Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lolbJOKXfp-OILCxwNZbWPlFW8Y.roa
File: lolbJOKXfp-OILCxwNZbWPlFW8Y.roa (raw, json)
Hash identifier: gQA0Fi8D+WfVDeD5/qWl0LODDZ57QVTjdrY4l+Tp58k=
Subject key identifier: 96:89:5B:24:E2:97:7E:9F:8E:20:B0:B1:C0:D6:5B:58:F9:45:5B:C6
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0A0ED661EBBFE872E26D4DE8AE4D95890
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lolbJOKXfp-OILCxwNZbWPlFW8Y.roa
Signing time: Mon 14 Sep 2026 17:18:27 +0000
ROA not before: Mon 14 Sep 2026 17:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:b844::/32 maxlen: 32
2a11:7d06::/32 maxlen: 32
2a11:bdc1::/32 maxlen: 32
2a11:bdc2::/32 maxlen: 32
2a12:e84::/32 maxlen: 32
2a12:6487::/32 maxlen: 32
2a12:bc83::/32 maxlen: 32
2a12:d804::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ed:66:1e:bb:fe:87:2e:26:d4:de:8a:e4:d9:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 14 17:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96895b24e2977e9f8e20b0b1c0d65b58f9455bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:4e:9f:fe:9d:39:e5:11:fe:40:cf:d7:3b:
16:35:97:51:c0:74:d3:6a:0c:e1:c0:6e:7a:14:f1:
cc:14:84:3f:6d:68:48:83:5c:50:d9:21:3c:18:30:
f3:9d:d9:8c:f5:24:17:9b:8e:17:91:87:5d:91:22:
94:5e:98:2b:7d:01:9c:32:50:a7:48:76:6d:bb:3a:
88:59:0b:ad:f8:c0:0a:ca:2f:f4:12:1e:77:d5:a9:
48:d5:1e:98:4e:d6:07:f4:de:c5:d4:d3:95:4c:e7:
68:e0:f0:15:d6:f2:78:0a:c1:16:16:9a:c4:04:3c:
7e:fb:4a:e6:09:77:63:70:f3:8f:7b:8d:bf:b6:4c:
96:35:49:1b:1c:41:c1:b9:f9:5b:5b:04:48:21:68:
07:36:de:19:ff:11:5b:fc:f4:d1:6c:ae:e6:12:be:
ba:a8:b2:4f:03:33:11:fc:50:b0:f1:0e:a2:d1:64:
64:1d:3c:3e:9b:f9:c4:85:aa:a3:b5:34:15:d4:84:
c9:8d:e8:76:d9:91:7e:97:e6:58:80:40:80:25:ed:
f7:54:31:1e:78:a7:39:21:09:77:e3:a2:e8:86:d9:
b7:1c:e8:5e:ed:11:1b:72:fa:82:50:ec:44:48:ab:
fe:ff:37:6a:d2:75:2c:1d:36:fe:b3:13:7e:1e:2c:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:5B:24:E2:97:7E:9F:8E:20:B0:B1:C0:D6:5B:58:F9:45:5B:C6
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lolbJOKXfp-OILCxwNZbWPlFW8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b844::/32
2a11:7d06::/32
2a11:bdc1::-2a11:bdc2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:e84::/32
2a12:6487::/32
2a12:bc83::/32
2a12:d804::/32
Signature Algorithm: sha256WithRSAEncryption
49:60:13:20:44:5a:4e:c2:99:82:c5:fa:e3:db:75:2e:b8:04:
84:32:39:c1:b3:9d:d9:f0:cf:b2:18:55:7e:3d:6e:49:ba:b5:
a4:02:58:70:7a:bd:07:6f:91:7a:bb:e1:72:04:78:f6:e9:d7:
4b:a8:7f:0e:be:1f:02:fe:6c:5b:37:b1:df:61:03:80:78:5c:
4c:df:18:c8:bb:80:c0:40:89:f0:3a:d8:c1:09:d9:cf:a3:be:
0f:48:5f:4e:bd:2e:ae:76:21:ca:86:d4:15:00:18:99:97:0b:
00:b3:d8:98:a5:da:b4:08:cc:14:e9:57:73:ae:53:17:db:43:
63:d8:c4:e1:c7:b4:a8:b4:3f:0e:83:0d:6a:7c:93:08:40:f7:
ca:66:e7:ca:eb:1a:da:96:d7:66:6e:21:a6:b4:a5:7c:65:43:
f0:aa:30:80:03:91:c2:e7:50:16:98:f9:16:32:f0:e5:ad:7b:
39:6a:c1:d1:b9:73:69:8e:14:8d:5f:df:0e:47:d5:d4:0c:81:
ee:43:b9:ea:dc:c4:41:71:9d:29:23:31:b0:4e:15:b9:b2:cf:
0b:b1:0d:7b:b6:ea:d3:c1:5d:1e:5c:92:b6:65:58:36:e3:57:
59:c6:ae:ea:c1:f0:2d:d8:48:47:94:cf:a2:00:3c:b7:7a:6b:
56:ab:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:51 2026 by rpki-client