Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dRLpf6oxngvb-jpacEjNfzH8vEo.roa
File: dRLpf6oxngvb-jpacEjNfzH8vEo.roa (raw, json)
Hash identifier: z3W5ytp/RC55hDMCsL0S4Rl1hXPi4fR0uHu8lIGnaOs=
Subject key identifier: 75:12:E9:7F:AA:31:9E:0B:DB:FA:3A:5A:70:48:CD:7F:31:FC:BC:4A
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019F96108BFA7007BF35E9A5A216EA9B1345
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dRLpf6oxngvb-jpacEjNfzH8vEo.roa
Signing time: Fri 24 Jul 2026 21:38:14 +0000
ROA not before: Fri 24 Jul 2026 21:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 170.168.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:10:8b:fa:70:07:bf:35:e9:a5:a2:16:ea:9b:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 24 21:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7512e97faa319e0bdbfa3a5a7048cd7f31fcbc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:32:8a:59:cb:9e:9a:c6:03:40:92:5a:2f:
b0:fe:31:ca:70:a7:4d:27:5e:40:89:a3:02:20:16:
f0:f8:02:fc:8a:d5:6f:a6:53:f0:72:2c:bc:fb:ea:
dd:b4:8b:8e:d1:e9:75:de:fd:9d:a7:64:23:f3:41:
07:a3:ae:40:79:c1:50:43:61:e5:78:c6:51:65:d4:
89:17:73:d7:39:8e:f1:4f:3c:10:59:de:e6:ed:33:
a6:a6:02:64:bc:71:92:84:6f:77:ef:1b:e3:43:43:
36:8d:81:66:9d:11:17:6a:ab:36:e9:d1:56:f2:99:
75:df:a7:b6:9d:9e:96:bd:0f:ce:44:70:9d:e7:f6:
ae:5b:d3:36:af:05:59:f8:77:75:3e:4d:6f:0c:fc:
be:81:d1:34:4d:35:b4:36:bd:2b:22:cf:0c:a2:20:
08:cb:3c:5a:d8:40:6a:d5:4c:af:71:15:fe:e8:10:
99:09:a7:92:f1:9d:9e:18:6a:f0:23:16:b6:59:ff:
39:9f:eb:5a:44:12:73:64:37:b8:7e:16:e6:09:a3:
d3:8d:89:4c:9b:cb:a9:91:18:ff:3d:2c:4f:06:76:
23:83:bb:d2:2e:ad:68:2c:6c:9b:f1:7d:1e:4a:ae:
a1:13:f5:34:e2:81:d2:31:ba:5a:27:46:0c:83:32:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:12:E9:7F:AA:31:9E:0B:DB:FA:3A:5A:70:48:CD:7F:31:FC:BC:4A
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dRLpf6oxngvb-jpacEjNfzH8vEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:13:05:c3:3f:4c:a2:b5:21:d5:32:31:f5:d3:63:21:18:86:
a7:1a:8c:93:28:94:2b:d3:81:5b:72:43:dc:4b:59:96:54:74:
56:f0:00:0a:c0:4c:5f:f0:12:af:87:97:60:da:c5:a5:a9:b1:
96:e0:2e:cf:13:cd:f5:08:3d:cc:ec:f4:c6:7b:f1:f8:07:bd:
3c:02:62:a5:40:de:23:f0:08:41:c5:6a:5b:d8:0b:57:d3:37:
36:1d:de:2f:0e:2d:34:52:79:18:05:46:3d:ef:b4:42:ad:c9:
14:3d:bd:da:ee:f7:9e:bf:e1:38:dc:ae:bf:85:9c:c8:07:a5:
05:2e:9a:fe:8f:31:47:2c:ea:f0:64:ad:14:66:9d:b1:89:29:
1e:ed:c3:a2:28:43:26:98:82:a6:d0:a5:f1:0c:0c:2e:3e:91:
a3:9f:62:63:2b:89:d8:28:04:05:e3:b2:a2:7a:67:66:7e:3e:
95:af:be:05:6d:18:63:e1:2b:3e:3a:4f:d3:5d:a4:3c:4b:c6:
25:60:f6:3b:2b:9c:e5:06:11:1c:24:0c:da:ee:95:9f:bf:e4:
6c:fe:bf:19:c6:d0:13:8e:9f:36:4a:36:c8:5a:3d:b7:ba:54:
4a:f4:a8:12:0e:cc:40:89:be:c0:31:0c:39:ff:4e:89:2e:81:
d9:d2:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:59:49 2026 by rpki-client