Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/ljuOz3ZBebPMNEnB7_alp2yK5FA.roa
File: ljuOz3ZBebPMNEnB7_alp2yK5FA.roa (raw, json)
Hash identifier: pcxcuskwHxObg6pFZjDF5cqRBnlQbP8YvCsLWhIo4g0=
Subject key identifier: 96:3B:8E:CF:76:41:79:B3:CC:34:49:C1:EF:F6:A5:A7:6C:8A:E4:50
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 01A0BF15B9A44EA6A653E4606DE8A98FE0F0
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/ljuOz3ZBebPMNEnB7_alp2yK5FA.roa
Signing time: Sun 20 Sep 2026 13:51:07 +0000
ROA not before: Sun 20 Sep 2026 13:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219466
IP address blocks: 91.199.19.0/24 maxlen: 24
2a07:dcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:15:b9:a4:4e:a6:a6:53:e4:60:6d:e8:a9:8f:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Sep 20 13:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963b8ecf764179b3cc3449c1eff6a5a76c8ae450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:4c:4d:52:ce:df:73:48:1a:73:7b:58:a5:
c9:dc:5b:5b:80:6e:f3:07:91:7c:91:79:89:61:ff:
8d:ba:75:8e:be:67:1a:1f:4d:bf:19:5c:65:95:c0:
0c:66:98:fb:3f:68:73:ac:2f:d0:e5:78:3e:c9:98:
5d:b8:d0:b4:b4:46:2f:15:63:f7:49:8d:d6:86:f0:
2b:cf:51:fc:12:5d:b0:1e:19:ae:af:86:a7:3f:3b:
75:54:b1:72:02:66:15:8c:1b:47:37:a3:43:d6:42:
36:02:39:ec:27:a1:66:36:82:ea:f2:67:51:17:27:
3a:8c:34:6f:7d:37:d6:43:46:de:72:ed:d1:25:e7:
8b:57:bd:9d:bf:d3:b3:25:da:72:4f:52:ff:22:65:
13:70:cd:38:8b:1b:00:71:a5:d4:22:5d:ad:94:b2:
c2:8e:b7:aa:42:03:7d:f7:35:9a:be:65:c9:54:e2:
df:0f:5a:8a:70:8d:67:c0:6a:f7:20:a7:a2:5c:83:
ca:ac:4a:78:56:8a:8f:a2:2e:90:56:0e:18:95:3a:
bd:a2:0d:0d:92:3e:22:aa:df:00:a1:4e:fb:5d:6f:
fe:3a:6e:25:79:d1:da:76:2d:38:a8:40:f3:df:57:
23:b7:ec:96:36:39:a3:4b:0b:c8:62:3f:6f:0b:7f:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:8E:CF:76:41:79:B3:CC:34:49:C1:EF:F6:A5:A7:6C:8A:E4:50
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/ljuOz3ZBebPMNEnB7_alp2yK5FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.19.0/24
IPv6:
2a07:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:61:8b:fd:2c:6c:6a:2d:48:d7:ab:86:e3:b5:fd:d2:6d:9b:
70:a1:49:cd:f4:c2:01:df:38:18:34:4c:f0:34:2e:ce:06:1a:
96:47:13:11:07:69:13:17:46:cf:47:b8:02:72:79:06:db:08:
c4:fe:a6:96:ef:80:ee:1a:05:0c:bd:be:f0:e1:03:5a:77:c2:
f4:88:67:ba:cc:e4:ee:c6:6f:a7:22:9a:ee:74:cd:e7:11:6e:
2b:bb:e2:a5:e8:d4:83:ee:d3:9d:4f:a3:03:2c:72:ba:ea:ac:
85:cb:09:a1:0c:39:d6:a6:14:21:ee:f3:a7:35:6d:0c:68:ef:
40:da:80:5e:8f:d3:d8:58:5a:e6:96:9c:2f:13:9c:81:6c:4c:
71:2c:70:7d:85:b6:62:6d:fb:90:87:34:9a:01:e3:28:e8:3b:
73:9b:c1:c1:e7:78:7b:67:da:98:af:7a:ec:5f:07:a3:f3:1f:
4f:71:60:c5:2e:d0:54:d7:10:93:87:96:e4:b4:06:10:c2:87:
3c:de:42:8e:1d:a6:4f:3a:39:7b:4d:b8:46:77:42:c1:80:7f:
6c:ea:e1:80:db:e5:f3:9a:92:1c:75:67:9d:d3:7a:b3:77:2f:
45:94:00:7f:fc:f5:7d:86:d9:84:04:5e:63:29:6b:48:54:33:
49:c6:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:43 2026 by rpki-client