Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa
File: LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa (raw, json)
Hash identifier: dWz7dfTbtMU4DCAgJCXkJIju9IrVB5fnVpUt4hweyxU=
Subject key identifier: 2D:57:48:0D:F6:CC:24:A6:C4:44:4E:62:62:91:E3:F1:94:4D:29:40
Certificate issuer: /CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Certificate serial: 019F23682C79AF9A2D12279AED34FF937207
Authority key identifier: E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203909
IP address blocks: 2001:678:d88::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2c:79:af:9a:2d:12:27:9a:ed:34:ff:93:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d57480df6cc24a6c4444e626291e3f1944d2940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:00:f0:87:fb:e5:f9:2d:de:0b:c1:a9:fe:
1b:4a:ce:79:f2:7d:4c:73:d2:c1:ca:38:c4:49:c3:
a4:7b:0c:2c:ae:b0:0f:01:02:a4:b8:dd:c8:82:34:
31:c1:a5:4d:e7:97:7b:30:37:0c:b7:ab:b0:26:6d:
aa:1f:05:39:87:8c:e3:9c:7e:21:b6:82:4f:69:08:
81:67:66:86:5c:14:48:33:b3:55:30:12:47:df:31:
61:e5:36:04:e6:b6:ce:bf:1d:7c:54:dd:86:3a:ac:
33:cd:e2:69:95:41:96:d3:cd:ca:31:d7:9b:5b:bb:
aa:27:df:3b:74:a7:75:91:2b:49:fb:f6:0b:10:81:
60:f2:f5:de:a3:bd:b2:23:9c:ae:07:d0:cc:fe:c8:
e6:8d:67:64:74:fa:a0:13:c9:3c:b5:b8:aa:b8:ec:
e3:0f:bb:37:b3:c4:a5:c0:8c:06:1a:75:3b:b7:a3:
88:45:23:37:ee:38:0d:80:06:14:41:f2:39:6a:ef:
94:84:18:2f:eb:dd:d5:0e:fd:67:aa:94:5e:40:c0:
0d:e1:16:12:2a:e2:34:6f:c0:9e:30:15:1f:57:41:
17:d5:73:59:17:62:2f:a1:79:03:9c:39:cb:e7:22:
d4:a9:dd:b9:a8:89:80:61:47:9e:96:e0:ab:8e:c0:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:48:0D:F6:CC:24:A6:C4:44:4E:62:62:91:E3:F1:94:4D:29:40
X509v3 Authority Key Identifier:
keyid:E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d88::/48
Signature Algorithm: sha256WithRSAEncryption
99:19:80:1e:1d:83:fc:7d:82:80:6c:01:1a:c9:f9:7d:69:ef:
e4:53:be:4e:82:18:89:a4:99:ca:6c:1e:e0:98:7c:1a:c3:d3:
f6:97:95:d7:33:1b:de:9f:eb:89:e3:00:f2:41:88:6a:1a:4b:
67:47:0d:2f:0e:d8:73:e1:f5:b2:d2:4a:89:52:5c:a6:cc:97:
fb:30:68:70:d5:64:e8:be:2e:07:4a:b8:e9:a6:d5:10:1b:e0:
62:4b:70:47:cd:84:35:14:0d:8c:b5:0b:b1:a5:1e:20:2d:95:
ef:89:a3:35:c4:78:e2:a9:f4:51:89:48:51:f5:7f:e5:05:fa:
a8:6a:e1:db:be:d5:5a:d4:1b:f6:a6:71:90:36:71:f2:9d:72:
d7:c1:8b:c1:7c:85:43:1e:29:2b:3b:df:97:61:93:52:a9:20:
a8:be:0f:4f:cf:b6:c4:fd:5f:2d:5b:a3:fe:4d:47:76:3c:e2:
c5:27:2b:0d:35:92:58:6b:c0:06:51:ec:5b:ca:a9:ca:27:56:
e9:11:9d:e5:6a:e2:27:6b:3b:3a:68:15:84:0e:ff:c6:82:55:
bb:ef:11:32:4b:64:4a:6e:6a:06:50:38:c4:19:c2:dd:0e:ed:
22:83:c3:6c:20:11:c2:5a:2a:14:29:54:f1:f3:2c:18:1d:1d:
55:36:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:31 2026 by rpki-client