Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/p-Ln8gMwcxh25XojvNKPYPhBetM.roa
File: p-Ln8gMwcxh25XojvNKPYPhBetM.roa (raw, json)
Hash identifier: 5FiAFCofU79NZF0gfy5Zl2VsARTHxYy7/SbCEFmVzL8=
Subject key identifier: A7:E2:E7:F2:03:30:73:18:76:E5:7A:23:BC:D2:8F:60:F8:41:7A:D3
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E30E9FA0399585F3269A3C0B66A8
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/p-Ln8gMwcxh25XojvNKPYPhBetM.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3305
IP address blocks: 2a00:ec81::/32 maxlen: 32
2a04:800:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:0e:9f:a0:39:95:85:f3:26:9a:3c:0b:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e2e7f20330731876e57a23bcd28f60f8417ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:9c:59:39:a0:54:66:1f:98:c3:66:61:e8:
d6:71:ed:ef:a2:c6:99:03:a9:5e:54:e1:77:42:29:
a3:60:e3:6f:f4:4f:6d:c5:3e:5a:81:0c:8b:fc:ed:
7a:04:08:b6:3f:e9:4d:16:a1:5a:58:1a:97:9d:8c:
7f:52:71:55:14:0a:2e:e8:d5:50:51:70:a8:dd:f4:
47:2a:fc:3e:d7:58:ea:53:f4:44:bd:bc:bf:6b:83:
68:4d:a4:e9:c2:06:0a:30:13:d1:5b:a0:64:da:c5:
36:63:e6:35:21:ee:16:9c:d9:7f:c6:7f:83:db:f5:
c9:17:0a:64:fa:6e:ca:cd:d3:62:59:8b:bc:78:f8:
a3:82:61:8a:78:72:a9:5a:90:f0:e3:7c:81:98:97:
ba:1d:52:a3:67:50:bf:9d:38:f2:cc:a9:76:7d:b8:
81:6e:46:f7:cb:21:69:c8:09:cb:92:9b:89:7c:11:
03:a1:fc:01:e0:01:b0:27:d2:b6:9c:8f:6b:e4:b5:
9b:97:86:4b:01:ea:e4:3f:76:41:9a:6e:54:8f:30:
f2:f5:25:10:a7:57:33:e4:2f:dd:3d:56:a6:6b:e7:
76:2f:2d:d5:59:99:0f:a9:21:23:04:3a:a9:27:6b:
98:16:6a:d6:df:71:5b:b7:2e:cd:2d:2c:d8:a8:d7:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:E7:F2:03:30:73:18:76:E5:7A:23:BC:D2:8F:60:F8:41:7A:D3
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/p-Ln8gMwcxh25XojvNKPYPhBetM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec81::/32
2a04:800:3000::/36
Signature Algorithm: sha256WithRSAEncryption
16:2f:40:f0:e8:1d:ee:97:2c:c5:b7:65:e1:bd:e8:37:8e:ac:
4e:77:d3:e1:44:12:bd:43:5a:75:a0:1a:9f:30:b3:a8:25:09:
a6:7f:80:93:64:d8:8a:59:ea:e3:13:5d:52:0e:1d:89:ed:33:
d7:31:fd:08:fc:64:50:07:93:8b:69:08:ae:ed:71:8a:20:ff:
0b:63:cf:80:99:4e:89:6f:b0:11:6b:92:d6:97:37:5f:aa:a0:
0f:59:c4:16:f2:30:3c:83:f1:86:4a:78:de:46:34:06:ec:2f:
65:02:34:03:51:bb:ef:60:b8:6e:b9:d4:5f:be:16:cc:d9:b1:
11:c1:c1:3a:4d:9e:59:65:94:68:f7:3e:68:58:46:c6:d0:3f:
c1:11:31:10:4b:45:72:57:86:62:98:e9:da:10:43:19:34:5f:
9b:ec:32:3a:06:b7:80:76:6d:4e:84:da:f7:8b:e3:db:dd:bd:
9f:95:45:99:24:18:4e:2e:3f:33:1f:a1:03:05:79:56:77:99:
8d:51:50:a0:bf:67:4f:92:d3:c2:61:28:a9:70:7e:87:c0:1f:
0a:3b:f0:fd:1a:46:b6:c9:3e:4d:e7:87:b3:0c:b3:e2:63:6e:
05:ff:5f:88:3f:2b:71:59:09:d7:2c:24:24:61:77:50:78:ca:
13:b4:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:48 2026 by rpki-client