Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lu4LMdDikeSn4GJe-2W892phlWE.roa
File: lu4LMdDikeSn4GJe-2W892phlWE.roa (raw, json)
Hash identifier: FFxGk17YfgNw1RlPfVq2hk/r7Hs9zFkd3/8xXxi0O3A=
Subject key identifier: 96:EE:0B:31:D0:E2:91:E4:A7:E0:62:5E:FB:65:BC:F7:6A:61:95:61
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A13BE03B1301A471917B4E2ED998EF339D
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lu4LMdDikeSn4GJe-2W892phlWE.roa
Signing time: Wed 14 Oct 2026 19:25:13 +0000
ROA not before: Wed 14 Oct 2026 19:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13287
IP address blocks: 2a10:a340:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:e0:3b:13:01:a4:71:91:7b:4e:2e:d9:98:ef:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 14 19:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ee0b31d0e291e4a7e0625efb65bcf76a619561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:2c:71:a2:d6:15:72:80:f2:fd:25:a8:41:
80:6c:e1:6e:05:ef:55:06:ab:d4:c1:5e:88:57:af:
87:6d:fc:7e:a9:e0:33:79:f9:19:1a:1a:0e:e1:22:
45:f8:6b:c2:16:7c:96:d5:c3:22:72:09:ae:09:02:
5f:bb:69:3a:6b:38:30:5c:a9:9c:c9:1c:fd:4c:ff:
fb:a5:2f:58:df:2a:4b:e9:f9:53:65:ac:7f:d9:96:
d1:70:94:fc:0e:5f:ca:da:20:99:ae:bf:92:88:1c:
aa:19:6e:39:84:9d:31:04:b7:46:60:2d:67:f0:a1:
ea:13:df:15:49:6d:27:89:e3:46:1f:e0:7c:c9:e0:
1a:2d:f4:0e:d9:79:0e:b7:48:1c:a2:48:33:13:61:
b7:f7:f6:9b:24:7e:3b:9d:a3:5a:9c:2c:96:d3:ff:
a2:b7:88:d2:b6:c3:05:62:d6:d3:88:01:cd:7d:50:
3b:d2:9a:9d:a8:1c:e9:5a:1f:71:c4:07:01:ee:68:
f9:71:b7:9e:b3:22:49:9d:99:6b:c2:52:85:3b:41:
c4:3c:b2:22:a4:c5:9b:fb:38:dd:20:c2:94:37:75:
1a:54:67:9a:a5:93:6f:b8:3f:30:38:15:24:0a:e6:
8a:5b:4d:ab:9b:df:71:78:67:ba:b8:05:28:65:b2:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:0B:31:D0:E2:91:E4:A7:E0:62:5E:FB:65:BC:F7:6A:61:95:61
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/lu4LMdDikeSn4GJe-2W892phlWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a340:3::/48
Signature Algorithm: sha256WithRSAEncryption
05:f3:c3:61:d5:15:66:04:a0:43:14:5d:b4:0e:df:28:24:06:
d0:d9:1e:57:c8:00:82:b0:f7:b0:95:dd:b1:ac:20:d9:5a:4c:
38:84:89:4f:5a:c9:90:ca:96:38:45:6e:d3:23:70:7e:0c:ec:
0c:99:f0:8e:56:09:e2:0a:e5:05:3b:b4:27:48:51:58:21:49:
97:04:e3:5a:f5:55:47:0f:7f:63:d6:4c:fc:82:bd:b2:36:4a:
af:63:b3:ce:79:81:f8:32:5b:ac:cb:8d:78:93:5f:8f:64:39:
4e:11:ca:6f:1b:36:72:49:70:57:e3:f7:0c:41:a1:fa:3a:53:
63:4e:69:1a:b3:57:fd:d8:d0:2a:bb:c2:f6:18:fb:21:0e:cf:
fd:ca:4c:30:d8:6c:40:f7:0f:1f:ae:84:9c:98:c9:fa:c1:b7:
bf:98:5d:bc:c9:41:81:26:b3:13:32:84:15:e1:42:6d:fb:6f:
c6:db:35:ca:d6:70:e2:a7:e1:8c:5f:04:bd:21:b2:a5:39:b3:
41:d8:14:bd:93:1c:47:2e:1d:90:e2:eb:9e:a3:aa:a0:17:5b:
d5:16:6e:d4:dc:69:aa:b0:71:e2:a5:d7:a5:04:4e:02:78:8e:
1a:e2:61:53:b8:f0:dd:13:03:39:65:84:86:35:cb:a1:c0:6a:
19:88:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:12 2026 by rpki-client