Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa
File: L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa (raw, json)
Hash identifier: FzuvIo201WVt27BM5X7jwcOguZldBZloRPmtC7hcI1M=
Subject key identifier: 2F:9C:1B:31:A5:BA:88:B3:42:4D:68:37:BF:A0:C0:E6:19:53:50:4C
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 019CB8644C911B58BF0340705508CDFE20C1
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa
Signing time: Wed 04 Mar 2026 10:28:26 +0000
ROA not before: Wed 04 Mar 2026 10:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211986
IP address blocks: 2a01:e281:b500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:64:4c:91:1b:58:bf:03:40:70:55:08:cd:fe:20:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Mar 4 10:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f9c1b31a5ba88b3424d6837bfa0c0e61953504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:dc:38:00:ca:f7:61:b2:e9:e7:32:0d:ab:
1e:b6:3e:1c:8a:51:e9:b0:ee:a7:7f:d5:eb:bf:66:
9a:02:db:05:ab:2a:dc:52:12:10:57:79:b1:a2:28:
a6:e8:d9:11:b3:a7:1a:cd:93:d1:a4:53:15:55:ba:
21:52:d9:6f:19:d7:6e:26:89:c9:9c:4b:28:56:5f:
b7:1b:f3:a5:ff:02:7e:5b:57:0d:f9:99:e4:28:c0:
40:76:9c:27:67:4b:d4:a7:6c:4b:03:33:bf:8e:54:
83:53:66:bf:4c:28:5c:2b:18:ff:f3:59:51:00:66:
85:6e:36:28:c0:a3:4a:31:98:b3:da:c5:ac:0e:1d:
82:f5:df:16:28:1b:3e:01:6a:35:e2:78:6c:0a:63:
c8:73:31:bf:29:46:4f:da:48:bf:5f:be:67:70:5e:
c7:5b:92:bf:3e:6b:9e:47:2e:b3:24:c1:79:7d:04:
02:ef:8f:51:f3:1a:1c:26:82:f4:4e:db:3b:e2:1d:
0f:9f:a1:9a:d1:ce:c4:1d:e1:98:ef:1e:2d:05:77:
c8:dd:57:54:93:21:08:26:74:15:cb:08:a6:f1:b8:
df:57:41:f0:d0:e2:49:99:62:4f:03:bb:36:6c:31:
da:a9:08:a0:83:25:0f:0d:a4:b0:88:74:58:06:30:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9C:1B:31:A5:BA:88:B3:42:4D:68:37:BF:A0:C0:E6:19:53:50:4C
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:b500::/40
Signature Algorithm: sha256WithRSAEncryption
68:88:95:6d:31:c4:df:a7:08:01:5d:21:f5:f1:d1:f8:76:14:
a9:c4:e0:a9:89:12:62:d0:a5:3a:d1:f4:32:be:cf:40:18:1c:
77:37:9e:6f:d7:14:37:0d:53:bf:f0:b8:d0:37:16:58:60:c5:
14:30:58:8e:b6:45:6b:5d:b6:00:be:32:07:86:63:32:02:b0:
1e:3d:83:2d:99:7f:9c:c1:27:9f:2f:9b:c2:7c:b4:59:c6:e8:
b6:00:44:13:c4:e9:e5:75:54:7e:87:45:4e:0d:66:e1:a7:5a:
8b:bc:40:49:c2:c4:e8:3d:23:e7:be:46:ec:0c:fb:7f:0e:79:
e0:73:af:73:37:ab:a3:18:9d:af:92:82:8e:7d:0d:9c:48:23:
12:e9:30:43:ef:7e:2f:d7:ff:da:a7:de:b2:9e:93:9d:30:1b:
f6:46:a5:78:70:53:ca:9c:04:e7:7f:d2:86:af:94:b9:ee:c2:
51:1f:e0:9b:b6:26:21:92:6f:26:6f:22:56:c9:f3:da:51:85:
cf:c5:c0:7a:ef:f0:5e:10:04:7e:b1:76:e3:e3:95:28:bd:c7:
1d:f6:9a:5a:ad:6d:bb:a6:76:03:f8:53:b8:b1:19:68:07:36:
0f:e9:86:58:d2:73:97:e1:18:d7:20:d4:dc:9c:08:db:72:ee:
be:ec:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:46:19 2026 by rpki-client