Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/4ldpEzp1rU1ZQns-WM0jNa9SHsQ.roa
File: 4ldpEzp1rU1ZQns-WM0jNa9SHsQ.roa (raw, json)
Hash identifier: p1pHdFtbC/8dYCF+JjiCyCPx5KTD0+sX9j2txF1ter0=
Subject key identifier: E2:57:69:13:3A:75:AD:4D:59:42:7B:3E:58:CD:23:35:AF:52:1E:C4
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019B76EACD5EF9095EC1C8B115380316B9BF
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/4ldpEzp1rU1ZQns-WM0jNa9SHsQ.roa
Signing time: Thu 01 Jan 2026 00:17:37 +0000
ROA not before: Thu 01 Jan 2026 00:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48301
IP address blocks: 2a01:f100:100::/48 maxlen: 48
2a01:f100:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:cd:5e:f9:09:5e:c1:c8:b1:15:38:03:16:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e25769133a75ad4d59427b3e58cd2335af521ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:de:2e:28:46:5b:ba:95:72:64:2f:22:5a:
6c:2a:ee:c7:fe:98:25:27:de:55:11:64:be:5d:35:
1a:6e:36:de:f3:27:2d:d7:ed:ba:94:35:aa:ba:41:
12:35:95:fe:fb:5e:49:a2:b0:e3:fa:6a:f5:82:a7:
39:a5:0e:30:fb:7d:ba:60:9f:f9:9b:ab:a1:ef:56:
92:77:cb:f7:9f:68:7d:60:d4:5b:8f:30:92:be:6e:
ef:a2:53:4b:5c:4e:41:8a:f7:57:d6:58:07:ae:3b:
f5:9b:cd:bd:f3:c2:57:7f:0b:7d:cd:03:6e:0e:77:
8b:ef:4f:c6:78:73:62:89:c6:96:29:dc:54:1f:0c:
80:32:bf:df:9d:07:d8:ef:e5:f5:56:d7:19:a0:ad:
ed:5d:cb:a7:ff:7b:28:24:72:d1:e8:70:e7:33:2f:
6e:93:12:c8:fa:88:04:f4:42:7d:a3:63:9d:dc:2e:
f0:b1:ea:6f:e8:a5:ec:6e:f6:35:7d:f0:a7:ea:ac:
f7:17:f2:53:89:a3:81:b6:80:d7:c5:7f:01:ed:07:
0a:d6:49:f7:72:56:4a:b8:fe:94:4b:13:93:87:43:
0f:1e:f3:e5:86:77:99:c1:8b:6f:2a:3c:95:33:11:
95:fb:8d:50:a2:6e:1d:2a:88:44:2e:7d:fc:3a:c9:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:69:13:3A:75:AD:4D:59:42:7B:3E:58:CD:23:35:AF:52:1E:C4
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/4ldpEzp1rU1ZQns-WM0jNa9SHsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f100:100::/48
2a01:f100:108::/48
Signature Algorithm: sha256WithRSAEncryption
24:16:be:90:24:84:79:4b:7f:ed:d5:c7:d4:c5:37:17:79:99:
c5:e6:a2:19:44:45:cd:72:14:9b:52:51:5e:06:49:e2:0c:bf:
ea:a0:7a:0e:57:8c:76:4d:89:44:6f:38:d4:50:77:82:99:68:
aa:eb:9f:90:9e:a6:4c:3f:b4:e2:65:59:f1:1e:a9:c6:03:20:
ce:5a:0b:d8:8d:f6:b6:4c:2c:b8:be:93:a3:88:c4:37:22:d2:
58:32:6c:31:1f:62:0a:ef:a2:2d:44:f9:5a:71:f1:93:65:83:
e3:a2:ef:a4:06:6c:9e:aa:4d:de:d2:e9:cd:a5:e2:15:17:3a:
5c:36:a3:29:55:df:d4:ee:0d:7c:f0:14:eb:35:81:50:8f:7f:
ea:69:05:69:16:01:de:e2:cc:e4:9c:3e:e6:eb:65:dd:62:00:
eb:1b:1c:87:ee:b5:d2:86:e2:7b:b3:55:b0:0a:d2:c3:00:27:
39:83:66:10:46:9c:ac:6f:90:bc:e8:23:0e:b0:2c:a0:d7:54:
1c:c5:7f:b4:53:c3:09:f5:35:93:3a:68:bd:6b:35:bb:d9:38:
32:0f:78:f7:cc:b2:1b:1a:f4:80:b5:4c:5f:9a:8c:2d:6e:38:
a6:23:32:71:2a:c8:22:e1:01:a4:50:5d:8c:53:5f:aa:6d:29:
6d:7e:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:38:12 2026 by rpki-client