Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/L0HkqOyVlSBR51fvxkasq0Z07QU.roa
File: L0HkqOyVlSBR51fvxkasq0Z07QU.roa (raw, json)
Hash identifier: jpczomf5fL3VsZGnZCG9PsIZlN78AYhlZ6I+PaILTQU=
Subject key identifier: 2F:41:E4:A8:EC:95:95:20:51:E7:57:EF:C6:46:AC:AB:46:74:ED:05
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A0D2F92B405BA901A494E50CE28A7EEED2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/L0HkqOyVlSBR51fvxkasq0Z07QU.roa
Signing time: Thu 24 Sep 2026 10:32:19 +0000
ROA not before: Thu 24 Sep 2026 10:32:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214731
IP address blocks: 2a0d:2686::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:f9:2b:40:5b:a9:01:a4:94:e5:0c:e2:8a:7e:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Sep 24 10:32:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f41e4a8ec95952051e757efc646acab4674ed05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:d6:0b:d0:f6:a7:97:50:6a:ad:89:64:52:
dc:3f:2e:f0:42:b2:e5:f1:b0:fd:3d:b9:af:5b:f7:
22:17:70:d0:78:4c:ff:c5:0a:5b:b4:83:cb:ee:67:
55:23:ae:9a:37:dd:7c:63:7c:b4:88:6e:16:ee:16:
d7:a1:51:55:f4:3f:1f:d8:e6:88:52:e4:21:8b:aa:
39:ae:02:62:fd:50:75:ea:94:8c:87:c1:38:08:60:
47:15:94:b2:e8:e4:61:60:82:c1:3d:8c:25:df:69:
a0:42:1d:1e:26:8a:9a:f3:82:0b:11:f7:9e:ef:0a:
bb:fd:f1:3f:65:fd:c1:6b:d9:90:e8:61:f7:f7:8a:
96:50:0b:68:63:cd:ce:a4:e2:1a:5b:9e:30:80:37:
1d:2c:a1:aa:3a:65:96:a3:05:a1:62:32:36:4c:df:
8d:a6:a2:94:2c:a0:2f:b3:06:58:5b:7b:6f:36:e3:
ba:49:2e:44:82:e4:df:e7:5e:6f:05:9d:75:96:8d:
f6:9d:55:bb:b9:81:45:8a:e9:bb:8b:85:49:c3:2b:
19:b0:81:19:5e:fe:2a:4c:f8:49:61:07:2e:d6:46:
ff:40:c3:a0:ab:a2:c3:cd:63:e1:bf:ef:26:42:b8:
27:60:7b:99:8f:8c:52:dc:71:ea:00:62:d0:26:dd:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:E4:A8:EC:95:95:20:51:E7:57:EF:C6:46:AC:AB:46:74:ED:05
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/L0HkqOyVlSBR51fvxkasq0Z07QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2686::/32
Signature Algorithm: sha256WithRSAEncryption
6e:df:2e:1a:36:59:9c:8e:83:a6:db:cb:92:ab:a0:1b:74:71:
a3:3d:d2:2d:07:72:28:f2:6b:c1:92:d2:50:ae:00:ac:67:2f:
bd:06:7c:3e:8b:30:e0:ff:85:20:b1:38:b6:04:24:1c:cd:52:
66:c3:bf:9f:29:ae:a5:fb:ce:65:ad:8b:d0:7e:84:69:44:dc:
35:39:14:6c:7e:f8:aa:43:3c:42:ec:ad:08:a5:a6:28:af:61:
63:0f:ee:a1:ee:dd:87:a5:93:1e:d0:c6:f9:43:51:d8:c3:23:
c7:39:d2:6e:d7:43:be:b9:ea:5d:87:aa:f0:9f:f6:61:87:3c:
0c:c2:10:35:a6:98:fb:40:32:0a:0b:4f:29:ed:72:28:2c:d3:
03:1d:ef:64:26:97:fd:d8:a2:da:c7:d3:8e:21:d8:a2:0e:0f:
32:e5:93:10:eb:42:3d:4c:54:fc:95:18:c3:d6:c5:0c:76:a8:
fd:d3:11:60:62:8d:a2:03:2d:7c:13:82:8c:fd:f6:78:1c:88:
a1:b4:4d:34:88:c0:34:ec:2b:b5:8d:ea:61:95:88:a1:22:8a:
e7:42:55:35:97:93:71:4c:28:1e:4c:2e:d6:5b:43:55:f6:8c:
ad:c1:aa:d8:e9:11:55:db:ce:7d:e8:b3:40:9d:ad:c6:24:c8:
70:03:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:27 2026 by rpki-client