Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lJEK2wbu8Pc44xMVy_2F9NkPoOc.roa
File: lJEK2wbu8Pc44xMVy_2F9NkPoOc.roa (raw, json)
Hash identifier: yCqV9CveQ3I/La4XQi3SB7lzAcfXNyhSLbR+Fcpl5/g=
Subject key identifier: 94:91:0A:DB:06:EE:F0:F7:38:E3:13:15:CB:FD:85:F4:D9:0F:A0:E7
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 019EA6D4474C63677A6F63A21552A216A3F4
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lJEK2wbu8Pc44xMVy_2F9NkPoOc.roa
Signing time: Mon 08 Jun 2026 10:43:10 +0000
ROA not before: Mon 08 Jun 2026 10:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.68.0.0/16 maxlen: 24
31.69.128.0/18 maxlen: 24
31.69.192.0/19 maxlen: 24
145.224.128.0/20 maxlen: 24
145.224.144.0/20 maxlen: 24
145.224.160.0/20 maxlen: 24
145.224.176.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
163.76.128.0/20 maxlen: 24
163.76.144.0/20 maxlen: 24
163.76.160.0/20 maxlen: 24
163.76.176.0/20 maxlen: 24
163.76.192.0/20 maxlen: 24
2a03:5d67::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:d4:47:4c:63:67:7a:6f:63:a2:15:52:a2:16:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jun 8 10:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94910adb06eef0f738e31315cbfd85f4d90fa0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:ee:af:b1:00:7e:fb:30:02:f7:23:e1:68:
96:39:ed:71:ea:c2:8e:aa:d3:78:07:f6:b5:ee:0c:
80:52:60:34:61:cf:30:59:92:e8:19:41:bf:95:e9:
68:53:59:7c:b0:86:c1:90:99:8f:5f:90:c1:cc:98:
ad:b8:8a:c4:26:58:8b:1c:c2:e4:ea:1b:16:c4:7e:
dd:f7:fc:43:0d:64:30:c3:8d:d4:5f:1d:b7:2a:79:
70:2e:c2:8e:5d:77:0f:d9:de:d3:d9:4e:4c:7c:5c:
1e:3c:3c:55:ca:cb:e4:ab:70:ef:e0:71:88:6b:a0:
a8:06:6b:69:d9:76:20:e4:7a:a5:5d:e6:3c:c0:91:
e2:c3:e0:10:a9:cc:00:cc:01:b1:33:0d:27:0b:c0:
d6:4c:c7:4b:22:a7:af:f4:73:44:4e:1b:1b:a2:52:
b5:c9:1f:47:74:7b:c6:85:dd:87:f6:77:1e:a0:66:
30:bb:07:00:1c:e1:ba:22:ba:8e:52:42:44:98:2a:
12:78:fa:24:04:85:d1:e4:f2:5f:f1:bd:dd:79:c4:
ee:06:e9:11:e7:b8:57:c3:5b:f7:fd:88:85:a2:e4:
c9:71:e8:5d:a6:a8:c9:9f:c1:02:7a:6a:df:49:1d:
a6:c1:c7:ad:38:c1:05:60:75:a8:8b:f3:f4:d4:32:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:91:0A:DB:06:EE:F0:F7:38:E3:13:15:CB:FD:85:F4:D9:0F:A0:E7
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/lJEK2wbu8Pc44xMVy_2F9NkPoOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.68.0.0/16
31.69.128.0-31.69.223.255
145.224.128.0-145.224.223.255
163.76.128.0-163.76.207.255
IPv6:
2a03:5d67::/32
Signature Algorithm: sha256WithRSAEncryption
6c:56:31:79:df:cb:0d:8b:2b:83:9a:4c:7b:61:33:c8:24:66:
a6:ba:f6:c5:99:d2:b9:54:36:06:58:4a:24:0d:de:3a:18:f0:
67:96:d7:6d:c0:89:43:5b:ff:4d:39:06:09:8d:ca:b1:80:76:
df:bc:09:c7:1f:b3:9e:b5:59:14:12:39:56:37:ee:f7:05:74:
33:f5:40:6c:11:02:1c:51:42:03:f0:c9:b7:d4:30:53:84:f8:
92:b3:3e:c2:94:8d:bd:77:34:f2:04:9d:e2:55:b0:16:6f:31:
28:36:d5:bc:9a:95:57:56:83:f3:ff:29:30:8b:fe:60:77:bb:
7b:4a:1d:b4:8a:0d:df:23:4a:ba:ac:14:2f:6c:b8:e3:91:e2:
25:d7:f1:a5:65:70:fa:1c:24:99:ba:5a:82:df:94:d3:69:56:
88:fa:4b:8d:b5:0c:55:c7:9a:5e:c6:ce:96:b5:e8:b6:7b:c2:
aa:11:a7:7f:61:c3:e1:57:1b:1b:e4:89:eb:79:01:ba:8a:72:
02:54:6a:79:5a:1e:ae:f9:37:b7:66:38:5c:51:52:65:f7:a7:
29:6d:3e:43:60:8d:7e:cf:29:55:db:d5:4b:bf:b4:0e:0c:74:
d3:08:a7:28:3a:06:5e:dd:8b:f5:6f:00:7d:2f:da:c4:42:8e:
ef:59:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 02:42:26 2026 by rpki-client