Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LTezTFZOH7FzpFYRvu3MU10A-Es.roa
File: LTezTFZOH7FzpFYRvu3MU10A-Es.roa (raw, json)
Hash identifier: 9dxNC2xgVvO+NJf1pzkwN/WV8ZpfeEzVyNzBAjNSW8s=
Subject key identifier: 2D:37:B3:4C:56:4E:1F:B1:73:A4:56:11:BE:ED:CC:53:5D:00:F8:4B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A08C0D6E1DCBADCC706A879B728EB68B43
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LTezTFZOH7FzpFYRvu3MU10A-Es.roa
Signing time: Thu 10 Sep 2026 16:01:25 +0000
ROA not before: Thu 10 Sep 2026 16:01:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215232
IP address blocks: 2a0e:b107:2693::/48 maxlen: 48
2a0e:b107:27de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:6e:1d:cb:ad:cc:70:6a:87:9b:72:8e:b6:8b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 10 16:01:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d37b34c564e1fb173a45611beedcc535d00f84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:ea:37:94:e2:dc:21:fb:5f:78:57:14:af:
94:a1:6a:21:a2:a2:c6:a8:a4:04:8d:76:09:8e:5f:
d0:df:63:37:f2:6c:08:04:1a:1a:da:77:f1:e8:a3:
f5:da:c2:0c:b3:f8:38:7d:25:2a:6e:a7:68:46:6d:
b4:d1:cd:46:93:6e:f0:a9:0d:a5:50:e6:7b:f8:41:
c3:59:c5:6c:0b:11:0d:0a:34:14:f0:93:9e:e2:5d:
75:ad:ca:98:3f:df:b6:9e:d9:dd:2e:23:c1:4d:91:
41:87:66:50:b6:c7:47:b3:63:d9:a2:5d:85:14:2e:
3d:a8:da:b6:d7:7b:99:41:00:6b:ae:50:8d:2e:3f:
5f:25:c5:f5:cf:38:9b:ce:7e:d4:be:5d:13:19:4d:
6c:2e:3a:4c:4e:22:08:45:13:a5:b4:8b:13:23:c0:
77:44:d5:68:ea:64:6c:a0:5f:0b:3d:41:f5:d2:f2:
fb:da:e8:c1:5c:42:29:94:8f:04:52:29:7c:b3:c3:
3c:9e:1f:a8:21:62:9e:32:a1:16:c7:28:98:9e:e5:
03:48:b0:83:f2:d6:83:60:ed:dc:4d:44:57:07:6a:
0b:a3:9b:66:06:87:96:35:ef:ad:e9:9e:17:be:a7:
ae:01:d2:8f:c9:2e:1c:b9:f3:da:1d:09:c6:ad:7a:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:B3:4C:56:4E:1F:B1:73:A4:56:11:BE:ED:CC:53:5D:00:F8:4B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LTezTFZOH7FzpFYRvu3MU10A-Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2693::/48
2a0e:b107:27de::/48
Signature Algorithm: sha256WithRSAEncryption
22:67:5e:d1:04:2c:33:ab:11:35:bc:9e:13:73:49:d3:1a:eb:
30:77:47:49:b0:ca:a0:1d:b1:ea:ee:ac:93:fe:64:79:4e:41:
d6:12:1a:b2:0b:a5:16:01:bb:91:82:3c:01:7c:32:34:12:4e:
4f:d7:17:91:81:46:17:db:8d:13:90:f2:8c:07:1f:57:cc:a4:
6d:3a:f3:0c:6f:da:65:1d:ef:08:11:b5:0a:ca:47:ed:6a:01:
e5:c0:8f:0e:1d:1b:f4:76:2b:3e:48:dc:5f:e6:06:25:76:e8:
83:aa:09:fb:52:f0:6c:ec:05:31:0a:61:b1:31:ac:9f:2c:f4:
f3:3b:1a:23:f9:fe:ee:66:03:76:e0:3e:e0:36:47:a5:65:38:
4b:44:20:44:8d:bb:61:f6:99:5e:dc:a8:52:4d:a5:91:90:37:
6e:3d:e4:d9:5f:c1:67:dd:32:c0:d6:ee:f9:05:b7:09:64:cc:
15:7b:f4:11:c2:f7:b5:fb:20:01:e5:14:b7:ae:8d:09:8d:40:
43:ea:54:77:ff:4b:1b:b6:43:69:7d:8b:21:41:5e:f9:ba:d0:
9d:f0:0e:5a:80:47:fb:13:18:b5:7a:0b:59:49:2d:4d:4d:da:
2b:e0:c4:2d:2e:63:f3:eb:59:fc:d9:19:c1:52:cd:7a:2f:01:
30:e2:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:55:22 2026 by rpki-client