Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/LvdPzY76oVVCPqtxUifx0oiy6Nc.roa
File: LvdPzY76oVVCPqtxUifx0oiy6Nc.roa (raw, json)
Hash identifier: EGp1yCKfki9H4eeCPphijJ85GaSMwEVebBOhEKpM2eY=
Subject key identifier: 2E:F7:4F:CD:8E:FA:A1:55:42:3E:AB:71:52:27:F1:D2:88:B2:E8:D7
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 019D2E35556B61BB3E0300CBDE781882174D
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/LvdPzY76oVVCPqtxUifx0oiy6Nc.roa
Signing time: Fri 27 Mar 2026 07:32:20 +0000
ROA not before: Fri 27 Mar 2026 07:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60645
IP address blocks: 2a04:3dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:35:55:6b:61:bb:3e:03:00:cb:de:78:18:82:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Mar 27 07:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef74fcd8efaa155423eab715227f1d288b2e8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:27:47:07:76:ec:ca:b5:ff:6f:68:f5:8b:
93:17:2e:61:91:78:49:35:42:44:de:c8:f6:9c:23:
15:0c:12:00:25:d2:39:6c:de:d9:ff:91:cc:82:71:
fc:f7:8b:09:20:f4:6a:03:64:93:b9:91:9a:e5:79:
7f:6d:61:60:fa:52:52:8a:83:93:63:b5:54:37:5b:
ff:61:45:83:00:f9:c8:a4:56:7f:d4:c9:6b:a0:f5:
86:87:b8:f4:87:39:0b:aa:af:c6:92:e6:d8:4c:72:
19:95:ef:90:8a:d2:2c:5b:10:70:50:37:88:ab:05:
c1:8c:09:1d:43:f5:7e:47:f1:d5:f0:d3:2f:f0:03:
09:da:99:85:14:bf:5e:17:52:54:66:47:61:8b:4a:
83:35:a8:3f:f6:7b:0f:a7:d1:52:df:67:90:16:6f:
be:09:19:25:c0:d7:e3:b3:bc:84:8f:86:87:98:75:
e7:42:8a:42:97:86:9a:5a:b5:eb:bb:1b:26:73:cf:
08:d8:da:f4:ad:82:39:87:68:98:e7:9b:6a:9d:f3:
00:1c:e5:0b:1c:78:b6:be:4a:4a:34:eb:bc:ef:0e:
e0:dc:0e:fa:e1:e9:a3:99:87:87:31:98:82:ff:c9:
84:8e:8f:b3:60:a6:75:cc:bb:58:d2:4f:0c:69:16:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:4F:CD:8E:FA:A1:55:42:3E:AB:71:52:27:F1:D2:88:B2:E8:D7
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/LvdPzY76oVVCPqtxUifx0oiy6Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:0d:b3:f3:e7:67:21:16:24:f6:35:a7:85:13:a7:12:f5:c9:
c4:52:68:2c:cf:1b:99:75:d8:1c:98:ea:5d:36:5d:bc:4b:e3:
e6:e8:52:01:97:d4:da:a8:20:cd:34:bd:f1:1f:7b:30:d9:0e:
8a:dc:fd:e2:57:d0:c9:af:ab:ac:bc:28:99:f7:48:dd:57:e3:
a2:6e:06:d6:c6:69:03:3b:50:d1:5f:51:c5:b1:85:ec:f0:49:
62:56:46:ae:ad:46:6a:cd:b4:ea:8e:01:1e:ae:2f:2b:c0:c2:
44:95:cb:ad:0e:61:52:54:a1:cd:75:19:83:ff:3d:4d:97:25:
61:bd:2c:3b:89:af:fc:9d:41:bd:be:3d:19:bc:97:f1:12:90:
8b:82:6e:00:84:9b:42:e8:15:48:00:b5:65:5a:44:e4:94:61:
ba:33:9d:1a:86:f2:cb:fe:6a:69:70:26:ae:b2:d4:a5:55:d2:
e8:f8:2c:be:c1:39:20:a5:bc:ed:48:a1:3a:1f:ce:74:2a:25:
b5:eb:14:50:e8:a2:dd:0d:d1:de:a9:fe:c2:9a:30:0f:49:95:
95:94:80:e9:df:f9:92:62:1c:28:ab:87:a4:70:ce:d1:0e:ef:
05:d8:d0:59:98:5c:04:c2:60:4e:b9:2c:d7:b7:91:e4:a9:5b:
68:c0:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:58:27 2026 by rpki-client