Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L_W_Zodj_rFdiPHiW_5WF1RZ9Tg.roa
File: L_W_Zodj_rFdiPHiW_5WF1RZ9Tg.roa (raw, json)
Hash identifier: 1nVD2xaapRtt6q9dwKBcwozDlKGWBbjyjKs27QqZ47A=
Subject key identifier: 2F:F5:BF:66:87:63:FE:B1:5D:88:F1:E2:5B:FE:56:17:54:59:F5:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E86B473C00DFE09682B0603135EABFA14
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L_W_Zodj_rFdiPHiW_5WF1RZ9Tg.roa
Signing time: Tue 02 Jun 2026 05:00:33 +0000
ROA not before: Tue 02 Jun 2026 05:00:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 109.61.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:86:b4:73:c0:0d:fe:09:68:2b:06:03:13:5e:ab:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 2 05:00:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ff5bf668763feb15d88f1e25bfe56175459f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:de:5a:30:81:fe:74:2b:ba:a6:bb:bf:b7:
3f:d5:31:05:9b:7d:45:cf:da:1a:5d:18:61:34:06:
02:a7:37:1d:fd:80:5f:7b:91:7c:33:27:74:fa:43:
45:61:be:77:5c:4b:16:4b:73:cb:55:2a:90:d4:d6:
85:a7:d2:84:28:1f:d5:37:94:8d:9c:1a:2e:34:20:
ff:1c:21:c7:81:aa:50:07:d2:09:79:ad:01:b1:ba:
8a:92:17:d6:76:f5:38:b9:45:06:e5:2e:58:f6:c5:
27:c2:a1:65:5a:d4:e1:05:46:80:69:67:d7:0d:f9:
f1:e4:64:10:f0:0b:fb:de:f5:0a:e1:ab:73:fb:3a:
ff:9d:a6:7e:80:c3:5d:45:cc:15:77:60:73:28:f4:
f0:ff:e7:20:4e:6c:f7:e0:9d:99:9b:00:eb:f6:07:
e7:08:36:e7:2d:45:fd:53:d1:6d:d1:7b:ac:db:50:
7c:fa:fd:be:37:19:60:16:d1:64:eb:98:12:0a:e2:
5b:08:40:a5:53:c3:b5:63:ad:1f:57:4f:38:83:f5:
b9:08:b3:c6:03:1e:b9:5a:b3:c8:ca:b1:38:32:84:
d3:7a:4d:35:5a:9a:67:27:48:6c:b9:c9:16:0e:00:
ab:0b:8a:b6:04:15:38:b7:e0:c9:f1:09:48:0c:4b:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:BF:66:87:63:FE:B1:5D:88:F1:E2:5B:FE:56:17:54:59:F5:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L_W_Zodj_rFdiPHiW_5WF1RZ9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.109.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a0:33:22:da:ce:88:38:c5:bf:b5:7a:d8:65:cd:bf:75:bc:
0e:05:15:4a:18:4d:50:a6:e3:ad:f1:6c:80:74:1b:a9:e5:cd:
ce:0f:ae:c0:1a:c4:ee:e2:8b:b6:8a:55:2f:29:bf:4f:0b:c4:
07:86:dd:1b:b3:89:69:ec:fe:cf:ca:b2:70:2e:c3:2e:6a:d6:
b0:27:62:65:12:03:3f:1b:aa:92:2a:49:c6:c1:a7:c4:70:51:
bd:e4:b6:57:92:0e:9b:ea:19:e9:61:d4:f7:e9:ba:cb:5b:d1:
04:c8:5f:10:86:9b:ce:1e:a2:ae:46:66:a2:14:65:3d:8d:10:
a4:37:0a:55:6f:f4:36:33:57:c4:54:74:a3:47:a2:6c:1d:80:
64:88:01:a2:e9:a7:12:c2:46:e8:4b:77:20:19:3a:60:df:0f:
52:e4:ff:b3:52:e8:e1:00:8b:21:4f:f0:a9:c6:56:08:33:dc:
b4:64:67:0c:c8:e2:37:0c:fb:81:79:70:1c:bb:77:47:a5:7b:
7e:e4:2b:69:08:14:2f:2e:57:66:80:26:7a:18:41:db:22:7f:
ac:eb:b5:33:41:57:e6:73:6f:a3:dd:87:b0:68:e4:19:61:82:
c3:4c:97:73:25:76:c7:1b:b7:f6:4e:8b:5a:37:a2:78:80:c9:
a6:05:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 09:12:43 2026 by rpki-client