Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/lXpHyRuU47BtSBJOejqQ3lZOiZc.roa
File: lXpHyRuU47BtSBJOejqQ3lZOiZc.roa (raw, json)
Hash identifier: GSdwI6UioXb7U3hysXEMkdF79E/2zxXeEnRJv4atxEs=
Subject key identifier: 95:7A:47:C9:1B:94:E3:B0:6D:48:12:4E:7A:3A:90:DE:56:4E:89:97
Certificate issuer: /CN=5830f7f4513a32d2552def4912c60a6488e69849
Certificate serial: 01A172962983C55E501AEADFF799892BAA17
Authority key identifier: 58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/lXpHyRuU47BtSBJOejqQ3lZOiZc.roa
Signing time: Sun 25 Oct 2026 10:23:25 +0000
ROA not before: Sun 25 Oct 2026 10:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218310
IP address blocks: 2a11:6480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:96:29:83:c5:5e:50:1a:ea:df:f7:99:89:2b:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5830f7f4513a32d2552def4912c60a6488e69849
Validity
Not Before: Oct 25 10:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957a47c91b94e3b06d48124e7a3a90de564e8997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:db:ce:7a:7e:ff:9e:26:b6:80:96:06:fe:
25:c6:c9:f1:01:bc:f2:b3:1e:47:e1:2f:18:c4:9a:
06:b7:99:3f:ab:9d:71:ce:cc:96:74:1d:68:77:51:
8f:02:f1:0b:1b:0d:64:7a:84:52:e1:28:40:fc:d6:
f8:66:3a:f6:74:e2:49:95:6e:75:79:79:96:9e:93:
47:8c:c9:9f:dc:89:47:7c:c2:1b:37:12:43:c1:c6:
8c:82:ee:eb:15:39:22:11:91:26:10:c6:45:32:86:
9f:62:b7:3a:29:87:63:e1:a7:c6:65:18:5d:9c:75:
83:9f:4f:a2:16:74:18:52:fa:c9:67:6f:b1:30:67:
77:ad:59:15:01:f6:4d:03:ef:cb:c4:14:f7:ba:ca:
82:54:a7:79:72:81:e7:03:ab:8b:f7:ca:f3:6d:b9:
eb:cb:3d:a3:cc:b4:6d:a3:c3:b4:3d:be:64:f2:65:
41:68:7d:b2:05:b8:28:ee:01:49:51:84:5b:86:c8:
de:df:49:01:78:15:88:3b:1a:81:a1:84:0b:22:dc:
8a:a3:a6:91:2e:71:e8:96:df:64:fe:06:8c:0e:af:
45:d6:fa:e1:6d:8c:28:53:57:54:bd:d8:2e:ca:db:
04:b8:87:dc:fd:62:92:42:d9:b2:7b:09:40:7c:b1:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:47:C9:1B:94:E3:B0:6D:48:12:4E:7A:3A:90:DE:56:4E:89:97
X509v3 Authority Key Identifier:
keyid:58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/lXpHyRuU47BtSBJOejqQ3lZOiZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6480::/48
Signature Algorithm: sha256WithRSAEncryption
55:75:c4:83:6c:ac:0f:0a:ee:29:bf:c7:fb:0d:3b:06:17:92:
4b:3e:80:37:cf:24:25:b2:94:0a:c4:0d:16:31:c2:79:fd:22:
89:da:b8:3c:25:d3:86:00:c8:70:90:74:81:7d:77:e2:d2:e3:
6e:f5:d6:71:42:ea:92:70:7f:b4:5d:fb:01:2e:d1:39:f4:d5:
0d:1b:70:5b:6b:9f:1c:b8:b5:64:92:1c:7c:9f:f6:41:0d:66:
e1:65:93:76:66:4b:64:b7:9d:fa:03:2d:2c:33:60:a0:4b:5a:
3d:e0:c4:9d:9b:0b:26:a9:6a:12:cc:3e:20:74:7d:34:97:bf:
ac:e2:63:9f:a2:c3:65:dc:bc:ef:d9:7f:5c:9b:74:a5:84:1b:
a5:ef:c3:bc:d5:a3:d9:0a:13:d9:79:6e:31:a2:66:d3:81:90:
50:ca:99:29:ff:e6:6d:49:22:c0:75:65:3c:26:62:50:38:f0:
aa:67:25:88:9c:10:77:d5:43:7b:fe:dd:64:dc:e7:d1:fd:7a:
4b:f2:46:ea:33:2c:87:c0:52:8c:b4:89:c4:d4:b1:32:e5:a5:
6e:92:17:c0:29:70:a0:8b:ec:66:4b:1c:8e:75:87:21:35:6c:
7c:68:95:e8:a4:f7:1a:dc:68:94:eb:af:96:5c:ec:84:3f:75:
ea:fa:96:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFylimDxV5QGurf95mJK6oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MzBmN2Y0NTEzYTMyZDI1NTJkZWY0OTEyYzYwYTY0ODhl
Njk4NDkwHhcNMjYxMDI1MTAyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdhNDdjOTFiOTRlM2IwNmQ0ODEyNGU3YTNhOTBkZTU2NGU4OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Srbznp+/54mtoCWBv4lxsnxAbzy
sx5H4S8YxJoGt5k/q51xzsyWdB1od1GPAvELGw1keoRS4ShA/Nb4Zjr2dOJJlW51
eXmWnpNHjMmf3IlHfMIbNxJDwcaMgu7rFTkiEZEmEMZFMoafYrc6KYdj4afGZRhd
nHWDn0+iFnQYUvrJZ2+xMGd3rVkVAfZNA+/LxBT3usqCVKd5coHnA6uL98rzbbnr
yz2jzLRto8O0Pb5k8mVBaH2yBbgo7gFJUYRbhsje30kBeBWIOxqBoYQLItyKo6aR
LnHolt9k/gaMDq9F1vrhbYwoU1dUvdguytsEuIfc/WKSQtmyewlAfLF8CQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJV6R8kblOOwbUgSTno6kN5WTomXMB8GA1UdIwQY
MBaAFFgw9/RROjLSVS3vSRLGCmSI5phJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0REMzlGRTZNdEpWTGU5SkVzWUtaSWptbUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmIzY2MtNjhlYi00NDRiLWE1MGEt
YTMxZjIyNzVhNzQ3LzEvbFhwSHlSdVU0N0J0U0JKT2VqcVEzbFpPaVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmIzY2MtNjhlYi00NDRiLWE1MGEtYTMxZjIyNzVhNzQ3
LzEvV0REMzlGRTZNdEpWTGU5SkVzWUtaSWptbUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhFkgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBVdcSDbKwPCu4pv8f7DTsGF5JLPoA3zyQlspQK
xA0WMcJ5/SKJ2rg8JdOGAMhwkHSBfXfi0uNu9dZxQuqScH+0XfsBLtE59NUNG3Bb
a58cuLVkkhx8n/ZBDWbhZZN2Zktkt536Ay0sM2CgS1o94MSdmwsmqWoSzD4gdH00
l7+s4mOfosNl3Lzv2X9cm3SlhBul78O81aPZChPZeW4xombTgZBQypkp/+ZtSSLA
dWU8JmJQOPCqZyWInBB31UN7/t1k3OfR/XpL8kbqMyyHwFKMtInE1LEy5aVukhfA
KXCgi+xmSxyOdYchNWx8aJXopPca3GiU66+WXOyEP3Xq+pZg
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:38:40 2026 by rpki-client