Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/L5qyY9jZaitIZWVHzJF8EMKtnJw.roa
File: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (raw, json)
Hash identifier: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=
Subject key identifier: 2F:9A:B2:63:D8:D9:6A:2B:48:65:65:47:CC:91:7C:10:C2:AD:9C:9C
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019C945E80F3762B8959B422667616A3D2CF
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/L5qyY9jZaitIZWVHzJF8EMKtnJw.roa
Signing time: Wed 25 Feb 2026 10:35:47 +0000
ROA not before: Wed 25 Feb 2026 10:35:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200927
IP address blocks: 2a11:a580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:5e:80:f3:76:2b:89:59:b4:22:66:76:16:a3:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Feb 25 10:35:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f9ab263d8d96a2b48656547cc917c10c2ad9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:3a:48:b4:6f:5b:fc:2d:5b:d7:6b:62:10:
92:23:c8:e7:91:4b:cf:50:f1:b1:fd:9a:0a:3d:9a:
e4:7c:3d:59:d1:83:75:25:c1:b3:eb:79:37:49:c5:
b8:02:c0:4f:8c:7f:c8:3d:04:9a:91:df:b6:d0:54:
4b:c1:7e:c8:83:00:d1:10:43:6f:93:10:28:56:89:
37:5f:53:42:eb:3d:12:be:3c:2a:ef:e7:28:e9:e4:
2e:a9:bb:41:94:eb:30:82:c2:69:34:f9:c0:10:44:
ed:a3:2a:f9:bb:e3:13:6f:b9:97:06:73:bf:02:b2:
c4:79:10:cd:4e:eb:54:ea:b9:96:35:e4:7e:4b:31:
7d:54:a1:75:6f:62:b5:f4:d4:d8:6d:82:7e:1d:f1:
d4:1a:c6:d6:1b:81:15:70:06:e6:6d:cb:59:08:87:
8c:b1:12:ce:70:97:9f:5e:64:f9:39:45:8a:1c:9d:
3e:08:50:b2:e0:bf:25:1c:c8:d2:1c:01:b7:29:86:
69:9e:fe:61:38:62:42:36:57:aa:aa:08:45:18:f2:
30:ac:dd:93:b9:09:03:02:1f:e7:8b:18:25:4f:30:
12:4a:18:b4:e1:ce:23:6b:a8:0b:bc:97:69:d0:f4:
5a:98:60:37:d9:75:78:bf:7a:f0:fc:77:99:4e:a3:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:B2:63:D8:D9:6A:2B:48:65:65:47:CC:91:7C:10:C2:AD:9C:9C
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/L5qyY9jZaitIZWVHzJF8EMKtnJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/32
Signature Algorithm: sha256WithRSAEncryption
87:76:a3:ff:32:59:e5:8b:8f:76:4d:4c:ea:cf:93:ae:48:29:
cb:ae:b1:b3:26:09:5e:63:2a:cd:e2:19:88:ba:aa:9e:d1:69:
e6:67:0d:1c:32:9c:8d:54:59:63:ed:1a:cb:00:ff:5f:50:e1:
0f:56:c8:06:ad:8c:b3:28:6f:45:55:24:aa:2e:b7:68:be:d5:
db:24:16:39:f6:b9:6d:9e:eb:b2:ad:16:ed:b9:94:e2:ed:93:
05:22:78:94:35:57:1b:89:2d:56:0f:9b:05:3b:40:7f:39:a3:
2f:e8:72:59:35:5e:df:2f:f2:93:85:93:22:6e:1b:01:60:9d:
d0:f0:8c:51:f2:88:2c:63:81:5d:1e:43:a8:66:9f:e0:c6:0e:
3d:05:fe:1f:fc:6f:32:9f:9a:bf:4a:9e:3c:6e:79:11:b0:d2:
eb:a0:c3:8c:81:01:e6:4b:2b:f4:94:c6:86:69:8b:0e:f4:ee:
a9:66:70:25:2c:69:8c:58:f9:19:8e:aa:5b:71:ad:cf:39:89:
63:75:bb:ea:a6:62:ab:e7:6b:b0:6b:97:6f:d9:c1:ac:a5:a8:
c0:8a:00:15:28:ad:63:71:58:4c:05:89:1b:48:9c:3e:40:ab:
cc:03:ec:83:73:dd:d1:b1:67:bd:cf:f6:d7:b5:e5:0f:35:e8:
6b:c1:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:40 2026 by rpki-client