Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LqdY6QUlnCmTpXUGJ8KbaxhZpis.roa
File: LqdY6QUlnCmTpXUGJ8KbaxhZpis.roa (raw, json)
Hash identifier: fX5xaFumK7phPfNkUKNCm5VEZCz4k3Mmoz02ZwkXc6I=
Subject key identifier: 2E:A7:58:E9:05:25:9C:29:93:A5:75:06:27:C2:9B:6B:18:59:A6:2B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A00F4A7FAFFFB34A88683A7E9E54D83
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LqdY6QUlnCmTpXUGJ8KbaxhZpis.roa
Signing time: Sun 13 Sep 2026 09:02:28 +0000
ROA not before: Sun 13 Sep 2026 09:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:df2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:00:f4:a7:fa:ff:fb:34:a8:86:83:a7:e9:e5:4d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ea758e905259c2993a5750627c29b6b1859a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:65:cd:f8:41:c1:50:e6:b9:db:9b:2c:23:
e8:0c:83:66:e8:d7:20:78:89:81:af:07:e9:51:a6:
15:75:42:dd:e7:09:00:61:7b:cb:b6:14:50:88:22:
34:e4:78:a0:29:f2:c2:52:3e:8d:70:d6:c1:aa:78:
95:e0:1e:c2:a9:76:51:c2:e1:b5:29:c8:f6:64:1e:
c6:dd:d4:96:70:5c:c8:50:ef:1d:cf:e1:a9:ba:0d:
bb:39:ef:34:14:b8:1f:a6:5a:b1:98:e5:55:19:e2:
25:94:07:c6:f2:c2:13:5d:df:f7:31:e3:a1:0f:6e:
c8:6d:8f:88:88:df:27:fe:e2:72:26:15:c2:b1:6e:
fb:e5:0b:ed:2c:38:1e:b2:52:ca:94:04:63:b1:6a:
f9:8c:d0:a4:4b:4c:e4:37:4c:24:d9:85:d5:7a:38:
e7:5e:31:83:59:5a:78:91:9d:04:02:6d:59:42:63:
cd:4f:02:28:5e:47:e6:b2:a5:b4:a6:c6:d4:4b:59:
70:64:8f:6a:86:a0:c2:47:a7:cd:f2:f2:e2:30:64:
10:28:03:34:27:08:26:9c:22:c4:3a:20:b7:5f:dc:
c7:8f:8c:0c:57:84:c6:ec:35:d6:78:82:69:66:ab:
b4:10:ac:2a:93:dc:0e:de:ee:18:0b:8c:e8:2b:d0:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:58:E9:05:25:9C:29:93:A5:75:06:27:C2:9B:6B:18:59:A6:2B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LqdY6QUlnCmTpXUGJ8KbaxhZpis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:df2::/48
Signature Algorithm: sha256WithRSAEncryption
11:6d:0e:28:be:2b:6a:2d:9e:96:6b:7c:0e:53:70:c1:ed:67:
94:39:bb:da:67:d5:cc:62:06:66:f2:8e:b3:49:3c:a7:13:0e:
ce:87:33:20:bc:81:2f:a3:9d:61:2f:4f:08:c3:ec:6d:30:11:
10:15:53:16:42:c3:8f:b2:99:a5:8f:b0:07:13:57:5b:df:fc:
92:7e:77:46:cf:03:31:1f:77:14:65:a7:d8:71:d5:dc:ce:d2:
35:d9:9b:11:ab:6f:54:ff:a7:91:31:f1:67:2d:18:12:15:4b:
e1:3e:a1:72:cc:8f:bd:96:86:13:ed:03:25:18:eb:f7:a0:75:
f5:b6:de:d9:45:1f:ca:fb:41:64:98:55:22:84:19:a1:f8:b2:
d2:0f:36:05:4f:8a:f3:7b:53:ce:bd:65:0f:9b:68:1a:2f:7d:
1f:24:d8:8c:89:ba:47:6e:47:65:0a:d9:c0:0f:41:a1:18:94:
e6:3c:4a:a7:80:88:dc:33:cd:2e:cf:6f:47:70:26:42:cd:e0:
14:fa:b5:57:4c:8a:4f:91:40:a9:ec:d9:6e:9d:30:f5:63:48:
8b:13:1d:61:ba:ed:a0:6e:53:2d:69:3e:d8:0b:7d:df:8d:39:
63:ed:9e:b4:93:93:ec:2a:c0:c4:ed:22:b7:14:99:30:3f:eb:
a3:73:a0:98
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCaAPSn+v/7NKiGg6fp5U2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkwMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWE3NThlOTA1MjU5YzI5OTNhNTc1MDYyN2MyOWI2YjE4NTlhNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AFlzfhBwVDmudubLCPoDINm6Ncg
eImBrwfpUaYVdULd5wkAYXvLthRQiCI05HigKfLCUj6NcNbBqniV4B7CqXZRwuG1
Kcj2ZB7G3dSWcFzIUO8dz+Gpug27Oe80FLgfplqxmOVVGeIllAfG8sITXd/3MeOh
D27IbY+IiN8n/uJyJhXCsW775QvtLDgeslLKlARjsWr5jNCkS0zkN0wk2YXVejjn
XjGDWVp4kZ0EAm1ZQmPNTwIoXkfmsqW0psbUS1lwZI9qhqDCR6fN8vLiMGQQKAM0
JwgmnCLEOiC3X9zHj4wMV4TG7DXWeIJpZqu0EKwqk9wO3u4YC4zoK9BVuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC6nWOkFJZwpk6V1BifCm2sYWaYrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTHFkWTZRVWxuQ21UcFhVR0o4S2JheGhacGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw3y
MA0GCSqGSIb3DQEBCwUAA4IBAQARbQ4ovitqLZ6Wa3wOU3DB7WeUObvaZ9XMYgZm
8o6zSTynEw7OhzMgvIEvo51hL08Iw+xtMBEQFVMWQsOPspmlj7AHE1db3/ySfndG
zwMxH3cUZafYcdXcztI12ZsRq29U/6eRMfFnLRgSFUvhPqFyzI+9loYT7QMlGOv3
oHX1tt7ZRR/K+0FkmFUihBmh+LLSDzYFT4rze1POvWUPm2gaL30fJNiMibpHbkdl
CtnAD0GhGJTmPEqngIjcM80uz29HcCZCzeAU+rVXTIpPkUCp7NlunTD1Y0iLEx1h
uu2gblMtaT7YC33fjTlj7Z60k5PsKsDE7SK3FJkwP+ujc6CY
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:30 2026 by rpki-client