Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa
File: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (raw, json)
Hash identifier: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=
Subject key identifier: 94:79:51:B0:BF:8C:AB:62:17:2C:DF:C5:0A:09:37:9F:94:96:E4:EC
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 019C81C39F7345134D2B026988E3AADF23B3
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa
Signing time: Sat 21 Feb 2026 19:53:27 +0000
ROA not before: Sat 21 Feb 2026 19:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2a14:e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c3:9f:73:45:13:4d:2b:02:69:88:e3:aa:df:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Feb 21 19:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=947951b0bf8cab62172cdfc50a09379f9496e4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:cf:8f:05:e5:8d:99:bb:15:ee:3a:3a:5e:
3c:d7:e5:1f:9c:63:b8:30:00:6b:a9:9a:4a:99:92:
57:50:9d:3b:3d:47:79:2f:26:02:48:7a:f8:48:1d:
a8:13:70:34:94:18:7c:b0:b1:80:1e:25:fc:f9:c8:
7f:db:84:6d:ea:c0:bb:12:1e:ef:87:eb:70:ad:bf:
95:82:a1:be:2a:cc:77:ac:41:15:41:50:d4:b0:62:
09:2b:b7:0d:25:6d:05:49:ab:c0:a0:81:b5:3a:48:
7f:85:b4:d1:47:9f:ae:6e:1f:cd:eb:60:6d:c8:dc:
25:4a:e4:f0:cd:d2:4a:01:81:2d:f7:10:80:53:e9:
52:58:25:cf:c8:29:88:09:18:5e:b7:8b:20:8f:c0:
f6:b8:58:12:bd:94:1c:17:7d:4c:a8:e3:42:a1:e6:
b4:ca:53:6d:0f:f5:82:c4:99:bd:a5:e5:00:18:a1:
e0:ab:8f:19:b0:d1:8f:92:85:f1:40:8c:70:1f:54:
7e:78:50:06:6b:ce:39:6a:be:84:8f:97:48:1d:70:
f6:08:4e:db:d9:84:a6:76:4e:07:31:56:6b:8d:3d:
fc:c1:ff:56:0e:62:bd:e5:11:78:68:94:5b:f5:0a:
74:28:72:11:9e:bb:ea:7e:7e:55:d6:ba:2e:e6:ae:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:51:B0:BF:8C:AB:62:17:2C:DF:C5:0A:09:37:9F:94:96:E4:EC
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e00::/29
Signature Algorithm: sha256WithRSAEncryption
79:22:17:9f:dd:e0:ab:74:b2:45:b6:16:9a:f0:c9:c0:9c:74:
57:61:6f:3f:4c:e0:5e:10:9c:2f:1a:93:7d:1e:20:95:bd:38:
03:97:6e:6d:cb:fa:ab:5c:d8:6b:4b:ea:fa:0f:8b:54:90:fd:
02:19:25:e0:63:f1:fd:b7:5f:1b:c7:2d:04:85:c9:77:bb:be:
5f:ef:35:5e:57:bb:6b:0b:0c:86:9a:fb:e4:b4:a4:74:18:10:
7c:d3:3e:bd:39:89:29:dd:12:34:55:6a:ee:8f:e0:4d:9e:e7:
3d:76:5b:30:38:88:5a:4c:e9:fd:24:d9:ef:07:8e:98:de:f6:
84:b0:6c:08:41:76:8a:2d:32:83:e5:1c:8a:de:02:41:6e:66:
45:85:00:0f:ed:a4:58:7e:f2:eb:5b:68:df:5f:ca:52:f6:ad:
e4:54:8b:1e:c7:bf:80:2d:76:f5:af:fd:30:21:58:0d:3a:52:
9c:0b:d4:da:98:3c:21:44:71:27:f8:14:2a:dc:83:51:a9:7f:
ec:20:c0:6a:01:fb:8d:95:70:58:6c:dd:2f:d9:dd:bc:9e:79:
5a:11:25:2b:d9:e5:c3:45:64:fe:12:08:60:6e:e9:9c:f7:e5:
d8:6f:c0:7c:d8:3d:f7:b3:37:9c:49:06:4a:0f:7c:a3:c5:96:
d3:ac:ba:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:52:46 2026 by rpki-client