Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LsdrWWn9khRgdA8v64dpOQeSptE.roa
File: LsdrWWn9khRgdA8v64dpOQeSptE.roa (raw, json)
Hash identifier: fE5hA6QIEdY5b3XGDqflu8YAU+aBTUQG/USrdBlxIg8=
Subject key identifier: 2E:C7:6B:59:69:FD:92:14:60:74:0F:2F:EB:87:69:39:07:92:A6:D1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C540051A31FEEBA336E420954A9F13387
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LsdrWWn9khRgdA8v64dpOQeSptE.roa
Signing time: Thu 12 Feb 2026 22:37:12 +0000
ROA not before: Thu 12 Feb 2026 22:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201212
IP address blocks: 2a06:9801:54::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:00:51:a3:1f:ee:ba:33:6e:42:09:54:a9:f1:33:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 12 22:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec76b5969fd921460740f2feb8769390792a6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:4e:0e:0c:1f:1c:82:70:0f:c6:d1:32:08:
c6:b3:22:6b:f7:c5:99:c1:d6:90:d7:db:f7:41:18:
c1:76:12:f0:cc:52:e3:32:30:fb:5a:55:a1:de:05:
73:27:01:a5:52:1c:02:c3:ae:fc:2e:83:b6:1e:6a:
df:53:37:01:8a:22:18:e2:43:77:65:96:05:40:56:
24:e9:bb:3b:58:5e:6a:78:ba:90:4c:18:f7:69:2b:
f0:98:30:4f:c4:47:68:b9:90:7e:8b:dd:e2:d2:72:
09:96:74:62:ea:07:a2:d0:7c:28:97:b1:e7:6d:0e:
3e:39:f8:3e:15:f1:42:5c:08:c1:7d:3f:3f:e3:b1:
a6:50:92:59:c0:6c:dc:62:55:9e:49:3a:70:65:0a:
45:8b:8e:8b:1e:fc:03:44:1d:92:2a:6e:2e:19:84:
e5:35:17:fd:a6:7e:03:8c:e8:16:b6:6a:d1:4a:d7:
90:63:54:b7:64:6f:2c:9b:dd:c2:37:81:c6:3a:cc:
5c:52:d8:72:6b:86:08:68:04:dd:f4:36:d7:68:f9:
72:47:a6:73:75:56:6d:76:bd:01:4e:34:d3:88:27:
c3:7c:ad:3d:d3:e5:79:d5:2c:a7:6f:b6:5a:23:0a:
3e:03:dd:8e:7c:61:b0:75:be:8f:6d:a9:e2:c3:84:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:6B:59:69:FD:92:14:60:74:0F:2F:EB:87:69:39:07:92:A6:D1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/LsdrWWn9khRgdA8v64dpOQeSptE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:54::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d9:b2:8d:9b:93:bb:78:37:37:b0:c5:b5:de:bd:3e:0b:f5:
64:8f:b5:b3:6c:68:5f:81:72:2b:dc:9f:ce:44:ab:d4:e8:c5:
57:b7:3f:85:76:d4:15:11:e0:d8:fd:c7:b5:56:98:b1:39:f0:
b0:87:f8:22:c3:c6:b0:5c:72:63:b7:41:45:d9:7a:69:b7:03:
9c:23:8f:68:13:a1:db:9f:a7:e8:08:f2:c1:fc:90:77:c5:2e:
90:dd:11:9d:9b:ef:9b:1f:2c:2f:d3:33:c3:0a:0f:dc:bc:27:
ba:5b:d6:90:d2:fe:b1:01:16:45:ee:27:26:a1:16:65:ef:c7:
35:4e:07:91:aa:48:ab:d6:7c:5a:ac:f9:ec:fe:9a:80:c6:05:
eb:17:d4:8e:5e:f5:ca:81:ee:25:04:d8:58:22:fc:67:2a:5c:
a1:50:25:2f:cd:ae:7f:97:d3:52:75:38:61:eb:e4:34:c4:a9:
26:4a:80:9a:43:03:0c:89:bf:cf:ae:20:9f:42:1f:5d:34:68:
46:35:61:09:36:73:e2:cb:80:b3:79:eb:29:19:00:01:99:f8:
aa:16:31:40:ee:57:9f:cf:96:eb:9c:ae:f5:cb:92:bc:12:b8:
82:90:8d:46:54:0d:bd:b0:37:a8:d5:ba:68:b1:07:2f:57:88:
d4:bf:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:07:29 2026 by rpki-client