Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa
File: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (raw, json)
Hash identifier: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=
Subject key identifier: B7:6C:D4:16:9C:72:E0:B4:06:72:DF:6B:F5:92:74:6A:C0:E9:2C:5C
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019EB2BFC01DD2F51FF15AA858D4880E11EC
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa
Signing time: Wed 10 Jun 2026 18:16:11 +0000
ROA not before: Wed 10 Jun 2026 18:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20773
IP address blocks: 2a02:fe81::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:bf:c0:1d:d2:f5:1f:f1:5a:a8:58:d4:88:0e:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 10 18:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b76cd4169c72e0b40672df6bf592746ac0e92c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:39:18:e2:c5:ce:b8:6b:55:65:f3:5e:29:
29:81:94:67:b1:ba:5c:74:50:ac:6d:8a:e1:73:c0:
24:d1:83:ec:4a:58:18:77:bd:13:08:ae:86:32:6f:
fb:9e:39:4f:fa:ec:2d:7b:25:0d:92:da:8f:16:b1:
0c:21:26:df:7e:6b:02:1f:ba:de:7b:f2:90:4f:f7:
e6:6d:d3:43:dd:b8:fa:e3:ac:b9:9d:0b:03:7c:6f:
c8:29:d6:82:7b:64:1a:78:5c:03:f3:44:24:32:8b:
5c:dd:50:42:53:41:bf:fb:74:3f:97:b4:13:6a:e4:
da:bf:93:1a:4c:b3:c4:26:af:3f:1f:ec:00:cd:fe:
41:f1:78:9b:b1:6c:91:49:ba:04:d6:4d:0e:9f:23:
c3:14:cc:e8:93:da:0b:c4:f4:18:95:f7:61:b5:d9:
38:b2:c5:fd:61:81:c0:04:92:d5:99:02:6e:55:46:
2c:c3:db:c8:69:60:30:5b:89:36:e8:ca:b4:95:35:
90:7d:ac:74:3e:26:99:c7:90:3e:28:4d:19:60:ec:
77:4a:2a:e5:02:ce:28:5a:cb:bf:10:f6:67:48:7a:
73:89:4f:11:4e:21:be:8d:76:01:fd:c4:c0:84:75:
f1:36:ff:34:9b:c4:fc:a2:fc:60:8d:4c:e3:0b:fc:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:D4:16:9C:72:E0:B4:06:72:DF:6B:F5:92:74:6A:C0:E9:2C:5C
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:fe81::/45
Signature Algorithm: sha256WithRSAEncryption
7b:a1:47:74:72:c7:ed:55:72:3b:c0:0d:43:6d:4c:77:8c:cd:
f5:89:68:ff:40:8b:79:88:cc:1a:f4:fa:92:fc:d2:5a:e5:f8:
3f:37:a9:f7:c8:a6:a4:bd:e5:0d:a3:e9:62:30:c8:55:46:db:
b8:2a:5b:08:68:a9:e1:cd:07:a8:63:71:a8:13:19:69:58:de:
12:4f:c0:65:c9:7b:cc:f7:af:07:52:6a:6b:7c:1c:7b:a3:95:
79:1d:90:74:f7:81:44:ca:8c:cd:a3:7c:b9:95:52:87:05:13:
6c:6e:b9:17:99:27:59:74:67:5d:b1:c1:a4:31:48:eb:0f:5d:
4c:1b:85:32:a0:01:72:52:7a:7a:50:be:4a:cd:d2:74:ac:9f:
ff:3e:36:99:5e:96:8b:75:57:34:6c:19:b2:30:c2:d0:44:2b:
d1:8e:05:61:4d:a9:6f:45:9c:8a:52:91:25:90:6f:72:a3:1e:
2b:f9:49:9b:f8:55:e3:2f:01:bc:6c:e4:51:9c:01:88:5e:bc:
4f:95:fd:cb:3f:a9:cd:20:47:bf:21:ca:bd:99:d4:c7:62:29:
98:1b:a8:8d:46:1c:1d:eb:5b:01:11:84:25:0d:3f:38:5c:db:
fe:34:a3:3a:5a:4c:9d:42:42:e8:25:3d:3d:02:63:c8:ac:ee:
bf:c0:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:28:39 2026 by rpki-client