Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LLe4AJ4XZW8eODLT3g4HaGEYv4Y.roa
File: LLe4AJ4XZW8eODLT3g4HaGEYv4Y.roa (raw, json)
Hash identifier: UBiZRrAfC7RxuGaUlPaGjTYOH5ZnQnGrODinfa9BdGQ=
Subject key identifier: 2C:B7:B8:00:9E:17:65:6F:1E:38:32:D3:DE:0E:07:68:61:18:BF:86
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A02034D4F1F0399BEFED4381716416688C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LLe4AJ4XZW8eODLT3g4HaGEYv4Y.roa
Signing time: Thu 20 Aug 2026 17:25:28 +0000
ROA not before: Thu 20 Aug 2026 17:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204916
IP address blocks: 2a11:ab87::/32 maxlen: 32
2a12:d806::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:34:d4:f1:f0:39:9b:ef:ed:43:81:71:64:16:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 20 17:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb7b8009e17656f1e3832d3de0e07686118bf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:05:c7:94:e7:15:c3:bb:29:dd:af:ab:e3:
73:b9:09:f1:47:05:31:fe:53:f9:b2:d0:ff:42:fe:
4f:5f:64:e2:46:44:f9:85:18:43:20:c1:30:8f:de:
89:72:1f:13:f8:c7:a1:17:11:a9:4b:a4:09:e8:f1:
d5:9a:1f:39:81:3e:25:51:4b:5a:52:97:6c:3c:2f:
51:78:8a:ec:a9:f1:47:13:a7:30:76:89:8c:60:d2:
0e:18:cd:ae:02:d1:89:c3:12:9a:87:b0:09:47:a7:
2c:ee:34:b6:fe:b6:54:06:77:ec:de:08:70:d8:b5:
b1:da:44:6d:73:21:39:dc:ed:1d:ac:cc:be:6e:c6:
f3:08:a9:8c:fd:fe:9e:0e:45:c3:f7:7f:f1:3f:37:
81:96:f2:2c:2a:99:6d:26:94:5e:0d:8a:fd:06:72:
34:d6:7c:6c:57:04:8f:d5:84:e4:32:d9:86:77:d9:
36:fd:e3:08:ae:22:ca:16:33:44:8f:cb:e0:7d:f1:
10:d9:dc:c3:40:7e:93:2a:e0:9c:91:55:68:60:04:
55:1c:e8:61:b2:de:6d:62:30:e6:a5:8b:42:c3:df:
ff:6d:37:8d:ad:98:bf:4c:b8:df:8b:e9:81:aa:28:
62:c0:8f:99:98:4c:cc:a5:ca:60:a8:21:6d:aa:4a:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:B8:00:9E:17:65:6F:1E:38:32:D3:DE:0E:07:68:61:18:BF:86
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LLe4AJ4XZW8eODLT3g4HaGEYv4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ab87::/32
2a12:d806::/32
Signature Algorithm: sha256WithRSAEncryption
7f:03:91:13:ee:21:b7:fe:43:0e:bb:9e:cb:45:f8:54:98:9e:
25:f3:fd:b7:6d:a2:d7:b6:84:48:3d:37:d0:4f:fd:f6:b4:49:
44:d2:c4:40:f1:46:24:5c:c2:62:af:97:99:f9:94:41:d8:fd:
06:1a:d3:3d:b3:f7:8c:f3:40:ef:49:d1:ea:11:90:21:01:41:
b2:f0:bf:35:bf:cb:96:b0:65:35:a4:fc:b4:f7:8b:a8:9f:fd:
4f:25:a2:02:f5:a1:eb:18:d1:df:66:64:43:aa:68:72:8f:ad:
b4:56:ab:19:a2:2c:91:d5:1c:9f:08:7e:5d:d6:c4:88:14:98:
a5:ff:70:ab:6e:71:df:8c:98:a0:71:b5:dc:41:3c:0a:fc:6f:
7a:33:0b:e8:0e:76:87:fa:7c:1c:33:c9:ff:db:0e:6b:dd:9f:
45:cd:9b:df:d9:6b:b6:db:49:0e:95:8e:9a:fc:4d:c5:f8:15:
d4:5a:2a:4c:1d:ad:06:5a:fa:8c:d6:af:9d:00:e2:13:e7:e2:
89:5f:f5:d0:5e:31:57:38:c9:c8:3d:61:dd:d5:96:b7:83:e6:
87:f6:f5:d6:54:46:6a:88:e3:8d:14:2b:21:5f:ec:75:6e:c1:
7a:4e:b9:e2:e8:1c:e6:ca:62:62:4d:97:8e:8c:39:f4:22:a9:
5b:b7:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:53 2026 by rpki-client