Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LR-j39wnWrv1oeGZaCNupB40Vnc.roa
File: LR-j39wnWrv1oeGZaCNupB40Vnc.roa (raw, json)
Hash identifier: kJKzVqiBh50Xc/O2JGvOp/beWmRs2SYou/UdKNtGSts=
Subject key identifier: 2D:1F:A3:DF:DC:27:5A:BB:F5:A1:E1:99:68:23:6E:A4:1E:34:56:77
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019DF8336B15DCC186E9DF5A7B7E4FAC2491
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LR-j39wnWrv1oeGZaCNupB40Vnc.roa
Signing time: Tue 05 May 2026 12:53:32 +0000
ROA not before: Tue 05 May 2026 12:53:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 170.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:33:6b:15:dc:c1:86:e9:df:5a:7b:7e:4f:ac:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 5 12:53:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d1fa3dfdc275abbf5a1e19968236ea41e345677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:a0:61:0c:cb:2d:8f:5e:93:9a:0e:94:3f:
88:6b:fa:14:b7:13:c0:0e:05:7f:09:63:6c:98:2e:
35:b8:a6:fc:18:19:50:d3:80:e1:6c:ba:92:fe:52:
e8:19:24:41:9f:6d:09:36:e4:94:50:5c:ce:4d:60:
7f:c5:68:44:3c:6e:cc:53:ca:34:28:91:ea:b3:45:
15:2b:75:e0:9e:f5:6c:6e:83:ed:e2:4a:af:15:20:
ec:1a:e7:0b:2f:3f:da:23:52:3c:9a:cc:4d:64:7d:
97:d8:ca:1e:ad:e8:77:7e:75:e3:6b:2f:37:e9:ed:
34:ac:f9:ef:71:da:03:ac:f7:5f:ad:18:dd:c5:05:
8d:42:fe:b2:06:da:53:9a:f5:78:78:51:4b:e0:60:
2e:c8:b9:b6:5b:16:6b:67:73:e7:9e:41:41:b1:39:
02:27:21:88:46:fb:bc:9b:fd:9b:68:9a:78:9c:18:
8a:7c:2e:95:ca:da:f1:ce:4f:8e:e5:51:cd:2e:16:
29:96:78:3a:09:cf:5d:71:09:3f:9b:91:f5:82:48:
98:3c:8a:dd:ba:f5:4f:d0:86:6d:e6:c7:83:d0:12:
64:32:b2:17:cc:2c:6a:88:b0:d4:ee:ac:c1:02:89:
7f:03:13:b7:d1:54:1c:ad:33:e2:7d:4c:97:66:4b:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:A3:DF:DC:27:5A:BB:F5:A1:E1:99:68:23:6E:A4:1E:34:56:77
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LR-j39wnWrv1oeGZaCNupB40Vnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
35:99:0f:69:06:b3:bc:84:57:e5:8a:43:ad:2d:0b:2a:87:57:
79:3b:da:43:80:b3:97:02:f8:d3:77:56:45:e7:c6:6e:6d:bc:
88:07:32:0a:58:90:28:7b:0f:b8:c1:b0:2b:08:bf:0b:83:c0:
60:8b:43:9a:70:00:7f:e3:5a:a5:ee:70:b3:4d:07:a3:d5:6d:
2c:a6:dd:7a:c4:6e:42:10:b3:ff:7a:16:b8:1b:b8:15:ef:76:
0c:e2:2f:74:f4:62:6f:25:09:eb:87:60:ff:59:c2:99:e7:93:
73:98:8a:f4:0b:58:e2:bd:ca:0c:a9:8a:14:a0:84:1d:c3:1e:
ca:ec:93:2b:ac:c3:ed:12:c3:8c:2d:75:c4:d1:1e:cb:51:ad:
17:f9:4f:13:64:20:5a:9b:19:ce:57:af:d8:8c:e3:69:56:60:
74:93:b4:eb:3e:f3:b5:21:2e:7f:17:83:e3:c0:e1:e2:67:f9:
e8:48:77:4e:69:63:d9:69:60:e1:b4:29:ef:83:df:b3:87:ba:
e5:e0:56:08:51:45:fa:ba:f5:9f:ae:01:be:64:34:88:f6:5c:
3b:39:d5:79:f5:67:21:23:82:e1:96:05:d8:37:f8:54:95:99:
3f:3f:ca:8e:53:db:32:42:e1:7b:f1:d3:3e:17:99:75:fa:39:
22:49:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:14:52 2026 by rpki-client