Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lMuFL7orqJl35n35v9Z-y7TOado.roa
File: lMuFL7orqJl35n35v9Z-y7TOado.roa (raw, json)
Hash identifier: 4tjq72ISVWcp+7In22UyEcZOt4SFRX4sxgL6ctEYqL4=
Subject key identifier: 94:CB:85:2F:BA:2B:A8:99:77:E6:7D:F9:BF:D6:7E:CB:B4:CE:69:DA
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD8ECF24C6A22DD75EAF30EB9E5A3EA1B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lMuFL7orqJl35n35v9Z-y7TOado.roa
Signing time: Thu 06 Aug 2026 21:13:54 +0000
ROA not before: Thu 06 Aug 2026 21:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:b844::/32 maxlen: 32
2a11:7d06::/32 maxlen: 32
2a11:bdc1::/32 maxlen: 32
2a12:e84::/32 maxlen: 32
2a12:6487::/32 maxlen: 32
2a12:bc83::/32 maxlen: 32
2a12:cf86::/32 maxlen: 32
2a12:d804::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:ec:f2:4c:6a:22:dd:75:ea:f3:0e:b9:e5:a3:ea:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 21:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94cb852fba2ba89977e67df9bfd67ecbb4ce69da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:dd:a2:01:75:42:c5:c9:28:ed:ec:14:5e:
ff:64:99:c6:8d:09:04:67:b3:22:d3:f9:04:b8:7e:
c2:01:ab:1b:2d:e9:3b:32:aa:72:b4:4c:81:79:2c:
ad:cb:4c:5f:eb:53:d8:46:24:63:4d:bb:ee:e1:a9:
78:fe:4c:4e:50:b2:1c:22:89:ae:07:74:3d:ac:82:
b6:f6:bd:b8:f1:77:40:4c:2a:b1:32:e3:f3:fd:3c:
cd:62:b2:d9:4b:ce:48:eb:d7:60:d6:e6:61:35:38:
cd:a9:53:59:83:b7:81:55:4c:c8:b2:36:39:65:af:
cf:a0:ba:ed:eb:b5:2c:cd:c4:f5:fc:9a:78:39:d1:
1b:79:41:45:3e:e2:64:b5:20:00:c3:e7:9c:68:cb:
05:a4:68:04:d0:99:21:aa:ff:b9:0c:5b:1f:d0:44:
2d:f9:a6:04:45:c1:42:48:a5:f2:2c:9e:ff:47:66:
08:98:ab:7d:85:12:2c:48:cb:47:dd:dc:6f:10:6b:
5a:5d:34:71:67:6b:0a:28:87:89:7a:14:14:ff:ba:
ec:40:9b:e2:95:0a:72:10:72:0a:35:e3:3a:68:8c:
09:d3:f7:fc:00:0b:3e:d8:bd:c3:7c:e1:d3:3d:73:
cd:14:57:16:5f:df:78:28:6f:2d:bc:24:9d:80:63:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:85:2F:BA:2B:A8:99:77:E6:7D:F9:BF:D6:7E:CB:B4:CE:69:DA
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lMuFL7orqJl35n35v9Z-y7TOado.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b844::/32
2a11:7d06::/32
2a11:bdc1::/32
2a12:e84::/32
2a12:6487::/32
2a12:bc83::/32
2a12:cf86::/32
2a12:d804::/32
Signature Algorithm: sha256WithRSAEncryption
1e:09:ec:31:d9:3f:b3:2a:b4:f9:36:af:87:43:a0:27:d4:6e:
c7:8a:62:85:cc:7f:f4:f8:74:97:11:89:4c:b5:bc:3b:ee:a9:
27:12:81:b0:7a:a6:c2:dd:6b:40:b9:26:4c:46:fe:aa:6b:29:
be:1b:40:53:13:58:18:26:5e:45:1a:67:5d:37:db:d5:db:0f:
99:d6:c1:1d:84:d7:e7:79:99:0b:7b:01:11:1e:ea:78:4f:5a:
cd:8c:4a:50:19:59:46:9f:90:3a:6a:4f:02:b3:ba:06:de:e3:
78:30:72:9e:e3:2f:e9:e2:d2:93:40:9c:bd:06:f7:1b:90:6c:
66:c4:45:aa:fb:51:17:c7:84:b4:1d:ce:d4:d6:13:bd:1d:d9:
84:54:4c:2b:92:a1:8e:d5:a0:50:58:02:8c:f4:7a:3d:4f:06:
0b:ed:b0:cf:f3:c6:6a:4f:d3:a8:68:6e:bd:ea:a1:a3:15:23:
76:d9:20:de:4a:d6:78:8b:16:cd:77:8a:07:ca:7c:14:e8:11:
16:ea:da:e0:2f:2d:d5:e1:b0:e7:c8:a8:80:58:25:c1:57:f6:
53:e3:24:14:cb:fa:07:f4:19:cb:be:44:1e:92:47:56:eb:ba:
30:4b:3d:0d:ea:d8:60:25:92:fa:17:6e:76:eb:a1:7c:51:0b:
ea:03:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:00 2026 by rpki-client