Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tLaI7rYQkTl2IZzWJF3q1VJe4jo.roa
File: tLaI7rYQkTl2IZzWJF3q1VJe4jo.roa (raw, json)
Hash identifier: w30ejx/mKrZW7pH2vLbKwaGVJQ2r5gJ7FzR5iE5k8gw=
Subject key identifier: B4:B6:88:EE:B6:10:91:39:76:21:9C:D6:24:5D:EA:D5:52:5E:E2:3A
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E64BEA85D22259F73DA3BDE78CFBCC744
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tLaI7rYQkTl2IZzWJF3q1VJe4jo.roa
Signing time: Tue 26 May 2026 14:44:36 +0000
ROA not before: Tue 26 May 2026 14:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197286
IP address blocks: 138.249.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:be:a8:5d:22:25:9f:73:da:3b:de:78:cf:bc:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 26 14:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b688eeb610913976219cd6245dead5525ee23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:49:74:81:16:c5:8a:07:0a:11:ce:d4:57:
7d:6b:d9:c7:72:ff:55:b3:af:3d:4c:2f:91:f4:c1:
46:8f:79:69:6c:ec:93:a4:5a:59:1b:3a:92:2f:c8:
fe:b2:55:30:76:9f:74:96:88:54:9f:55:ba:22:d2:
a0:33:24:74:6d:09:30:19:9f:c4:a8:fa:fe:9a:26:
53:67:5a:98:47:35:95:ea:ff:1e:be:60:a5:b8:80:
a4:95:ff:75:c6:32:56:ce:45:2d:21:f0:9a:63:46:
58:30:92:9b:8e:3c:b1:75:55:5f:0b:9c:b1:9c:90:
54:3d:88:79:cd:22:60:9e:a4:ac:69:e8:c4:39:7c:
e5:35:57:40:d1:33:14:b2:a1:8b:ad:a2:f1:53:d2:
11:ed:f4:be:76:c0:dc:58:f6:ba:17:47:f9:c7:a9:
ba:c0:b2:7f:25:4a:5d:e7:8e:b2:bb:f2:92:e4:36:
66:f4:3e:2a:a7:4c:65:12:be:93:12:39:ed:2a:1b:
31:d1:7e:ff:9b:13:46:85:a0:9c:10:b9:00:86:bd:
1f:f4:bd:e8:9b:27:1c:43:03:e6:f6:26:31:29:d7:
cb:fd:c7:9d:18:ec:8a:ee:09:60:68:0e:56:a3:4c:
63:50:f3:79:5a:d1:94:e4:66:07:88:7e:cc:8b:14:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:88:EE:B6:10:91:39:76:21:9C:D6:24:5D:EA:D5:52:5E:E2:3A
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tLaI7rYQkTl2IZzWJF3q1VJe4jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.2.0/24
Signature Algorithm: sha256WithRSAEncryption
10:22:84:60:36:51:bd:cf:c5:a3:13:dd:b0:3b:86:99:fc:e9:
c1:ee:72:f9:be:ed:c2:b7:2d:17:51:6c:cc:d6:f3:00:2e:51:
66:9e:35:a3:b7:d9:f7:59:d7:fa:ce:4d:f9:e0:a5:31:98:ee:
b1:5a:17:70:76:ae:3d:e1:3d:44:f9:b4:d3:02:a3:a4:8a:68:
82:0c:08:d5:69:9f:c2:93:b2:f6:51:f1:60:90:b8:fd:ae:a4:
d2:23:4b:4a:28:00:32:6c:89:e7:12:39:7c:63:91:3f:8c:35:
ba:83:05:c4:1f:a1:e1:6a:fe:11:e2:9d:a7:94:cb:c5:aa:8f:
c4:63:c8:1b:cc:ac:f8:e2:3f:1c:09:ca:93:4b:25:8d:f5:a1:
53:65:d3:90:27:f5:c5:34:66:96:bb:0a:f2:59:61:23:fb:92:
4b:cb:31:48:18:4c:8b:39:8e:a7:81:db:6c:10:f5:f5:73:5a:
82:3e:19:7a:2e:43:34:3f:c4:d3:e9:c6:f2:30:87:25:63:fc:
4e:db:cc:73:4a:65:95:09:cc:e0:65:af:5b:23:fa:3d:6e:0f:
55:f0:f1:46:d8:9e:d7:4b:7c:b8:63:fe:bd:7a:46:43:ae:a2:
3e:69:06:e0:e3:fa:d7:9c:33:db:af:b0:9f:10:71:6f:e0:8b:
c2:7e:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:05 2026 by rpki-client