Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/LTjdrpDRMudIXtNosr-U_ziXt5E.roa
File: LTjdrpDRMudIXtNosr-U_ziXt5E.roa (raw, json)
Hash identifier: ms8eyl5dUgZvhTOeCMmz+tru6poGukzqv5R3jWSheZE=
Subject key identifier: 2D:38:DD:AE:90:D1:32:E7:48:5E:D3:68:B2:BF:94:FF:38:97:B7:91
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BC030738E873D826CFFB20134976893
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/LTjdrpDRMudIXtNosr-U_ziXt5E.roa
Signing time: Wed 14 Oct 2026 18:50:13 +0000
ROA not before: Wed 14 Oct 2026 18:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c0:30:73:8e:87:3d:82:6c:ff:b2:01:34:97:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d38ddae90d132e7485ed368b2bf94ff3897b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:68:7a:9d:84:d6:2b:1d:d2:72:b6:af:c0:
76:c7:fc:a2:2f:02:3a:60:d3:70:5c:2b:7b:89:2c:
1b:a4:76:2e:c1:ae:b3:11:b5:28:f2:30:a3:47:62:
c7:dc:b5:51:09:6f:b7:ba:a2:a0:b4:e5:18:34:74:
72:d2:b0:d5:c8:1b:8d:71:69:ce:df:ca:32:d6:7a:
c0:9e:44:5b:e8:13:52:aa:fb:c5:48:74:6c:2b:93:
b1:ec:45:23:1a:a3:87:2a:53:5c:25:98:72:05:ad:
dc:79:83:1d:5d:e6:df:a5:af:c3:e7:30:89:d8:39:
a1:de:d7:c5:13:ea:e2:d8:54:b0:d3:d2:1e:fb:a3:
11:af:f8:fb:f8:28:ac:a5:6b:d9:49:f8:d0:ff:c8:
36:11:95:db:95:0d:77:fd:7c:81:dc:25:5d:fa:ac:
a2:9f:43:33:46:7b:dd:11:22:5b:9d:95:da:4d:88:
84:be:fc:52:1d:63:7f:c1:2a:ec:d9:39:47:b6:d7:
3c:72:0b:96:b6:04:00:b8:07:fe:03:20:dd:e8:d3:
cb:8c:a4:da:e5:34:38:73:5d:c4:56:50:fc:0f:f5:
27:92:10:4f:c3:db:fe:4b:09:1c:80:6d:60:38:28:
90:02:26:f5:0d:14:6d:5b:ed:d1:78:68:28:3b:eb:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:DD:AE:90:D1:32:E7:48:5E:D3:68:B2:BF:94:FF:38:97:B7:91
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/LTjdrpDRMudIXtNosr-U_ziXt5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:28:6e:86:57:74:85:74:66:65:a4:27:39:7c:f8:7e:b6:d9:
b8:1e:93:76:a7:a4:7d:f4:20:28:4d:ee:83:39:ed:2a:0c:7b:
f5:c8:40:03:6d:0b:43:b2:45:79:5f:01:c4:26:08:2d:77:43:
cb:58:a9:65:28:84:ea:11:be:8b:85:82:02:6a:de:45:4c:80:
e6:c2:61:ee:0b:14:5e:34:ea:44:64:df:73:09:0c:bc:77:68:
01:b9:74:99:a7:36:55:20:0b:ef:7f:85:67:e6:20:db:e5:10:
94:1c:39:9b:a2:7e:21:99:fc:21:03:a8:84:ba:f2:08:67:32:
cf:d5:31:ee:ef:a1:5c:6c:eb:cd:23:23:c4:0b:55:c0:fd:47:
3b:a1:05:60:67:82:2d:02:f3:34:36:3d:4c:24:54:3c:b2:dd:
b1:4a:4c:17:90:87:3b:3b:af:c5:77:78:2f:81:b8:90:16:f5:
16:b3:00:b8:9f:08:15:08:b1:bf:1d:2f:74:97:fb:30:7c:37:
26:ba:b5:fc:45:1e:e6:98:ca:7b:42:11:fd:05:85:ad:92:44:
7e:3a:a8:b7:18:43:b1:60:10:de:28:fe:4a:f3:19:56:cd:76:
b4:d9:14:e6:f4:28:2d:a1:00:a8:d8:fd:fd:c5:3c:94:72:d0:
be:30:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:30 2026 by rpki-client