Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/yL0FdcxXP9eNvZYj4E60TDMQXgU.roa
File: yL0FdcxXP9eNvZYj4E60TDMQXgU.roa (raw, json)
Hash identifier: Xyn3k5mkiJ79FDH1bRu/Tkqax3eUA/J4aT2yU7VGK18=
Subject key identifier: C8:BD:05:75:CC:57:3F:D7:8D:BD:96:23:E0:4E:B4:4C:33:10:5E:05
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 019EA6D446541759564B6CC9D362921BBC4F
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/yL0FdcxXP9eNvZYj4E60TDMQXgU.roa
Signing time: Mon 08 Jun 2026 10:43:09 +0000
ROA not before: Mon 08 Jun 2026 10:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.68.0.0/16 maxlen: 24
31.69.128.0/18 maxlen: 24
31.69.192.0/19 maxlen: 24
145.224.128.0/20 maxlen: 24
145.224.144.0/20 maxlen: 24
145.224.160.0/20 maxlen: 24
145.224.176.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
163.76.128.0/20 maxlen: 24
163.76.144.0/20 maxlen: 24
163.76.160.0/20 maxlen: 24
163.76.176.0/20 maxlen: 24
163.76.192.0/20 maxlen: 24
2a03:5d67::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:d4:46:54:17:59:56:4b:6c:c9:d3:62:92:1b:bc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jun 8 10:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8bd0575cc573fd78dbd9623e04eb44c33105e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:5b:23:be:e0:82:8f:38:6c:cd:be:be:d5:
6d:b5:47:40:b2:cf:3c:66:9f:ba:36:95:99:30:2f:
19:3f:25:fc:fc:2d:31:6d:fc:ce:25:db:cd:8c:c8:
ed:34:3a:78:d6:5e:84:2b:41:db:3d:19:31:63:e3:
72:a8:b8:ca:87:f0:71:60:d8:1f:ec:b6:71:1c:f9:
60:a3:10:bd:3a:da:07:4a:79:ea:ac:65:db:55:ea:
b8:b4:e1:2e:ae:b1:ad:93:b1:b8:aa:27:af:24:f5:
03:f3:c4:ec:9c:43:26:8f:ff:1e:03:ef:ea:c4:7c:
16:76:f6:ee:06:66:46:89:af:f8:78:60:5a:72:67:
92:18:5d:df:71:f4:b6:2e:d5:ad:20:c5:ab:3b:cf:
0a:35:e6:bf:a3:da:19:f4:eb:34:49:7b:5d:ab:a5:
52:f4:1d:bb:79:24:49:3f:df:f9:a4:d2:35:b4:b7:
8b:9b:30:a4:8b:c7:80:de:a3:a3:74:ae:72:02:df:
57:56:08:b9:ef:bd:08:2a:d9:67:a3:9e:3c:c5:ca:
90:42:63:00:bd:63:b6:4b:16:11:5b:c8:0d:12:b3:
f4:6f:13:c0:d7:e6:23:3c:c2:42:cd:21:4b:a0:7e:
0b:6a:e3:e8:78:00:c4:c4:42:4d:88:c8:78:39:cd:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:05:75:CC:57:3F:D7:8D:BD:96:23:E0:4E:B4:4C:33:10:5E:05
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/yL0FdcxXP9eNvZYj4E60TDMQXgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.68.0.0/16
31.69.128.0-31.69.223.255
145.224.128.0-145.224.223.255
163.76.128.0-163.76.207.255
IPv6:
2a03:5d67::/32
Signature Algorithm: sha256WithRSAEncryption
99:59:d4:7f:03:63:f8:7f:f5:a4:a8:20:5f:76:2d:97:b5:2f:
25:fc:6d:77:14:6c:1c:96:b8:2d:ee:55:c9:23:9d:27:f5:45:
47:72:8a:a0:5a:b2:a5:5f:91:56:96:ef:8c:d1:8b:29:24:f4:
45:b4:3d:5f:a4:dd:f9:e9:c8:67:a7:f9:21:3c:6a:f3:63:2b:
6f:fd:dd:44:82:83:83:e4:24:97:10:ed:75:db:f5:4e:c8:32:
51:ea:60:25:93:45:32:07:38:4c:d9:05:ad:ee:88:5f:1e:2c:
78:88:61:68:0f:78:73:3b:53:9a:f0:23:36:7c:55:ce:ed:31:
cc:f1:da:00:1b:3e:15:a2:36:c0:33:a5:8a:27:82:66:18:6b:
07:c4:f4:72:f1:32:89:f8:ff:e7:2b:58:a8:ce:47:36:00:cb:
f1:a3:97:b5:43:63:15:4a:69:af:b2:b6:06:df:50:69:8a:28:
34:d7:4f:b7:0c:77:14:9a:55:3b:7d:5f:9d:c9:e2:1f:fa:52:
5b:ed:4c:aa:f7:c5:2e:97:85:15:57:81:82:f7:86:d0:a5:a2:
ec:c8:7b:d7:f9:b4:3f:78:9e:af:db:1c:f7:32:c4:45:4b:67:
37:e8:75:e6:bf:5a:e1:ac:0b:c2:99:7e:ea:4f:b6:6c:c9:e3:
b7:6e:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 02:48:29 2026 by rpki-client