Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/LkOY4GowBW7GaD1UvMDeSIJyF3k.roa
File: LkOY4GowBW7GaD1UvMDeSIJyF3k.roa (raw, json)
Hash identifier: okHGdbAHeQdDjJXtMtQ+X/VTMxTP8x60D1aaO/CrMW8=
Subject key identifier: 2E:43:98:E0:6A:30:05:6E:C6:68:3D:54:BC:C0:DE:48:82:72:17:79
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01A0D45B17F856977D0994CEC0D8ECAEDC49
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/LkOY4GowBW7GaD1UvMDeSIJyF3k.roa
Signing time: Thu 24 Sep 2026 16:58:54 +0000
ROA not before: Thu 24 Sep 2026 16:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39753
IP address blocks: 2a12:3fc7::/48 maxlen: 48
2a12:3fc7:8000::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5b:17:f8:56:97:7d:09:94:ce:c0:d8:ec:ae:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Sep 24 16:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e4398e06a30056ec6683d54bcc0de4882721779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:7b:68:4d:8d:3b:3b:ee:00:57:8f:f2:a4:
54:06:07:4c:32:32:d3:68:74:52:77:03:99:88:80:
b0:07:fe:09:8b:f1:b9:15:26:fb:74:42:96:b8:15:
e0:9d:b2:5a:4d:16:97:2e:9e:dc:c2:63:6f:60:7e:
5a:81:47:fe:1f:16:aa:75:b2:78:4f:79:35:ca:c6:
11:55:7f:80:e1:2d:b2:cb:c8:d6:ce:e0:3e:38:36:
a4:e6:06:af:97:bd:48:89:ae:20:c8:d9:3a:9a:5f:
7e:29:26:f2:9c:9e:c6:77:2c:05:04:d3:ff:fa:25:
e4:30:de:3d:ca:4e:8c:ed:3d:7f:24:a0:b0:5d:22:
0d:e0:1e:1a:f8:c0:04:7f:12:65:3b:18:91:76:76:
be:6c:95:c7:cc:e4:f8:9f:cd:6f:c3:92:fb:73:a4:
dd:d2:00:c6:af:d7:a7:39:b6:8e:e6:5f:0f:e6:55:
d6:7c:48:76:81:a7:e4:53:9d:61:19:ca:85:6b:bb:
2c:04:7b:c2:d6:99:7a:76:fd:84:fe:a9:ff:d7:04:
1f:49:3d:ce:b8:14:71:0a:75:83:db:19:9a:e9:6d:
af:06:9b:54:7a:99:88:98:0d:61:88:e7:ce:7d:07:
1e:06:f9:bb:23:be:a7:81:1f:c2:8e:9e:4b:22:e3:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:98:E0:6A:30:05:6E:C6:68:3D:54:BC:C0:DE:48:82:72:17:79
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/LkOY4GowBW7GaD1UvMDeSIJyF3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc7::/48
2a12:3fc7:8000::/33
Signature Algorithm: sha256WithRSAEncryption
20:36:32:f4:0a:99:13:cf:fe:b9:9e:96:a4:07:d8:38:f2:92:
68:97:9b:e3:9e:9d:c0:f2:19:08:3e:ea:c2:bb:78:1c:0f:4c:
f7:a1:ee:df:09:03:ae:25:1d:6b:ba:71:b1:79:31:5c:07:63:
6b:ac:95:af:0c:85:d0:8b:2c:39:14:f0:94:b9:46:2c:23:0a:
49:12:11:c2:87:a9:59:a0:37:cf:01:66:60:bb:48:d5:8c:a9:
4e:06:56:67:c2:a2:f3:97:3d:61:ba:d9:41:57:b9:0b:77:1b:
fe:d2:29:6f:55:d0:87:3d:f8:4c:8c:28:e5:86:4b:b7:f3:ef:
2a:9c:f3:fb:bd:c2:d3:a1:7c:87:0b:9a:1f:d4:9b:42:49:43:
4e:2f:9f:6b:59:11:93:33:19:83:56:cd:98:89:48:83:a8:ce:
29:9b:cf:80:00:7c:f6:f3:11:a1:53:f8:25:26:d0:22:7e:3e:
db:97:87:91:b2:2b:0c:1c:62:ad:a3:ad:fa:c9:df:7d:8a:23:
4a:bd:14:9f:9b:be:1c:7d:49:13:b8:69:06:96:75:de:52:c7:
9e:2c:b3:c4:05:31:d4:23:23:55:98:42:26:ff:ef:fc:77:5a:
26:d2:ab:42:f4:95:6d:7e:b8:36:3a:f2:ce:e0:7e:60:39:f5:
f5:07:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:56:37 2026 by rpki-client