Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/LfFY-y2jvNU8kYFjD0nlFPXKBiA.roa
File: LfFY-y2jvNU8kYFjD0nlFPXKBiA.roa (raw, json)
Hash identifier: pJEejMELgRZzTR5qG+pm3zJ5qBtdFIGoJaTA8yWCAB0=
Subject key identifier: 2D:F1:58:FB:2D:A3:BC:D5:3C:91:81:63:0F:49:E5:14:F5:CA:06:20
Certificate issuer: /CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Certificate serial: 01A07FEACD97358E0650D8ACCCE61AB6CF7C
Authority key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/LfFY-y2jvNU8kYFjD0nlFPXKBiA.roa
Signing time: Tue 08 Sep 2026 07:28:09 +0000
ROA not before: Tue 08 Sep 2026 07:28:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219265
IP address blocks: 150.251.61.0/24 maxlen: 24
2001:67c:2240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:ea:cd:97:35:8e:06:50:d8:ac:cc:e6:1a:b6:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Validity
Not Before: Sep 8 07:28:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df158fb2da3bcd53c9181630f49e514f5ca0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:05:1e:18:a6:5a:72:fc:4c:7d:70:a4:04:
0f:fa:88:cd:71:ae:2a:43:71:af:5f:a7:6a:19:a0:
2b:3b:48:38:9c:e4:5e:13:c0:ef:71:d5:74:d1:9a:
67:30:00:7e:f6:0a:35:92:60:a8:a0:80:29:0d:ed:
6d:d4:f8:37:c9:e8:a1:61:a6:77:97:3d:aa:bd:ea:
6e:06:cc:b9:ac:f5:71:4d:17:cf:a1:60:28:18:a2:
0c:79:e8:12:11:08:5b:8e:29:a4:89:9a:ce:87:fb:
67:dd:55:fe:03:20:4e:ec:84:2b:69:6f:80:06:8b:
e2:f1:a9:d5:c2:09:d7:f3:be:de:b9:2c:c8:2d:7d:
9e:f5:26:bb:5f:92:f2:d7:85:35:16:fd:85:79:87:
a3:2a:c8:ff:9c:78:f6:68:0d:9c:04:7f:2d:3e:13:
ba:d0:03:dd:98:69:a3:7b:91:12:89:8c:b8:58:ef:
ef:d5:43:51:19:6b:cc:b7:a6:6b:06:de:44:34:57:
9f:fa:09:2d:65:d0:56:24:a1:4b:ef:43:31:8e:72:
09:af:dd:9f:d4:bb:8e:0f:3a:87:65:ac:d7:29:e5:
fa:12:31:94:95:f9:9a:ae:c9:21:31:b3:ba:11:bc:
9f:3a:50:89:35:64:56:62:5d:75:36:63:78:fb:06:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:58:FB:2D:A3:BC:D5:3C:91:81:63:0F:49:E5:14:F5:CA:06:20
X509v3 Authority Key Identifier:
keyid:FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/LfFY-y2jvNU8kYFjD0nlFPXKBiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.61.0/24
IPv6:
2001:67c:2240::/48
Signature Algorithm: sha256WithRSAEncryption
92:a7:e6:d9:b3:ab:6a:fa:db:7a:0a:91:f9:13:97:c3:61:2b:
e0:23:61:63:91:84:95:25:66:ab:2c:ee:23:e0:f9:30:a5:fd:
df:66:3e:cd:a2:fe:91:ce:a0:2c:02:78:c8:06:5b:86:bf:32:
44:fd:87:d4:dd:3d:61:ee:ac:d4:3b:39:b4:e7:04:9c:0a:82:
b4:2c:94:13:69:7a:8e:78:db:f8:eb:b8:83:b5:59:ce:0c:6b:
9a:50:c2:8a:b6:d3:8a:01:b2:3a:0b:ea:09:46:bd:58:43:52:
ca:f5:dd:82:94:6f:54:d2:b8:11:82:04:1d:48:d1:7e:2f:2d:
15:6d:e6:34:c1:f9:40:1c:74:0f:98:f9:3e:15:0d:19:a4:8c:
13:ea:89:7d:ef:33:14:d3:fc:1b:d4:1d:0b:55:2b:df:66:c8:
ba:b9:04:d0:0f:e4:05:a1:ac:f9:8a:2e:21:54:cb:55:d2:83:
ec:b6:6b:e6:13:84:84:11:61:51:ab:6b:de:7a:84:91:0d:9c:
0c:1a:7c:62:39:e8:85:b4:9d:60:08:02:24:00:e3:58:44:db:
43:7d:90:99:62:9f:c9:22:f1:7b:a7:84:eb:8f:c9:88:b5:f5:
55:e1:54:f2:9f:61:24:e9:4a:2f:6b:a3:37:fd:53:5f:33:09:
a1:ca:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:10 2026 by rpki-client