Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/lWr4T5NYOmXmlAYyYQWlxejw1BI.roa
File: lWr4T5NYOmXmlAYyYQWlxejw1BI.roa (raw, json)
Hash identifier: 770wW1gHirnDOoWXVO3FowhcJur6VTlLtB/KZU4KJCo=
Subject key identifier: 95:6A:F8:4F:93:58:3A:65:E6:94:06:32:61:05:A5:C5:E8:F0:D4:12
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B399E0C6EF3D9EF635D9CD0DA0F5
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/lWr4T5NYOmXmlAYyYQWlxejw1BI.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:27c0:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:99:e0:c6:ef:3d:9e:f6:35:d9:cd:0d:a0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=956af84f93583a65e69406326105a5c5e8f0d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:70:70:d1:ee:44:f7:f2:5e:cb:e6:34:62:
d9:08:b5:35:43:5b:eb:1a:3c:0d:54:e3:31:e5:3b:
93:94:2c:72:00:6a:ae:e6:89:1c:7a:6f:b3:29:41:
8d:4e:e3:e7:33:80:bd:f5:19:22:bd:40:0f:c1:ad:
da:44:d6:82:7c:66:a3:a6:b4:3e:1e:2c:9e:78:bd:
d6:52:ec:a7:d5:fc:9f:26:f7:a7:a0:09:5c:a5:4a:
b5:49:72:2f:ca:9f:e1:f6:9d:6b:dc:f6:e9:02:25:
46:46:e0:1a:34:e6:94:bd:af:57:17:3c:0a:ba:6d:
42:35:b0:82:1e:26:fe:dd:4e:28:ba:2f:a0:ca:53:
14:73:43:54:55:4b:5f:f7:b9:23:4d:37:86:a6:0a:
59:54:2c:b9:3f:33:36:1a:04:e6:5c:7d:3d:39:52:
1f:82:b4:e2:8f:54:40:dc:c1:c4:2a:27:02:d5:31:
96:30:05:a5:a3:50:9d:a6:46:c6:a2:4b:38:3f:03:
f0:fa:ff:e0:97:5f:59:48:dd:3b:51:94:55:49:c2:
9c:16:9d:e1:eb:14:34:71:7b:e8:42:17:83:4a:9b:
41:e2:9e:3d:07:81:6d:f2:1f:ae:53:2a:a1:bc:73:
c3:20:c3:d8:fa:18:92:49:68:fd:af:96:a6:c0:9c:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6A:F8:4F:93:58:3A:65:E6:94:06:32:61:05:A5:C5:E8:F0:D4:12
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/lWr4T5NYOmXmlAYyYQWlxejw1BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:27c0:10::/44
Signature Algorithm: sha256WithRSAEncryption
3b:7b:d0:84:9d:e8:6d:61:fe:40:dd:43:0c:2d:ba:a2:8b:aa:
89:59:03:8e:8f:dd:a9:e0:34:98:bb:c1:50:6c:a3:3d:f0:b2:
dc:6f:9b:66:f9:e5:18:f0:77:38:b3:76:8c:ac:1e:f6:42:cd:
88:47:4f:8f:75:7a:7e:e0:e7:22:22:19:60:8c:98:60:32:b3:
56:56:a6:f7:2b:a9:c5:f1:ad:66:59:3c:4c:31:40:5f:36:b5:
30:87:ab:23:bf:6c:e9:8d:46:26:98:6f:8b:9f:21:01:d9:ca:
e5:c9:d8:ab:a2:d7:c0:d5:2c:c2:92:6a:9e:8f:31:89:f1:80:
62:30:c3:2a:ef:27:45:30:57:79:21:b8:94:1c:c7:a8:ad:ba:
2d:28:ad:91:44:03:25:17:b8:11:df:27:b3:39:8b:95:c9:f8:
51:a4:0a:43:46:6e:19:e4:ab:2a:1c:3a:51:b1:21:fc:5c:51:
1f:74:8c:9e:5e:59:18:6c:64:57:59:98:97:27:e1:4f:4e:6f:
c3:2c:97:38:be:b9:01:f6:15:3e:17:d5:92:16:76:d3:e8:9a:
d0:78:88:37:0a:1f:8f:9c:b6:ef:4e:0b:18:f2:e7:3c:f4:6e:
6b:20:61:ad:dd:6d:8e:fc:4b:82:5f:11:3b:7b:d5:b3:9b:bf:
16:c0:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:46 2026 by rpki-client