Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lZyucGM23d2drnJFfCDvFxCmdL4.roa
File: lZyucGM23d2drnJFfCDvFxCmdL4.roa (raw, json)
Hash identifier: R0Kxag3+nUMLISYeQ8Zkrer4n4qDNQb4xb+cMUy9XLk=
Subject key identifier: 95:9C:AE:70:63:36:DD:DD:9D:AE:72:45:7C:20:EF:17:10:A6:74:BE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019FA5AA151805BF98A6311EB95048D353D7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lZyucGM23d2drnJFfCDvFxCmdL4.roa
Signing time: Mon 27 Jul 2026 22:20:14 +0000
ROA not before: Mon 27 Jul 2026 22:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213482
IP address blocks: 2a12:bec4:1780::/44 maxlen: 44
2a12:bec4:1c50::/44 maxlen: 44
2a12:bec4:1e40::/44 maxlen: 44
2a12:bec4:1e60::/44 maxlen: 44
2a12:bec4:1e70::/44 maxlen: 44
2a12:bec4:1e80::/44 maxlen: 44
2a12:bec4:1f40::/44 maxlen: 44
2a12:bec4:2030::/44 maxlen: 48
2a12:bec4:2040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:aa:15:18:05:bf:98:a6:31:1e:b9:50:48:d3:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 27 22:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=959cae706336dddd9dae72457c20ef1710a674be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:31:cf:36:3b:39:79:ab:f6:95:74:e3:84:
c4:08:62:33:36:2c:51:9f:ed:1a:7d:e7:64:49:dc:
73:2d:f6:f8:91:e6:0b:b3:ff:97:77:dc:dd:00:12:
85:d7:84:84:44:b7:84:30:7b:4e:44:5e:9a:af:9d:
49:3f:f3:74:d1:aa:4b:e9:c8:5a:77:59:a3:ac:63:
9f:2c:73:0b:52:89:e1:12:a3:76:8d:8d:a4:89:f1:
7f:ed:21:1e:5f:99:ec:96:0c:49:72:eb:f1:db:e6:
ab:c5:fc:43:f7:3d:38:df:cc:d3:f8:15:01:32:2b:
6b:87:7d:83:05:d9:2e:ec:d4:a4:39:d5:5d:ef:82:
6c:70:35:58:8c:55:52:ff:7d:63:e7:5d:a7:38:22:
a9:b6:a4:f2:e6:31:e7:4d:a8:53:ad:7e:4e:aa:34:
60:b4:17:cf:28:bc:c3:c5:78:12:94:5a:36:ec:ea:
a2:75:6b:90:80:f9:f8:39:d6:20:d0:62:1c:6e:8f:
de:09:b3:05:d4:71:1f:38:4e:8b:f2:aa:83:4e:41:
43:08:58:5e:48:dc:08:d5:0f:a1:8a:ef:5f:ed:7d:
7d:d5:1e:45:f6:6b:ab:73:29:54:84:f3:88:31:51:
32:90:3e:25:cc:8b:d1:27:b6:63:61:dd:21:a2:65:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:AE:70:63:36:DD:DD:9D:AE:72:45:7C:20:EF:17:10:A6:74:BE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lZyucGM23d2drnJFfCDvFxCmdL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1780::/44
2a12:bec4:1c50::/44
2a12:bec4:1e40::/44
2a12:bec4:1e60::-2a12:bec4:1e8f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1f40::/44
2a12:bec4:2030::-2a12:bec4:204f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:49:00:9d:00:4e:f7:47:56:bf:6b:a5:3f:6d:49:03:fc:03:
4f:24:f2:b5:d6:ea:71:ea:db:3d:d5:98:73:7d:cb:95:d7:8d:
bf:ac:ab:0e:ec:ad:3e:47:79:36:2e:05:c5:97:2f:85:c2:98:
fb:14:23:76:49:9b:50:40:c0:bd:70:b1:e7:0e:fb:55:c2:70:
94:a1:2a:88:03:fd:10:06:7e:93:d9:5d:b8:38:25:5d:42:1e:
a8:c6:66:1d:27:93:d6:07:11:22:41:89:92:7f:92:3e:8f:81:
67:d9:b7:e7:10:ce:c6:cc:c6:d9:ec:ca:89:c6:fe:99:d5:2f:
22:60:7a:fd:05:6b:6d:81:12:9e:81:4f:69:0c:f4:a1:74:ea:
99:63:8e:47:fa:c5:26:1f:92:00:b3:d2:fa:91:ed:e9:3a:54:
22:c2:6e:44:dc:a4:a2:09:18:a8:bd:d7:24:c5:66:45:3e:44:
96:f9:9c:ff:97:b4:0b:bd:14:d4:c5:b5:80:91:18:a5:70:37:
27:12:83:48:b7:0e:d6:5e:78:f4:ae:7b:4b:32:85:52:d4:f7:
f4:49:ae:1a:fa:8f:0d:2c:55:da:04:0d:4f:68:8f:a5:aa:4c:
a5:2f:36:5e:d2:ad:8b:b8:e0:a4:9b:2f:b8:e2:39:0b:46:7e:
70:4a:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:15 2026 by rpki-client