Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LlwR7tMJ6zTGEQz3JxR7zXWwYmU.roa
File: LlwR7tMJ6zTGEQz3JxR7zXWwYmU.roa (raw, json)
Hash identifier: /i0EGLMOcxHYvXs6bbWKcMGoGwpP0rScQ+j7WNhkmNc=
Subject key identifier: 2E:5C:11:EE:D3:09:EB:34:C6:11:0C:F7:27:14:7B:CD:75:B0:62:65
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019FFC6FB82D095E9733402CD3246B58D894
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LlwR7tMJ6zTGEQz3JxR7zXWwYmU.roa
Signing time: Thu 13 Aug 2026 18:43:27 +0000
ROA not before: Thu 13 Aug 2026 18:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42861
IP address blocks: 91.214.78.0/24 maxlen: 24
2a00:1e68::/32 maxlen: 32
2a00:1e68:100::/47 maxlen: 47
2a00:1e68:100::/48 maxlen: 48
2a00:1e68:101::/48 maxlen: 48
2a00:1e68:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:6f:b8:2d:09:5e:97:33:40:2c:d3:24:6b:58:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Aug 13 18:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e5c11eed309eb34c6110cf727147bcd75b06265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:a2:d0:cc:d5:c8:07:15:6d:08:d1:aa:99:
25:be:f8:86:61:72:84:43:79:e1:36:fb:4e:6e:e2:
d3:f7:95:4b:1b:c0:3f:be:62:8a:05:02:1b:f2:63:
bc:2a:38:8d:a7:46:25:93:6e:b5:a9:9e:66:bb:2a:
8f:e3:90:b1:8e:7c:31:43:9f:7c:10:86:07:c9:8d:
e0:b9:69:c5:d7:50:6e:cd:34:3c:7f:79:49:fd:b7:
f1:0d:7b:59:47:87:58:45:ff:74:8d:d3:5f:8c:d9:
ee:a2:34:1a:c6:e2:ea:dc:55:2e:c5:ca:a2:26:57:
0a:9d:c8:38:73:0d:12:4c:15:61:b1:6b:37:ef:9e:
e7:d5:5a:ec:83:b3:8e:9b:da:38:56:54:88:f0:da:
e1:3a:f7:66:78:65:05:6b:ab:55:98:e8:f4:d0:66:
e9:cd:fe:2a:7a:46:66:44:3d:04:90:a0:e9:d0:38:
2f:da:d6:71:b0:db:94:c3:2a:57:8a:33:94:58:72:
83:38:39:41:b7:9d:cd:c8:03:d0:c5:02:f5:c7:ef:
8e:5b:e6:16:e9:65:0f:e2:31:75:03:05:c5:d2:a3:
a2:a9:83:05:4f:ff:7b:12:10:cd:81:6b:f5:0d:8e:
4d:2d:88:99:57:03:09:23:de:fe:75:a9:ba:3d:80:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:11:EE:D3:09:EB:34:C6:11:0C:F7:27:14:7B:CD:75:B0:62:65
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/LlwR7tMJ6zTGEQz3JxR7zXWwYmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.78.0/24
IPv6:
2a00:1e68::/32
Signature Algorithm: sha256WithRSAEncryption
27:82:93:37:82:72:27:c9:25:1b:b6:af:3e:e4:20:3f:9e:c2:
4f:3a:16:c2:12:dd:9a:5a:e9:f7:79:27:ee:e7:9f:ff:71:1e:
7e:33:54:a0:3d:1f:cf:5b:17:cd:fc:e3:30:7b:00:a9:cf:ec:
9d:1b:06:87:0e:46:41:da:16:fc:39:f2:11:04:a0:ee:b1:d2:
c7:a0:c3:a5:35:46:f3:31:82:f3:56:c9:65:d9:eb:95:b4:12:
d2:84:23:a0:fb:b2:c0:1b:1d:0c:32:b2:f0:7c:37:57:c0:23:
f8:48:75:f0:ec:0c:51:cc:36:c2:05:aa:92:1e:9b:fa:80:d9:
f7:eb:e6:b3:9f:09:81:bb:e5:69:35:97:ae:1c:ea:7e:b9:9b:
4b:8a:0e:0f:21:24:15:90:38:20:fc:72:2c:7c:5f:8e:17:0e:
5e:b1:29:3d:b8:c3:23:37:9d:c9:d1:3a:e0:2a:d3:14:4e:de:
26:64:0b:e0:cd:58:44:67:5e:13:9c:1b:2e:eb:6e:db:67:37:
4a:1a:79:37:d7:5f:c9:fd:8c:2a:92:32:5c:0a:28:52:b8:fb:
fb:a8:17:90:79:2c:79:68:86:3c:e8:12:94:46:9b:31:64:67:
8d:44:2c:5c:45:10:8c:7e:42:f8:75:7f:3a:a4:f1:1d:1a:3a:
21:81:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:22 2026 by rpki-client