Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa
File: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (raw, json)
Hash identifier: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=
Subject key identifier: 2F:A4:5A:DB:90:A3:2A:9F:E6:10:4B:DB:E9:F9:CB:CC:1F:73:E3:C6
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D01A303F00B543465528311CF63DD2148
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa
Signing time: Wed 18 Mar 2026 15:49:13 +0000
ROA not before: Wed 18 Mar 2026 15:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216068
IP address blocks: 72.56.218.0/23 maxlen: 24
72.56.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:a3:03:f0:0b:54:34:65:52:83:11:cf:63:dd:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Mar 18 15:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa45adb90a32a9fe6104bdbe9f9cbcc1f73e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:88:ee:39:50:26:be:35:f4:5f:d6:5a:a7:
e0:e2:72:80:ae:d2:dd:bf:b8:67:78:fc:e5:0b:36:
f4:6e:86:db:fb:89:be:d4:c0:50:14:ae:99:72:99:
fd:f5:1a:2b:56:08:48:ab:f1:59:12:1e:37:f4:55:
76:e7:8d:83:49:b3:bb:b5:30:d3:9f:55:e2:f7:de:
94:ff:f9:7a:34:e7:24:b6:c4:1c:4a:c1:7b:a1:b3:
8b:c3:76:9e:6b:39:27:7b:89:d5:bd:36:b8:ca:c4:
95:6e:9d:9f:b3:76:1e:2f:29:5b:c6:f1:df:b6:05:
d0:c1:70:7c:09:bf:97:dd:22:00:48:50:59:17:b5:
ac:5a:84:2b:ec:1e:0d:5c:23:69:f6:06:29:6d:64:
a5:60:0c:8d:50:49:5f:70:84:8a:5b:80:23:20:4c:
08:8b:65:a9:98:fe:bd:b0:2f:ac:2e:a8:49:ad:1f:
11:82:f3:1a:88:9a:e9:5c:63:f5:60:b2:7c:fa:8d:
4f:73:6d:95:4c:64:8c:1e:ab:80:3e:78:21:22:c3:
99:9d:34:df:cc:97:73:6f:c5:2b:10:97:89:57:74:
2d:f2:85:1f:f7:2d:cc:9d:d1:90:b5:c0:27:06:dd:
d2:82:7b:ee:3a:71:2d:39:3e:01:a3:7f:88:fd:63:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:5A:DB:90:A3:2A:9F:E6:10:4B:DB:E9:F9:CB:CC:1F:73:E3:C6
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.218.0-72.56.221.255
Signature Algorithm: sha256WithRSAEncryption
b4:d5:b5:88:d7:b6:cd:0d:df:61:a1:f5:95:2b:ad:f0:71:16:
f5:8e:b4:92:0c:30:2f:01:07:d2:cf:e1:9b:b5:bc:2b:90:36:
ab:2c:f9:0f:5d:31:f8:ef:87:09:22:05:63:e3:0a:2f:31:61:
31:f7:15:91:21:ff:ad:7f:aa:53:de:a7:b6:a4:ee:84:93:32:
12:1e:dc:c8:2b:ee:7a:4f:d6:ec:96:a3:ee:bb:db:0f:16:ae:
bf:24:c1:15:79:a5:99:f9:ac:ec:5d:d9:ba:cf:cf:11:9d:78:
51:e0:f3:b4:7f:79:0a:a0:42:26:24:98:40:6f:67:a8:84:f9:
da:e2:fc:e6:be:fc:38:75:e9:b9:a7:00:de:8d:78:3b:77:cc:
d9:42:ab:05:66:57:1a:ed:ac:57:75:fc:4b:64:59:85:02:20:
d5:a7:af:92:98:93:98:5f:1c:c8:79:91:1f:b1:f6:08:78:23:
39:fc:f5:7e:e8:f8:e1:ad:83:b7:22:2c:6a:67:67:78:22:0d:
02:8a:57:51:74:b0:38:d6:90:05:f5:8c:9b:5f:19:46:25:05:
6c:03:95:36:10:94:fd:a7:71:1d:b1:9a:05:b1:5b:fe:bb:b9:
8e:18:80:72:34:50:22:7b:e5:4d:8e:72:02:bd:9b:8d:86:ca:
d1:07:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:03 2026 by rpki-client