Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKnMLKZAL2Udfow7iXFM6SuHHFE.roa
File: LKnMLKZAL2Udfow7iXFM6SuHHFE.roa (raw, json)
Hash identifier: 7UqBBAn65sIdghtUtEgT3Z8qdFxE/7okoeXFewRoemw=
Subject key identifier: 2C:A9:CC:2C:A6:40:2F:65:1D:7E:8C:3B:89:71:4C:E9:2B:87:1C:51
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E07F883A80271C8125EFA8DDC885
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKnMLKZAL2Udfow7iXFM6SuHHFE.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a0e:ee80::/29 maxlen: 29
2a0f:3340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:7f:88:3a:80:27:1c:81:25:ef:a8:dd:c8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ca9cc2ca6402f651d7e8c3b89714ce92b871c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:83:f3:17:9d:15:f7:7c:8a:ac:5c:08:25:
2d:21:af:a8:10:f5:c2:09:b4:2e:37:9e:25:db:3a:
15:fd:42:e2:68:fa:60:70:68:24:94:7d:c4:0c:3d:
e9:36:11:ea:e5:04:6a:68:4d:d6:e5:68:29:5f:11:
93:45:6c:ce:ee:c5:94:f5:6c:8c:20:9a:d1:cd:e5:
d2:d9:13:20:9f:4c:6d:3c:1b:d2:ba:19:bd:4a:44:
22:b7:ae:48:12:c4:07:c0:81:69:94:93:67:77:f8:
a8:98:b1:03:b9:81:00:6a:ba:ad:f6:46:4f:86:7e:
3f:e4:4e:ab:5d:b9:17:18:eb:5d:5e:f8:e2:4d:cc:
a1:52:d7:c9:32:b0:c8:f1:e3:b8:38:44:51:fb:ce:
2c:37:07:fb:d1:b4:3c:e8:ca:8f:40:39:70:96:e6:
c1:fe:5d:b5:31:67:99:cd:b0:9a:02:00:26:84:ce:
97:c8:6e:f9:03:98:1f:3f:27:e2:80:e0:27:cd:7d:
5e:2c:2a:7d:41:c2:e2:3c:49:9f:35:40:a4:d6:f7:
8f:c2:5b:ea:31:ec:b8:c4:e0:94:8a:2f:d4:14:b4:
2f:2c:d4:1e:d6:60:6b:2f:d0:b1:bd:e7:63:27:60:
83:fe:4c:ab:c7:2e:02:41:ca:f1:7d:f3:7c:13:34:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:CC:2C:A6:40:2F:65:1D:7E:8C:3B:89:71:4C:E9:2B:87:1C:51
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LKnMLKZAL2Udfow7iXFM6SuHHFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ee80::/29
2a0f:3340::/29
Signature Algorithm: sha256WithRSAEncryption
39:3a:27:66:36:69:d1:6a:a6:a0:d7:cd:0d:8d:3e:a5:00:32:
40:2c:9b:22:fa:d8:03:96:3d:06:24:95:dc:fc:b3:e8:34:ef:
45:d0:d8:63:2d:48:01:8b:e0:dc:a9:24:7d:77:2b:fb:5c:4e:
d9:62:5d:95:9c:1a:47:7f:72:c3:3e:68:a3:f3:66:05:4d:a8:
bf:0d:c7:10:44:50:d7:f2:78:8f:1c:34:4d:e9:24:f2:38:36:
fb:e5:0c:ef:e0:2c:fc:3f:4b:20:4f:b7:b3:74:b9:64:5a:ab:
cf:85:e5:05:bd:58:2c:8f:2b:86:62:35:da:b0:a6:96:65:1b:
1b:44:34:51:64:a6:c2:92:fc:70:b3:41:94:bc:70:81:77:ad:
bb:55:07:bf:94:d4:65:01:0d:b3:e3:e4:dd:e6:e6:a8:ed:e6:
2a:64:4c:11:3e:f4:1e:f4:f7:ae:33:6e:ec:b0:71:54:af:91:
3b:1f:60:78:0f:59:1a:36:e9:3f:fe:64:64:56:f4:85:9a:55:
0a:72:96:8c:96:ee:83:40:81:aa:1e:23:eb:93:ab:16:5f:10:
14:20:8b:11:ce:74:27:00:8e:ff:f5:00:be:15:c6:f0:d1:3c:
88:10:8c:8d:cc:4f:f2:43:19:97:8c:e5:18:62:42:55:25:f8:
db:32:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:55 2026 by rpki-client