Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa
File: lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa (raw, json)
Hash identifier: UihdJc3+pbTDupOjQZYdSp5xTmQICY00RAj9TUOo7tI=
Subject key identifier: 94:00:32:E9:10:98:DE:F3:F3:EA:75:E5:E3:3D:CE:01:C5:99:35:66
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E091C1CFDD6CE4EF3C11D9ECF097
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:4d00::/29 maxlen: 29
2a11:bf40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:91:c1:cf:dd:6c:e4:ef:3c:11:d9:ec:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=940032e91098def3f3ea75e5e33dce01c5993566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:39:c0:c7:dd:df:b8:2c:41:80:4e:df:f3:
72:3c:21:f9:ef:88:31:a3:8e:b8:87:12:db:8d:38:
71:b5:b2:c1:3f:66:41:8c:c4:11:1a:50:c9:ee:d9:
c4:b6:3b:ed:44:d8:32:a8:d2:36:fd:b9:23:ce:e0:
0c:16:99:3b:6b:78:eb:d8:08:03:38:76:58:a7:3c:
f2:2a:df:a3:9e:a4:27:b7:f5:55:6e:fd:02:4e:86:
ea:67:5f:c0:ba:12:bf:3e:d2:29:9a:86:a1:a6:3a:
a0:ea:bd:5e:de:86:35:72:54:f8:b2:3b:8d:9f:73:
9e:22:73:1e:f7:87:ae:a0:f4:9e:80:ca:66:7c:67:
9e:66:4d:37:51:70:b5:6f:51:3f:f2:31:8d:38:b9:
de:47:2c:e6:70:d7:79:bd:29:d6:b3:76:80:44:c3:
74:78:b8:39:4a:62:12:b5:a1:b5:e5:53:25:3f:29:
32:28:8e:52:d5:a9:db:c1:bd:a8:5f:a3:de:ba:12:
63:73:19:cd:15:35:f2:b9:4c:04:7d:d8:32:5d:4b:
05:b2:a9:a5:ea:32:db:ee:69:81:0f:d4:4e:2f:b1:
36:37:58:03:89:19:79:7a:73:98:ad:eb:30:7f:61:
1d:7e:42:ef:7f:49:91:83:de:01:cd:0c:36:1d:0f:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:32:E9:10:98:DE:F3:F3:EA:75:E5:E3:3D:CE:01:C5:99:35:66
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4d00::/29
2a11:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
21:ab:10:c3:ec:44:20:33:5e:a5:42:9f:36:16:43:22:45:f1:
1e:75:5c:32:78:26:1a:b4:1c:a7:c9:f3:3d:a3:fc:01:3e:49:
21:61:7f:b0:29:ca:69:b0:e2:ba:a6:d8:f6:61:4e:13:d9:21:
9c:cd:ad:76:6a:86:ca:21:3a:45:49:58:81:3d:da:25:58:b7:
22:ae:d5:96:8e:b0:54:16:3f:07:c2:3c:3a:a0:c4:53:1f:2e:
e7:9b:7f:55:95:31:e9:32:46:83:80:fe:47:19:4a:85:3f:73:
2b:b4:d8:5b:da:d1:87:df:db:df:0b:6d:1c:c3:c7:23:60:e2:
02:c4:94:29:36:e9:f0:50:85:39:b2:f6:e4:ab:bd:77:36:f9:
2b:64:69:7f:21:35:4e:cb:21:dc:e0:3a:29:53:23:df:36:6b:
21:47:d5:65:06:40:e8:c1:89:2d:f9:ee:42:3d:32:94:b8:e8:
90:51:9c:c0:ee:13:5d:8e:1c:05:29:7f:f1:8f:36:b9:35:63:
90:90:8c:45:6e:1e:02:27:81:b3:b9:8d:5d:62:54:31:60:3a:
c9:8e:bd:e9:fd:3b:9a:17:d0:c4:5a:f5:49:00:0e:01:3a:73:
48:b3:66:f6:c7:f1:5d:64:1f:24:a1:66:8e:fc:a9:9b:ef:08:
55:fe:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 16:04:45 2026 by rpki-client