Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Luyuqoh_pWRJTWjw11VfGXwuFiE.roa
File: Luyuqoh_pWRJTWjw11VfGXwuFiE.roa (raw, json)
Hash identifier: Rso6pookXUjX7J197MB0N48hYtp99vmJsX8q6JzKDN4=
Subject key identifier: 2E:EC:AE:AA:88:7F:A5:64:49:4D:68:F0:D7:55:5F:19:7C:2E:16:21
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A03335064434B131CCEEBC59BB1066917B
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Luyuqoh_pWRJTWjw11VfGXwuFiE.roa
Signing time: Mon 24 Aug 2026 09:58:27 +0000
ROA not before: Mon 24 Aug 2026 09:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a05:1086::/32 maxlen: 48
2a0c:e641::/32 maxlen: 48
2a0d:2681::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:35:06:44:34:b1:31:cc:ee:bc:59:bb:10:66:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Aug 24 09:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eecaeaa887fa564494d68f0d7555f197c2e1621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:c3:2d:3b:78:f3:c5:d5:f7:6b:e9:04:c9:
b4:50:ed:27:43:c5:f0:34:ae:19:2a:3d:27:45:af:
2b:52:53:83:8d:42:a0:ad:05:db:62:16:1c:84:24:
82:67:c2:eb:a6:47:5c:ce:d9:31:25:34:e9:38:e2:
2c:74:dd:0c:83:24:ed:ba:cb:ff:9f:79:32:12:66:
64:20:e8:4e:21:f4:db:3a:31:d1:48:94:25:d1:13:
5f:63:21:b0:20:0a:de:b2:eb:cc:b5:9b:35:b8:6c:
e7:82:39:39:c2:f6:02:f0:09:ce:80:c3:0d:8b:1a:
32:31:fe:9b:e8:9f:b1:24:cd:39:8e:e9:f4:e4:bb:
a1:66:20:47:65:82:a8:c4:bb:96:1c:64:81:c9:16:
ce:88:e3:40:f6:d3:8b:af:88:99:e2:6f:fb:9f:8a:
08:ea:e5:36:c4:d5:1c:b8:b0:50:73:07:74:1a:c8:
02:77:2e:70:a2:a1:69:bb:88:29:f9:00:08:8c:d4:
ef:a9:56:b2:ea:b8:f7:e9:5c:b0:67:6a:ea:5e:12:
9a:fe:16:b6:74:e6:55:7a:cf:49:a2:b9:1e:19:4c:
d6:2a:33:9c:9d:c4:9a:53:08:85:ff:e8:bb:94:7e:
84:c9:55:4b:0d:78:42:b2:dc:77:2f:c4:7c:02:33:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:AE:AA:88:7F:A5:64:49:4D:68:F0:D7:55:5F:19:7C:2E:16:21
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Luyuqoh_pWRJTWjw11VfGXwuFiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1086::/32
2a0c:e641::/32
2a0d:2681::/32
Signature Algorithm: sha256WithRSAEncryption
b1:40:f5:f6:00:c9:1f:0c:ea:71:71:fa:61:6c:58:62:c5:52:
9f:1c:c3:06:b6:bf:1e:20:8a:3d:9e:36:39:d6:ca:12:34:b2:
54:70:1b:7f:da:a0:db:9b:ae:fe:02:33:9a:d0:12:c2:b7:04:
79:38:64:ae:52:1b:c4:c0:8a:8c:54:e4:45:78:e3:e7:d6:0a:
91:ba:99:01:f2:7c:5a:24:be:86:a7:d0:fc:43:18:8b:9a:c0:
6d:30:ed:cc:5b:de:a4:74:b5:d3:7e:7e:2d:63:69:fe:3b:a8:
2a:bd:72:20:97:d8:8a:b4:29:7a:f4:76:c1:3d:3b:43:e5:7a:
09:68:5f:71:25:53:4a:a7:fc:b9:6d:10:11:3f:07:c4:51:63:
07:cb:f3:8e:5f:85:83:e7:89:d1:cf:19:cc:b9:93:69:5f:78:
6c:f7:ac:20:5c:e6:81:0d:58:3c:96:94:ad:7c:0e:28:4f:b5:
0d:f8:d2:ce:36:4f:3c:fb:e1:85:af:eb:14:01:9d:ff:d5:0b:
a7:b8:f1:7f:26:33:28:03:49:79:d9:d1:62:9a:b1:da:80:8b:
a1:e2:be:7a:06:34:3c:c6:5f:eb:cd:40:db:1d:11:29:d7:39:
f7:e2:8c:3a:dc:42:2c:8a:7d:9c:d8:74:f4:75:37:c6:f1:87:
8b:0e:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:38 2026 by rpki-client