Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa
File: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (raw, json)
Hash identifier: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=
Subject key identifier: 2E:F6:68:6B:A0:F2:9F:76:FC:4E:C3:A0:B9:C5:F6:20:81:C0:D8:35
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019F22995C6F5F534459249C841435391C41
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa
Signing time: Thu 02 Jul 2026 11:31:43 +0000
ROA not before: Thu 02 Jul 2026 11:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4785
IP address blocks: 2a11::/32 maxlen: 48
2a11:3::/32 maxlen: 48
2a11:4::/30 maxlen: 48
2a11:8080::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:99:5c:6f:5f:53:44:59:24:9c:84:14:35:39:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Jul 2 11:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef6686ba0f29f76fc4ec3a0b9c5f62081c0d835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:e3:26:06:fd:d5:49:21:04:7e:70:9f:ac:
9b:c0:ad:a9:0f:53:6d:83:66:8a:eb:8a:4d:e3:80:
b6:95:86:67:4c:33:ff:13:24:12:96:5c:c2:be:44:
7c:ce:dc:02:e7:52:5a:20:8c:9e:44:d5:2d:74:77:
8f:ae:8e:71:4a:20:87:8a:4c:11:86:bf:03:39:60:
b0:84:04:f5:d8:ef:43:64:dd:56:32:52:bd:38:9f:
6f:1b:fa:da:f6:9b:c9:18:e0:ca:d9:66:e7:93:99:
ff:59:6a:47:a7:d2:c2:d4:4d:d5:5a:b9:51:77:38:
17:2f:83:0c:f6:fb:9a:f2:71:09:10:3d:3e:80:e3:
6b:54:65:04:db:64:70:2e:0c:2e:61:73:c3:8e:c0:
eb:0f:64:17:f2:09:83:8e:f4:e9:32:38:b6:eb:50:
6b:c5:2e:d1:f2:38:06:38:df:02:9e:86:d4:1a:71:
07:a6:07:41:f5:ad:7b:18:67:ce:60:ab:ae:e5:49:
ff:03:fa:6e:55:70:15:a2:e6:4f:60:47:a0:59:e8:
ed:0c:5e:6f:81:f5:0a:52:3b:89:86:76:ea:1d:d8:
11:b5:a7:02:9a:0d:fc:4a:2e:3d:bd:e1:ee:39:a2:
db:99:a6:be:f2:31:99:d8:8b:c0:15:01:d7:b5:8b:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:68:6B:A0:F2:9F:76:FC:4E:C3:A0:B9:C5:F6:20:81:C0:D8:35
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
55:d7:d8:38:39:41:97:21:a0:af:49:8d:c4:10:65:d6:98:25:
e4:70:d4:86:a7:c2:64:26:c5:06:9a:13:ac:16:49:05:b0:82:
3f:0c:03:44:c5:97:73:5b:57:19:8d:57:89:1b:97:b6:db:fb:
5b:d8:f1:6c:68:3b:3d:f5:14:52:1c:c7:29:b2:22:1d:96:58:
eb:0f:a2:6a:c0:50:bb:5a:44:17:71:3e:87:d9:e3:3e:7c:46:
a2:1d:09:d0:e2:50:e6:28:3b:75:de:29:4d:57:d4:a2:17:9a:
8b:44:e1:e4:dc:bb:1a:bd:2f:cb:3a:a0:79:bf:30:96:1e:3e:
2f:51:c9:26:63:42:50:25:d8:3f:c5:e1:6a:b1:0d:e1:3a:ba:
44:83:34:d9:5c:b8:64:39:9b:73:a4:63:93:f0:85:0d:4d:c2:
46:9e:fa:bc:dd:0d:f7:fc:aa:a0:01:e9:c0:f1:20:3f:63:1c:
84:49:da:a1:41:36:3f:94:8f:e4:d5:ff:52:bf:55:5c:7f:9a:
5a:7d:dd:8a:62:09:e8:e7:db:a1:9a:08:ab:bc:fb:5a:40:84:
d7:50:79:82:e5:b7:e6:d2:df:cf:a7:10:6e:d6:d3:c8:a6:96:
d6:e9:10:52:2b:8a:3f:bd:ce:bf:ae:05:a1:76:bc:96:c7:19:
2e:91:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:04:16 2026 by rpki-client