc:fb:c7:15:16:c0:81:89:ed:9f:6c:
5a:e6:08:5b:23:00:ce:53:4f:ea:1a:06:f1:a3:b1:
ac:c7:94:22:c0:26:6f:f0:7c:ea:f9:3b:3f:0e:70:
57:07:5d:60:25:1f:9c:08:da:83:93:c0:ed:58:57:
4a:c7:5f:2c:c6:53:78:34:fb:4d:72:9a:1e:48:28:
19:f3:c1:c3:00:9e:b6:c0:db:04:69:0d:6a:c9:bb:
6d:c9:05:3d:0b:71:15:72:6e:e8:66:5e:e9:89:20:
4d:7d:e8:74:dd:87:46:6e:aa:a3:f0:2c:0e:fa:23:
69:58:83:70:04:92:50:c5:a2:89:3a:99:7c:d0:75:
c6:12:b4:64:a5:40:38:f8:6c:47:86:fa:9f:e5:e5:
87:5c:51:4d:3c:4a:d0:fa:54:98:5e:2b:04:6c:59:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:B7:AB:61:C2:C1:35:5A:10:E3:B2:F2:2E:FA:CE:95:90:0D:04
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:840::/32
Signature Algorithm: sha256WithRSAEncryption
ab:5d:41:8e:f6:45:e2:f0:b8:c8:05:b0:a9:8c:7a:9c:26:fa:
2d:8a:c7:12:0f:fc:be:69:32:18:26:8c:7b:0c:59:45:e8:39:
47:3c:71:51:ea:d5:60:f3:87:85:89:ff:31:2a:79:14:23:56:
5e:83:fd:d3:1a:b4:6e:48:e3:08:ae:ab:7f:23:f6:ce:0d:49:
72:1e:5c:45:93:1e:73:fe:38:4d:e6:3b:8f:0b:c7:b1:f8:bd:
fc:5e:88:6e:dd:3b:ba:b4:ea:fb:4e:1d:ab:ec:80:20:50:61:
b3:ac:0a:22:8f:d5:f8:42:53:62:bf:3e:b1:53:66:0f:e1:4e:
b0:2d:42:8a:ea:b7:37:d3:39:c7:d3:7e:1a:ae:4b:15:4a:d8:
aa:f5:f0:a9:f5:f5:5b:b2:b0:cc:f2:ee:91:ec:8f:6d:10:c6:
3a:9b:dd:02:a7:b0:c8:39:d5:c0:22:26:81:df:81:86:bf:ba:
40:3f:31:1c:21:1d:97:c5:52:8c:a9:24:b1:d9:b5:e6:57:94:
5d:7e:15:f5:4b:cf:c4:07:f5:a3:e6:82:b5:95:cc:c9:44:b5:
84:ee:e0:4b:43:de:3e:7b:91:34:be:b1:de:aa:cd:fb:0c:d2:
69:db:7d:8e:9b:0d:e3:fc:3e:fe:f6:2b:c8:ed:ea:d2:8d:76:
4e:c0:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:14 2026 by rpki-client