Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa
File: b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa (raw, json)
Hash identifier: FK35y/gUkNUiIhgZhYId2WxExylNkVhtjFm+uxSpPqY=
Subject key identifier: 6F:E2:C6:42:52:FC:2F:36:66:E1:41:96:52:23:EB:B5:B1:7F:6B:50
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 019B791138A86988908EFB4D8D3DF62E7238
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa
Signing time: Thu 01 Jan 2026 10:18:50 +0000
ROA not before: Thu 01 Jan 2026 10:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206290
IP address blocks: 2001:67c:9e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:38:a8:69:88:90:8e:fb:4d:8d:3d:f6:2e:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Jan 1 10:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fe2c64252fc2f3666e141965223ebb5b17f6b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:6e:1f:74:13:67:83:9d:1a:37:77:e9:e7:
cf:f9:d4:ba:f4:99:cc:ee:e0:9c:0f:ae:36:82:57:
57:ac:4e:0f:b4:25:0e:4b:8a:a9:77:c9:a0:c7:ad:
61:6f:b5:25:9a:94:2e:27:76:ee:7f:85:a7:67:ab:
b4:4e:e8:6d:d6:6c:c3:cc:be:ca:ec:d0:06:c5:c8:
50:60:37:12:d0:d7:5c:54:67:d5:fd:98:29:e9:72:
41:a8:c8:ee:da:25:70:7f:01:83:fe:f2:17:65:83:
1f:54:3c:8f:d4:76:28:18:e9:f2:64:0f:be:00:dd:
c6:a2:5c:de:85:70:bb:74:a1:4e:0e:7d:bb:12:fb:
c1:02:8e:f5:a0:ee:da:d2:1c:d6:78:ed:8b:12:2f:
fe:a8:b0:cd:45:e9:75:ec:21:8d:4d:94:23:51:81:
78:2f:63:15:83:9f:2a:b7:8b:f2:81:10:9e:50:98:
16:47:7f:c3:8c:a6:12:ed:e8:90:72:01:31:43:8f:
d1:b0:00:ee:20:bc:a8:82:28:72:94:15:4c:88:52:
fa:ea:c7:3d:ce:94:27:94:0c:1b:02:f6:48:f2:69:
06:e1:82:07:55:e7:72:ab:3b:c1:80:45:c2:20:aa:
58:31:2b:ee:f5:8a:e9:1a:0f:5a:f6:5d:11:87:f9:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:C6:42:52:FC:2F:36:66:E1:41:96:52:23:EB:B5:B1:7F:6B:50
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9e0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:99:74:ff:41:1c:fc:19:a4:2f:75:b7:1a:2f:c2:ce:7e:09:
af:02:83:45:e6:fd:14:88:52:f6:4d:be:34:d0:bc:40:89:56:
ce:01:17:a0:ad:86:23:ff:cc:9a:f9:db:7a:6d:bd:b9:6e:87:
a0:58:66:2c:0f:c8:30:5b:51:3e:3a:fa:ca:74:d7:1c:1d:ca:
2f:81:83:e9:44:f3:48:d3:bc:b1:80:46:7c:9d:f8:d1:48:96:
ab:e6:f4:16:0e:86:a4:5b:cc:d2:a0:9f:4f:d1:b5:18:70:e1:
17:be:a8:58:bc:e3:7d:c2:06:36:f2:12:e0:5a:e5:2d:b3:c7:
dc:63:e9:26:78:e4:a6:29:ad:b1:c0:28:36:21:33:62:e8:91:
63:9f:8e:e8:7a:c4:d5:1a:6f:2a:c4:d7:7c:82:0b:b9:d4:4e:
21:73:54:31:20:79:b2:cc:45:1d:97:9c:e1:68:d5:21:d1:26:
dd:5f:44:85:1a:c4:f3:72:09:de:f1:a6:dc:ed:98:e4:6a:d3:
41:49:9d:38:a1:63:b1:15:f5:d2:c7:b2:9a:ad:68:84:7b:56:
82:7d:1f:50:5d:1d:ef:28:93:58:d1:7a:6e:e9:3c:d7:b9:ae:
84:b0:c5:7e:db:fb:78:ac:47:7f:79:82:dd:1a:2b:35:e2:9c:
b5:d9:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:36 2026 by rpki-client