Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/LL4V8sco-bLn6X62NhH7oSncxGQ.roa
File: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (raw, json)
Hash identifier: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=
Subject key identifier: 2C:BE:15:F2:C7:28:F9:B2:E7:E9:7E:B6:36:11:FB:A1:29:DC:C4:64
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019C488DFF0D191598A3DBDC4EE5715F1073
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/LL4V8sco-bLn6X62NhH7oSncxGQ.roa
Signing time: Tue 10 Feb 2026 17:16:31 +0000
ROA not before: Tue 10 Feb 2026 17:16:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57866
IP address blocks: 2a14:c200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:8d:ff:0d:19:15:98:a3:db:dc:4e:e5:71:5f:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Feb 10 17:16:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cbe15f2c728f9b2e7e97eb63611fba129dcc464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:07:8c:6b:c0:89:c4:56:75:2b:dc:0f:d9:
26:9c:9c:dc:b6:2c:33:33:3b:0a:68:e3:28:37:02:
a9:b0:c3:5f:a3:72:29:40:57:64:2f:87:4f:ac:79:
b1:29:b1:b2:80:27:17:ec:48:84:06:5a:88:9a:24:
27:cd:24:31:ac:da:25:d3:a0:a9:a3:95:23:96:d6:
57:7e:54:66:79:43:04:51:7b:81:e3:3d:cb:4c:f2:
36:eb:51:a6:dc:80:92:f5:68:0f:0a:2a:e8:e5:c1:
5b:57:ee:ea:0b:3f:b7:98:60:f3:0d:d3:37:c4:ac:
91:3b:db:5f:3a:b3:7f:be:be:6c:8b:42:77:b0:61:
40:0e:73:3e:6b:52:2b:97:18:e3:06:56:51:19:0e:
29:e0:f7:dc:27:4f:48:7b:a0:a5:8b:ac:81:d8:64:
69:2d:c7:4c:50:62:90:5b:ea:ee:2c:7c:4b:6e:5a:
a7:1e:f5:a2:19:34:f5:4d:5e:c9:fe:48:ab:21:62:
03:88:54:95:41:b8:f2:79:1b:09:1d:5a:bd:49:b6:
5a:1e:25:2a:c2:a4:4a:73:c3:79:4a:a1:9b:fd:27:
a2:50:54:de:ea:3d:9d:66:fd:a5:3f:9c:a0:39:68:
d6:56:aa:bb:07:e6:33:e2:fe:24:d0:63:60:68:7e:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:15:F2:C7:28:F9:B2:E7:E9:7E:B6:36:11:FB:A1:29:DC:C4:64
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/LL4V8sco-bLn6X62NhH7oSncxGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c200::/29
Signature Algorithm: sha256WithRSAEncryption
86:63:b6:3f:72:82:c8:fb:b5:b9:f0:b5:60:a2:a4:cd:57:28:
82:66:79:89:60:14:ef:9e:0e:f4:a4:ab:aa:be:19:d7:b2:72:
cf:db:2b:67:06:a5:e5:a9:f1:da:31:63:00:86:51:c2:72:e1:
9c:3d:d4:19:26:93:41:83:2c:47:aa:a0:ef:37:42:de:79:30:
d4:fe:70:32:16:ec:3c:55:fa:87:f2:f3:77:63:d1:f8:17:52:
b7:8c:71:4a:d2:c1:3a:1b:33:0a:59:14:c2:ff:51:b3:35:1e:
dd:80:54:9b:f2:29:8e:bc:c0:fc:db:d0:55:88:bd:ba:a4:39:
76:a0:35:68:19:65:c8:1a:27:2e:ae:9f:13:6c:6c:f2:4b:90:
74:7b:fe:00:fb:19:6f:85:a5:50:cd:e2:47:35:bc:d2:67:37:
73:74:bb:87:fe:2c:30:95:56:ca:ab:e8:4e:6f:1b:22:c5:4e:
ed:a4:77:4b:23:5e:99:02:df:0e:be:1a:cc:9d:0f:aa:8e:e7:
5d:6c:2a:58:c4:52:c0:38:b8:d1:bb:08:be:ff:98:72:60:7c:
5d:d6:c5:8e:0a:e3:ed:3d:fc:37:80:ea:91:2d:7c:fe:8a:03:
ce:45:9d:26:6e:d3:88:35:be:c4:69:5d:dc:36:50:22:8d:44:
7e:9a:7c:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZxIjf8NGRWYo9vcTuVxXxBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzNjZGNlNzdiNmJmMDIwOWQ4OWM5OWIyNjhlYTA4NTM1
NzZjZDMwHhcNMjYwMjEwMTcxNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2JlMTVmMmM3MjhmOWIyZTdlOTdlYjYzNjExZmJhMTI5ZGNjNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LEHjGvAicRWdSvcD9kmnJzctiwz
MzsKaOMoNwKpsMNfo3IpQFdkL4dPrHmxKbGygCcX7EiEBlqImiQnzSQxrNol06Cp
o5UjltZXflRmeUMEUXuB4z3LTPI261Gm3ICS9WgPCiro5cFbV+7qCz+3mGDzDdM3
xKyRO9tfOrN/vr5si0J3sGFADnM+a1IrlxjjBlZRGQ4p4PfcJ09Ie6Cli6yB2GRp
LcdMUGKQW+ruLHxLblqnHvWiGTT1TV7J/kirIWIDiFSVQbjyeRsJHVq9SbZaHiUq
wqRKc8N5SqGb/SeiUFTe6j2dZv2lP5ygOWjWVqq7B+Yz4v4k0GNgaH5aiwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCy+FfLHKPmy5+l+tjYR+6Ep3MRkMB8GA1UdIwQY
MBaAFJ8zzc53tr8CCdicmbJo6ghTV2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEt
NGI2NjZkZTJlOThmLzEvTEw0VjhzY28tYkxuNlg2Mk5oSDdvU25jeEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEtNGI2NjZkZTJlOThm
LzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTCADAN
BgkqhkiG9w0BAQsFAAOCAQEAhmO2P3KCyPu1ufC1YKKkzVcogmZ5iWAU754O9KSr
qr4Z17Jyz9srZwal5anx2jFjAIZRwnLhnD3UGSaTQYMsR6qg7zdC3nkw1P5wMhbs
PFX6h/Lzd2PR+BdSt4xxStLBOhszClkUwv9RszUe3YBUm/IpjrzA/NvQVYi9uqQ5
dqA1aBllyBonLq6fE2xs8kuQdHv+APsZb4WlUM3iRzW80mc3c3S7h/4sMJVWyqvo
Tm8bIsVO7aR3SyNemQLfDr4azJ0Pqo7nXWwqWMRSwDi40bsIvv+YcmB8XdbFjgrj
7T38N4DqkS18/ooDzkWdJm7TiDW+xGld3DZQIo1Efpp8Uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:51 2026 by rpki-client