Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/LEaYGSQnv22iJzPRvzPOdVVtaWo.roa
File: LEaYGSQnv22iJzPRvzPOdVVtaWo.roa (raw, json)
Hash identifier: z2ahNg5bgqMVHymhQz6Igehe9MSKxQ8t/he5J048EGU=
Subject key identifier: 2C:46:98:19:24:27:BF:6D:A2:27:33:D1:BF:33:CE:75:55:6D:69:6A
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 019FFB721E14CBCC8DFD65D7173114AEA735
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/LEaYGSQnv22iJzPRvzPOdVVtaWo.roa
Signing time: Thu 13 Aug 2026 14:06:27 +0000
ROA not before: Thu 13 Aug 2026 14:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.0/29 maxlen: 29
45.144.44.0/30 maxlen: 30
2a0e:eac0:2000::/44 maxlen: 48
2a0e:eac0:2001::/48 maxlen: 48
2a0e:eac0:2002::/48 maxlen: 48
2a0e:eac0:2003::/48 maxlen: 48
2a0e:eac0:2010::/44 maxlen: 48
2a0e:eac0:2013::/48 maxlen: 48
2a0e:eac0:2030::/44 maxlen: 44
2a0e:eac0:2100::/44 maxlen: 48
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2110::/44 maxlen: 48
2a0e:eac0:2200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:72:1e:14:cb:cc:8d:fd:65:d7:17:31:14:ae:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Aug 13 14:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c4698192427bf6da22733d1bf33ce75556d696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:48:fe:fb:25:12:79:51:3a:83:7c:3b:5a:
20:56:d3:f6:c9:68:ea:97:95:32:7e:f4:9f:04:04:
b4:be:b4:f7:d1:ea:d7:52:a0:26:b4:29:c6:0a:f7:
38:44:55:cc:f8:17:1c:a1:29:a0:6a:d5:ef:1b:d8:
d4:f6:36:25:af:67:fd:0e:aa:9e:0b:89:7e:49:1b:
7e:ee:3d:b6:fe:a3:35:01:2c:dd:dd:1e:00:26:4b:
a5:7a:71:12:d3:de:5b:f6:24:7a:bc:86:b4:7b:f1:
23:64:9c:4d:e7:3c:ed:33:c3:d3:81:a6:d9:bd:36:
2a:d8:20:e5:82:88:8f:cf:fb:82:c8:3a:b3:d0:09:
cf:c5:75:11:74:63:6e:f2:cb:63:82:6d:a7:6b:e7:
3d:c1:f0:d1:ba:56:30:76:ec:30:06:49:4a:d6:ed:
a1:8b:d2:26:3f:2f:7e:65:6e:01:68:21:f8:dd:be:
ef:55:b6:e9:48:e8:50:87:0f:fa:c9:59:c1:67:1c:
bf:59:69:2c:50:8d:72:dc:cb:78:33:ca:9f:89:23:
8f:bf:de:86:d7:3d:2d:cc:80:17:ad:4a:af:86:38:
26:a9:3d:9b:f4:6d:2e:98:01:b1:3a:e3:c6:9c:e7:
c1:b7:60:de:28:11:ec:3b:17:e5:d0:df:28:01:dc:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:98:19:24:27:BF:6D:A2:27:33:D1:BF:33:CE:75:55:6D:69:6A
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/LEaYGSQnv22iJzPRvzPOdVVtaWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/29
IPv6:
2a0e:eac0:2000::/43
2a0e:eac0:2030::/44
2a0e:eac0:2100::/43
2a0e:eac0:2200::/48
Signature Algorithm: sha256WithRSAEncryption
ad:83:ce:f6:17:c3:f2:9b:2c:d8:6c:51:44:93:7f:cf:56:71:
18:2a:b7:80:f2:b6:11:68:f9:15:c2:df:0a:bd:9d:6b:4f:31:
88:97:11:56:9d:68:7f:ac:a0:9c:26:f1:50:76:27:95:18:5d:
c6:9d:d1:ea:81:a6:95:dc:fa:d5:e9:35:e1:63:a3:42:e0:4b:
09:e0:07:cc:f0:c9:69:d6:6b:87:4a:f4:66:9c:0e:18:74:6d:
8f:3e:39:0e:0d:73:38:8a:45:7c:69:6b:15:00:bc:59:f6:91:
4e:84:ba:81:96:a0:98:fa:7b:aa:69:6c:9d:67:75:68:d9:cb:
9e:47:49:19:b8:a1:a6:40:44:8a:9a:8a:89:0e:7a:97:e3:aa:
2a:1b:34:3d:63:76:de:e6:7b:26:3d:07:8e:db:7b:db:5a:86:
89:d8:a0:9c:56:e8:f1:7f:97:89:68:d9:3c:0c:d9:07:6c:5b:
6b:8f:19:19:7a:c9:db:1a:95:e1:47:eb:04:83:a0:ed:ac:3c:
06:31:c0:76:5e:e5:4e:29:36:49:f8:ad:14:d9:b6:0f:b8:7c:
9a:3a:5d:80:13:f1:25:74:56:eb:29:1b:72:55:15:57:64:d3:
1c:f1:13:a3:43:f8:9d:97:4b:8e:ef:32:b1:e2:c9:24:b5:41:
54:b2:2b:2b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ/7ch4Uy8yN/WXXFzEUrqc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjYwODEzMTQwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzQ2OTgxOTI0MjdiZjZkYTIyNzMzZDFiZjMzY2U3NTU1NmQ2OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYRI/vslEnlROoN8O1ogVtP2yWjq
l5UyfvSfBAS0vrT30erXUqAmtCnGCvc4RFXM+BccoSmgatXvG9jU9jYlr2f9Dqqe
C4l+SRt+7j22/qM1ASzd3R4AJkulenES095b9iR6vIa0e/EjZJxN5zztM8PTgabZ
vTYq2CDlgoiPz/uCyDqz0AnPxXURdGNu8stjgm2na+c9wfDRulYwduwwBklK1u2h
i9ImPy9+ZW4BaCH43b7vVbbpSOhQhw/6yVnBZxy/WWksUI1y3Mt4M8qfiSOPv96G
1z0tzIAXrUqvhjgmqT2b9G0umAGxOuPGnOfBt2DeKBHsOxfl0N8oAdzI4QIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFCxGmBkkJ79toicz0b8zznVVbWlqMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvTEVhWUdTUW52MjJpSnpQUnZ6UE9kVlZ0YVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzANBAIAATAHAwUDLZAsADAq
BAIAAjAkAwcFKg7qwCAAAwcEKg7qwCAwAwcFKg7qwCEAAwcAKg7qwCIAMA0GCSqG
SIb3DQEBCwUAA4IBAQCtg872F8PymyzYbFFEk3/PVnEYKreA8rYRaPkVwt8KvZ1r
TzGIlxFWnWh/rKCcJvFQdieVGF3GndHqgaaV3PrV6TXhY6NC4EsJ4AfM8Mlp1muH
SvRmnA4YdG2PPjkODXM4ikV8aWsVALxZ9pFOhLqBlqCY+nuqaWydZ3Vo2cueR0kZ
uKGmQESKmoqJDnqX46oqGzQ9Y3be5nsmPQeO23vbWoaJ2KCcVujxf5eJaNk8DNkH
bFtrjxkZesnbGpXhR+sEg6DtrDwGMcB2XuVOKTZJ+K0U2bYPuHyaOl2AE/EldFbr
KRtyVRVXZNMc8ROjQ/idl0uO7zKx4skktUFUsisr
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:24 2026 by rpki-client