Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/Lt3Do0qrS9K18yqvbWOzJ7Fal0c.roa
File: Lt3Do0qrS9K18yqvbWOzJ7Fal0c.roa (raw, json)
Hash identifier: U1RRI5ihp7h7qnyyzpN38hf/I9yHiKAA6uqUMLL3egU=
Subject key identifier: 2E:DD:C3:A3:4A:AB:4B:D2:B5:F3:2A:AF:6D:63:B3:27:B1:5A:97:47
Certificate issuer: /CN=2f5191e9c2ced843db47f1ff78c4612582d85d58
Certificate serial: 01A1453F3C848D64570D0AFDE940E0CA8F3E
Authority key identifier: 2F:51:91:E9:C2:CE:D8:43:DB:47:F1:FF:78:C4:61:25:82:D8:5D:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1GR6cLO2EPbR_H_eMRhJYLYXVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/Lt3Do0qrS9K18yqvbWOzJ7Fal0c.roa
Signing time: Fri 16 Oct 2026 15:05:34 +0000
ROA not before: Fri 16 Oct 2026 15:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218378
IP address blocks: 2a0f:ae00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/L1GR6cLO2EPbR_H_eMRhJYLYXVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/L1GR6cLO2EPbR_H_eMRhJYLYXVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1GR6cLO2EPbR_H_eMRhJYLYXVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:3f:3c:84:8d:64:57:0d:0a:fd:e9:40:e0:ca:8f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5191e9c2ced843db47f1ff78c4612582d85d58
Validity
Not Before: Oct 16 15:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eddc3a34aab4bd2b5f32aaf6d63b327b15a9747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:61:70:2a:04:6a:46:78:98:6f:1a:2d:46:
97:bf:d5:c6:5c:23:ab:cb:d0:c7:08:4e:07:5f:6c:
a7:b0:e8:e7:ae:15:9f:62:dd:82:5e:6c:e9:04:70:
b4:de:61:5b:10:06:8b:36:e2:64:82:95:13:1f:96:
4d:99:ad:14:c7:12:cf:13:d4:27:44:e2:64:0b:6f:
7b:07:5a:6d:b6:33:42:ce:7c:02:7d:b0:20:14:c9:
16:7e:20:ba:da:c9:c7:a2:b4:0a:dc:83:b0:8b:b0:
03:01:34:1c:ad:87:39:44:8e:e0:e6:1a:6f:4f:41:
c6:92:37:99:b1:62:0f:44:3e:8e:e2:2c:54:8e:ee:
85:6f:68:93:03:f7:9e:47:e0:ae:b7:39:72:e0:d1:
8e:79:94:2e:27:8d:e8:9e:00:97:f5:72:87:8c:40:
e4:39:7c:96:d7:6f:1d:c7:29:02:cc:10:80:4e:69:
c3:53:02:3e:1a:ba:70:59:0c:64:c4:27:af:c2:4b:
37:1d:cb:ed:f1:0b:9f:5f:ae:37:42:8e:c6:ee:39:
0a:e7:f3:66:7c:34:ef:08:5c:b8:86:49:72:1a:20:
37:be:06:e3:59:03:49:18:51:e9:96:88:54:79:c0:
35:00:3f:ee:ba:ce:3f:81:b7:c4:af:93:0d:75:e7:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:C3:A3:4A:AB:4B:D2:B5:F3:2A:AF:6D:63:B3:27:B1:5A:97:47
X509v3 Authority Key Identifier:
keyid:2F:51:91:E9:C2:CE:D8:43:DB:47:F1:FF:78:C4:61:25:82:D8:5D:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1GR6cLO2EPbR_H_eMRhJYLYXVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/Lt3Do0qrS9K18yqvbWOzJ7Fal0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/04cc80-cc36-4ef0-a325-de62247bdf5c/1/L1GR6cLO2EPbR_H_eMRhJYLYXVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
90:72:35:9f:96:5d:33:c2:f2:84:a8:e9:07:72:98:a3:3a:ad:
7c:a5:b6:98:4d:f9:64:ae:86:81:a9:f4:2e:6b:6c:cb:d8:81:
02:26:57:04:37:63:08:c6:bf:65:6a:e1:84:6f:0c:d2:f1:bd:
a3:cd:7d:1a:70:0e:1e:69:dd:14:76:05:a2:51:a3:47:75:2c:
97:17:37:0d:f5:99:96:5b:e1:b2:00:60:ae:91:db:8e:46:e2:
dc:ac:89:25:18:28:ee:31:e9:b7:03:8b:c5:b4:01:62:be:13:
d6:1b:31:45:24:e2:cb:8d:78:69:28:1d:40:4f:f5:05:75:79:
2e:60:57:7b:18:de:52:e2:d6:1a:e0:62:e7:78:9c:ac:c4:57:
a5:02:e4:ba:15:bb:f8:4a:43:94:fc:6b:7c:26:4c:0f:b5:da:
41:29:07:73:73:d1:91:2c:53:bd:1a:2c:4c:5b:03:30:d8:31:
12:2e:e8:a1:33:8b:76:5d:e9:8a:56:10:17:53:58:65:a8:78:
d4:15:44:f0:fb:64:05:40:d1:f5:db:30:fb:13:da:e0:65:a6:
4b:51:95:28:32:cb:df:58:c9:aa:6e:c8:81:8b:67:41:32:50:
73:12:d6:1b:bd:72:57:f7:41:92:fd:a2:01:c0:f8:f4:08:61:
a6:9b:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 16:38:24 2026 by rpki-client