Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Lxptl-uW8O38sAVEWN5wTAYlSwU.roa
File: Lxptl-uW8O38sAVEWN5wTAYlSwU.roa (raw, json)
Hash identifier: kXI8cbv7YWam5X7TYhmExHonYK9HmHZsu6eft/CJBrU=
Subject key identifier: 2F:1A:6D:97:EB:96:F0:ED:FC:B0:05:44:58:DE:70:4C:06:25:4B:05
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A1680B014241C45C7EB1BEA9EA3BB778C5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Lxptl-uW8O38sAVEWN5wTAYlSwU.roa
Signing time: Fri 23 Oct 2026 09:15:14 +0000
ROA not before: Fri 23 Oct 2026 09:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 91.229.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:0b:01:42:41:c4:5c:7e:b1:be:a9:ea:3b:b7:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 23 09:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f1a6d97eb96f0edfcb0054458de704c06254b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:0d:5e:b3:89:16:a4:39:72:5d:fd:af:87:
97:9b:d3:28:50:c7:2a:fb:0f:ae:bd:4a:1b:04:2f:
f8:0d:d2:ef:a7:59:ef:63:35:c3:6c:61:08:61:a6:
4a:56:41:86:3c:ff:47:d9:c7:14:8c:58:03:96:0d:
f9:5f:43:55:e8:a9:46:5a:79:99:4d:6f:3c:c0:f6:
ce:d4:5f:ca:8f:3f:51:aa:5b:52:95:2e:13:e9:75:
73:e4:4b:bb:18:25:e2:7c:4f:41:cf:f1:06:76:65:
94:ff:71:01:21:e4:1a:d2:c1:b6:c2:32:d7:7e:e5:
b0:cb:f4:71:70:a9:9a:65:02:21:bf:41:e6:6e:27:
f5:cc:1b:4b:bb:54:fe:6c:86:05:19:db:74:9e:0f:
11:38:e8:b2:26:82:a6:6d:ee:67:16:e0:71:da:82:
0b:72:83:83:f3:e4:48:a1:01:2d:d5:3d:08:14:20:
b8:26:ec:a8:8e:53:08:c7:2e:0f:3a:3a:95:d4:39:
c0:3f:b8:36:c4:51:f3:bc:1b:f6:66:3e:c9:ef:78:
89:6a:c0:d5:43:b9:b2:f5:fd:1c:50:96:c5:44:85:
e9:8c:8c:9f:96:d6:a9:1f:6e:0f:07:e2:db:57:30:
92:dc:ad:64:58:bf:6d:2d:d5:07:17:c6:29:d8:6f:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:6D:97:EB:96:F0:ED:FC:B0:05:44:58:DE:70:4C:06:25:4B:05
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Lxptl-uW8O38sAVEWN5wTAYlSwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ba:66:d0:53:a4:0b:70:c3:f1:60:fa:49:34:3a:93:3d:f7:
72:6e:0e:42:7a:c4:38:21:60:a3:f1:d7:28:48:08:b3:e0:86:
65:04:59:c0:c8:19:cd:a7:c5:f4:12:fa:e6:1d:c6:e7:8f:45:
2b:c6:74:33:93:d7:cd:8e:aa:25:cd:d4:a0:39:e5:3d:84:d5:
c6:37:62:32:eb:5d:af:d9:5a:fd:38:10:18:57:f4:60:39:5a:
8d:60:ac:3b:f0:72:51:77:3d:c2:81:e4:0d:2b:d2:bd:92:f0:
3d:c9:cf:3b:44:b8:cf:63:9b:6e:18:40:cc:24:ae:5d:af:db:
c2:67:0d:9c:4c:f2:f9:1d:95:e9:94:1f:ed:92:7f:d5:46:56:
f0:36:97:23:50:c3:67:18:d7:ba:15:7b:54:8d:7f:b2:78:57:
d1:66:4a:84:6b:42:43:6c:fb:be:64:92:e4:58:c1:07:aa:6b:
33:91:05:21:27:a6:84:4a:b2:c0:1c:37:b2:95:91:03:d6:41:
a0:7e:d6:7d:54:fd:47:d6:76:a0:09:a0:70:f5:56:cc:1c:db:
ad:d1:40:7e:c8:f6:54:15:f5:fb:74:90:7f:64:9e:cc:c8:60:
f5:45:26:09:0b:4a:72:ac:8e:74:62:16:19:42:f0:76:14:fb:
9a:73:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:52:36 2026 by rpki-client