Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Lpz2qCyi_pclLucNORkTQKN3m6Y.roa
File: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (raw, json)
Hash identifier: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=
Subject key identifier: 2E:9C:F6:A8:2C:A2:FE:97:25:2E:E7:0D:39:19:13:40:A3:77:9B:A6
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019EFE107A199F64A9EF71D2D4CA82EDF06B
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Lpz2qCyi_pclLucNORkTQKN3m6Y.roa
Signing time: Thu 25 Jun 2026 09:15:53 +0000
ROA not before: Thu 25 Jun 2026 09:15:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a00:6be0::/32 maxlen: 32
2a04:d780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:10:7a:19:9f:64:a9:ef:71:d2:d4:ca:82:ed:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Jun 25 09:15:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e9cf6a82ca2fe97252ee70d39191340a3779ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:30:28:0e:71:87:0d:b7:47:41:3c:f7:3a:
98:82:29:53:c5:f7:1a:c7:37:69:45:1d:9f:62:fd:
12:81:cc:26:49:3b:07:cc:9b:f7:c6:80:94:d7:de:
17:f8:53:d9:23:29:46:85:6f:6b:e1:bc:85:98:62:
a0:3a:87:f2:21:38:6a:c6:c1:cc:63:73:61:33:a8:
77:b4:4d:9e:5e:f0:8d:93:d5:dc:68:28:fb:3c:8c:
44:8d:18:da:3c:ce:c3:2b:c6:a4:3a:39:e7:9c:ba:
82:49:10:2c:6c:1f:23:55:9d:d7:ba:3f:1f:13:66:
5c:c1:b5:1a:d9:54:41:9d:1e:60:ed:dd:cb:eb:0c:
50:e0:5b:f4:22:5a:3a:67:fd:76:ea:69:a7:43:f6:
38:00:55:f8:eb:32:21:ca:b8:1f:da:7b:9b:9b:3e:
f9:65:b1:ce:f4:02:12:c1:e1:03:ba:ec:80:e0:2d:
4e:4a:f5:55:c4:ab:82:a2:b5:a8:47:15:72:f6:01:
95:60:ed:56:7d:82:a7:65:39:d0:cb:43:83:0a:c1:
46:c1:ce:42:bb:eb:d9:48:3c:5a:c3:bc:4f:80:69:
79:eb:21:58:d9:94:7f:13:3b:d2:3d:bd:b6:89:08:
6d:bd:f1:46:23:3d:57:ed:12:59:a1:ef:53:a0:f5:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:F6:A8:2C:A2:FE:97:25:2E:E7:0D:39:19:13:40:A3:77:9B:A6
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Lpz2qCyi_pclLucNORkTQKN3m6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:6be0::/32
2a04:d780::/29
Signature Algorithm: sha256WithRSAEncryption
97:e6:c0:7d:1d:10:a5:1d:24:e1:fa:fb:75:e1:d6:a8:32:81:
34:36:e7:8d:59:73:2d:35:94:06:70:0f:70:a9:4c:99:c6:c8:
7a:b3:2d:b4:93:8d:73:41:62:f6:e5:2b:71:e4:ba:4e:da:83:
10:85:3e:61:4e:de:28:7d:0f:1d:ba:e4:56:42:66:ba:22:8b:
71:46:ec:88:7b:02:8f:6d:3c:d1:5c:fa:03:8a:24:f1:ae:e5:
81:72:d3:a2:43:fc:96:fb:1d:eb:59:1a:93:8b:a9:3d:f8:c3:
b2:ae:6b:a6:d5:87:04:93:9f:45:69:32:04:16:cd:ea:de:7e:
e4:f7:2d:83:87:62:30:7c:5a:f2:a7:35:fb:06:17:2d:a3:c3:
23:e6:c7:4d:2b:96:e7:52:55:1c:c7:33:81:09:26:f9:12:1f:
4f:dc:19:f9:7b:74:aa:63:c8:88:e8:23:1c:a7:f2:46:26:54:
b4:f5:b0:be:3c:d0:13:61:2b:0b:e6:20:7b:70:ac:c8:4e:33:
09:77:03:5c:8e:08:d2:0b:b4:af:9c:78:99:4e:c3:31:f7:45:
df:2a:95:63:cf:6f:d4:00:4d:de:1b:f2:06:ea:74:a6:81:ac:
2a:28:86:14:ef:ea:ca:5e:a3:6b:9e:80:b8:ad:90:dd:64:9c:
17:cc:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:20 2026 by rpki-client