Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ltuqnV7zy2DnQsucRbj8arC5CQM.roa
File: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (raw, json)
Hash identifier: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=
Subject key identifier: 96:DB:AA:9D:5E:F3:CB:60:E7:42:CB:9C:45:B8:FC:6A:B0:B9:09:03
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019FA42327FD3FCD11F15ED948C931EA4743
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ltuqnV7zy2DnQsucRbj8arC5CQM.roa
Signing time: Mon 27 Jul 2026 15:13:15 +0000
ROA not before: Mon 27 Jul 2026 15:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 2a11:37c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:27:fd:3f:cd:11:f1:5e:d9:48:c9:31:ea:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 27 15:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96dbaa9d5ef3cb60e742cb9c45b8fc6ab0b90903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:66:46:f1:fc:a5:55:e8:65:25:c6:41:83:
1e:4c:48:42:a3:17:ca:f0:99:98:19:ee:f4:b1:04:
c7:40:59:69:04:47:32:cb:c3:33:c8:0e:4c:7a:de:
81:ab:38:e1:72:52:59:e5:8d:2e:dd:71:8a:3b:c0:
dd:5b:40:8c:03:0d:f9:fb:7e:b2:d9:ee:47:71:5a:
b1:c7:e3:ef:3d:46:63:6f:e2:16:cd:17:c2:b6:26:
cf:db:64:ef:c5:8e:cd:56:c1:34:5a:67:b0:86:fa:
bd:0f:8a:f1:fb:38:e5:ff:17:d9:06:09:6a:22:4b:
1a:12:c3:94:5a:32:cf:01:14:f9:94:00:85:ea:c1:
fe:40:85:53:d7:01:fa:59:15:73:bf:9f:a6:c2:4b:
dc:f4:47:1d:63:ae:fb:20:04:84:2d:2c:2f:2a:90:
f4:40:4f:1f:39:11:d4:31:0f:e2:12:59:b3:fe:ae:
e1:3e:7e:0c:df:53:c0:21:54:63:7d:0f:0b:cb:61:
4f:45:53:36:48:05:42:70:4b:5e:3b:d2:02:4b:60:
ce:d8:0d:d0:b3:89:88:b9:ce:5e:ec:52:4c:ec:1b:
b4:eb:f8:4b:03:fe:82:d9:73:c7:0c:07:c7:75:29:
4b:fd:b8:b0:6b:5a:74:f7:87:9d:10:fe:24:9b:4e:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:AA:9D:5E:F3:CB:60:E7:42:CB:9C:45:B8:FC:6A:B0:B9:09:03
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ltuqnV7zy2DnQsucRbj8arC5CQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:d4:25:c6:32:df:8c:f1:ce:8d:9c:81:e5:ad:54:31:52:2d:
b3:03:db:9b:c1:1b:cb:b5:74:9c:13:03:ad:f7:9e:71:4f:7a:
60:ab:e2:bd:e4:1f:fd:6e:8e:15:91:03:6e:dc:a9:e5:8e:4a:
8e:fb:38:f7:47:a9:00:b8:04:00:5f:6e:b8:3d:14:68:6f:25:
d8:57:0a:2b:03:41:8c:a8:fe:23:46:23:18:45:d0:9c:a6:41:
b7:3f:f9:3d:58:4b:ad:6f:01:d9:c3:01:ff:0f:40:c9:1b:d0:
c2:ea:10:97:99:26:4c:88:ef:97:86:87:01:c4:7c:58:66:00:
5d:ab:87:be:09:7d:dd:23:2a:7d:a3:96:f2:4d:55:a0:44:63:
eb:96:b6:ec:ba:44:18:06:0c:7c:b6:29:1e:7d:8c:d2:95:ed:
53:3b:e6:14:02:fe:a3:6f:9c:ba:c9:21:ca:58:2f:6b:b6:7f:
7d:ee:d8:96:7b:0e:21:6d:03:38:84:70:ff:69:8b:21:f1:30:
13:b8:b7:e1:5a:2a:63:cc:8c:61:70:34:1b:3f:76:e6:9f:c4:
ab:cd:ed:7b:02:ca:82:e1:6b:ec:b7:6e:ba:06:0d:8c:99:e3:
6a:c1:26:d4:4f:6f:e4:34:da:b2:ea:a6:06:82:08:77:dd:c4:
7f:83:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:31 2026 by rpki-client