Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/LKCZjRnqOfP4c6EPSr981Q8ufBE.roa
File: LKCZjRnqOfP4c6EPSr981Q8ufBE.roa (raw, json)
Hash identifier: AHOlzbkAOwQMFN9o3abQlagG3JiaFNtgoH0PdamFOSU=
Subject key identifier: 2C:A0:99:8D:19:EA:39:F3:F8:73:A1:0F:4A:BF:7C:D5:0F:2E:7C:11
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01A1589955373789C0554D0BB842849F2CDA
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/LKCZjRnqOfP4c6EPSr981Q8ufBE.roa
Signing time: Tue 20 Oct 2026 09:16:46 +0000
ROA not before: Tue 20 Oct 2026 09:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201148
IP address blocks: 2a13:3f40::/48 maxlen: 48
2a13:3f40:1000::/48 maxlen: 48
2a13:3f40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:99:55:37:37:89:c0:55:4d:0b:b8:42:84:9f:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Oct 20 09:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ca0998d19ea39f3f873a10f4abf7cd50f2e7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:eb:9a:39:6b:67:22:d1:01:2e:69:99:11:
18:15:90:4d:d1:2f:68:21:d5:a2:24:10:32:e6:3a:
09:03:16:e3:7f:46:54:c8:d1:0c:52:d8:40:fd:05:
2f:02:8f:ec:20:ba:72:64:e2:5a:20:a2:7c:80:a2:
f2:d5:0d:ab:3b:11:7f:47:05:39:23:a5:ec:7f:72:
48:3c:17:e8:45:38:0c:dd:62:ad:6c:69:c4:6b:a7:
74:19:dc:ee:4f:09:bc:5c:5b:95:52:2c:0d:71:00:
4c:9c:13:ac:ef:43:51:ab:5f:80:cb:48:ca:a2:2d:
c2:c7:58:85:53:5d:78:95:ce:75:94:9b:f5:83:42:
34:48:7b:27:91:50:7a:a7:99:dd:b2:f7:83:9d:83:
e7:d5:01:b9:59:5a:5e:76:7f:cc:3e:0c:56:ec:d0:
fc:79:2e:50:83:12:2d:55:3a:d3:13:1c:3e:2f:05:
d9:50:3f:75:12:a4:61:44:80:4f:d5:32:8b:e4:63:
00:a3:ae:e4:74:0b:b0:3a:d2:c6:57:a3:6e:87:bb:
40:bd:55:a6:96:47:51:a6:3f:a0:b2:20:1b:31:fa:
8e:af:25:01:4f:c5:68:7d:c6:04:e1:d2:90:d8:f6:
c6:43:5a:d9:6a:86:f1:98:24:c7:6c:51:21:4c:db:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:99:8D:19:EA:39:F3:F8:73:A1:0F:4A:BF:7C:D5:0F:2E:7C:11
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/LKCZjRnqOfP4c6EPSr981Q8ufBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f40::/48
2a13:3f40:1000::/47
Signature Algorithm: sha256WithRSAEncryption
68:8f:51:63:6e:96:c3:4c:8b:44:7f:b4:28:a0:1e:ae:1b:71:
dc:bb:da:6a:2b:40:38:0c:5e:8a:5c:be:ca:d8:cb:7f:60:45:
e9:b2:80:3d:c8:7c:f6:64:d9:4d:69:06:76:74:d0:86:12:54:
99:00:cf:7f:4a:b9:a3:1b:73:e7:d9:c5:dc:2f:8e:66:01:8a:
39:19:a1:ef:46:ff:a0:f9:45:5a:fe:02:2d:81:3b:e1:91:53:
b6:06:b5:c4:43:f1:e0:db:b7:05:bf:e6:57:07:13:8d:26:56:
8e:4b:fc:7a:82:39:8f:df:98:7d:20:9a:f7:e7:2b:2c:0c:8b:
de:32:70:41:50:f8:5d:e7:d2:82:5a:74:47:ea:22:a3:24:19:
22:fb:66:63:c7:5e:a6:11:07:40:ee:f3:c8:48:10:a5:85:d7:
63:40:75:e4:76:f1:20:81:3a:c6:07:c7:b1:30:c3:74:ca:f2:
ff:12:5a:88:40:2d:e6:bf:30:2c:4b:7a:78:42:eb:27:62:5d:
83:de:47:23:8c:5c:b1:9c:fd:07:2f:e8:e8:5a:c8:ba:1b:48:
5c:ca:5b:40:9a:7e:f2:07:3d:cc:c0:1b:91:eb:61:8b:56:d1:
eb:c4:5b:ee:b6:fb:03:1a:e8:b8:34:72:c7:44:43:ab:45:d5:
90:d0:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:04:53 2026 by rpki-client