Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/laVT8PutwSiKZm5iWyERcaskMo4.roa
File: laVT8PutwSiKZm5iWyERcaskMo4.roa (raw, json)
Hash identifier: rNMpWW6dekfMOeEluSAOoZIOwRihLFiRxuXZambWDkQ=
Subject key identifier: 95:A5:53:F0:FB:AD:C1:28:8A:66:6E:62:5B:21:11:71:AB:24:32:8E
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019D403E4B71D7B202480E9FDAB22B9E9261
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/laVT8PutwSiKZm5iWyERcaskMo4.roa
Signing time: Mon 30 Mar 2026 19:35:17 +0000
ROA not before: Mon 30 Mar 2026 19:35:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29006
IP address blocks: 217.27.240.0/20 maxlen: 20
217.168.16.0/20 maxlen: 20
2a01:6c8::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:3e:4b:71:d7:b2:02:48:0e:9f:da:b2:2b:9e:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Mar 30 19:35:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a553f0fbadc1288a666e625b211171ab24328e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:2e:75:0e:82:b3:f6:42:23:c1:28:61:95:
c3:3f:da:27:e0:98:4d:94:3c:10:e2:a1:a5:08:bd:
93:b2:9e:9a:15:5d:dc:9b:8d:42:bf:1c:a4:17:68:
88:bd:6a:9d:0b:5c:9b:e2:fc:86:bf:58:1e:dc:14:
0b:b4:5e:42:e0:64:b7:c0:19:05:3d:da:01:8b:8c:
15:0a:77:13:98:6b:6b:4b:5e:e0:52:f9:ae:0d:a9:
51:00:cf:c8:8e:54:79:28:6b:7f:e5:6e:1b:02:cf:
c8:92:ed:d4:00:d4:a6:ed:73:d2:87:84:6f:4f:7a:
fb:db:98:79:35:32:06:ff:c2:f2:8f:12:95:3c:2b:
45:96:db:03:39:0c:9f:b1:0e:83:76:d4:71:d4:e9:
46:ec:22:f5:8b:df:76:dd:2d:c3:d3:86:79:c7:3c:
22:c1:bd:fe:ca:67:f3:57:98:f2:b7:f4:ad:89:a8:
ce:db:16:99:8a:ce:e5:2b:7c:1b:3a:bd:33:65:0c:
bb:6e:de:44:1c:f1:31:4e:2f:2b:5b:89:09:d2:9f:
23:e1:d5:de:a2:59:4b:1b:66:e0:b2:2a:cb:18:32:
ca:a7:0c:02:b9:b8:8f:93:69:f7:5b:1c:1f:6d:05:
00:52:8f:7a:d0:a9:23:a0:5d:cf:34:13:0c:53:31:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:53:F0:FB:AD:C1:28:8A:66:6E:62:5B:21:11:71:AB:24:32:8E
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/laVT8PutwSiKZm5iWyERcaskMo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.27.240.0/20
217.168.16.0/20
IPv6:
2a01:6c8::/36
Signature Algorithm: sha256WithRSAEncryption
42:7d:5d:96:a8:a4:83:d7:9d:7c:e3:e2:1f:84:f3:51:3a:f3:
1e:d6:ff:5d:59:e4:e7:51:0a:be:3d:ad:d9:48:88:74:63:d8:
d8:14:a0:84:b0:0e:c6:20:37:ee:79:b4:78:98:5e:23:b7:8d:
35:26:1d:1a:f8:0a:ce:7f:a2:a6:05:d1:c9:58:66:bd:61:dc:
b3:d7:7f:59:54:58:d6:54:e0:85:46:ba:1b:61:e7:ab:cb:92:
1a:bd:b6:de:9e:28:35:e2:50:0e:84:62:41:01:21:be:a4:bd:
c0:fd:50:ce:49:ad:97:fa:de:ae:60:83:24:d2:e9:ad:2d:f2:
9d:cb:74:78:09:61:d3:65:9f:8c:d6:d1:3f:5c:63:4f:35:17:
26:2f:9e:80:1e:1f:6f:69:45:86:db:49:68:04:8d:3b:56:56:
18:99:c0:8b:dc:9f:02:01:e7:d0:70:20:f3:ba:1c:e8:63:e1:
9e:d2:d0:11:59:00:24:ca:85:cb:94:04:25:6f:82:0e:e8:48:
24:8f:8c:29:da:f9:b5:2f:a6:24:e5:36:9b:db:13:35:fb:34:
8f:55:a0:88:f9:c4:b6:22:5b:6f:29:e7:d2:80:9f:a6:c9:23:
6d:c8:3a:c0:e2:98:4f:24:a5:1f:06:5e:81:ad:a5:33:50:07:
c2:19:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:53 2026 by rpki-client