Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/L1RzkfPfTsvXjCHGU9y2D9E0E90.roa
File: L1RzkfPfTsvXjCHGU9y2D9E0E90.roa (raw, json)
Hash identifier: 0f6/lFSOQ++NQjhLTXas3wh38lh/IbOn+eL45Gt4mH0=
Subject key identifier: 2F:54:73:91:F3:DF:4E:CB:D7:8C:21:C6:53:DC:B6:0F:D1:34:13:DD
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01A0A9588AA7CD520E66A7822998D7BD5FCB
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/L1RzkfPfTsvXjCHGU9y2D9E0E90.roa
Signing time: Wed 16 Sep 2026 08:32:27 +0000
ROA not before: Wed 16 Sep 2026 08:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
2a0b:21c1:601e::/48 maxlen: 48
2a0b:21c1:601f::/48 maxlen: 48
2a0b:21c1:6020::/48 maxlen: 48
2a0b:21c1:6021::/48 maxlen: 48
2a0b:21c1:6022::/48 maxlen: 48
2a0b:21c1:6024::/48 maxlen: 48
2a0b:21c1:6025::/48 maxlen: 48
2a0b:21c1:6026::/48 maxlen: 48
2a0b:21c1:6027::/48 maxlen: 48
2a0b:21c1:6032::/48 maxlen: 48
2a0b:21c1:6033::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:58:8a:a7:cd:52:0e:66:a7:82:29:98:d7:bd:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Sep 16 08:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f547391f3df4ecbd78c21c653dcb60fd13413dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:87:9e:21:a2:41:cb:27:ae:9c:f2:10:62:
be:59:f4:c9:c3:11:d1:66:eb:23:6e:70:fc:37:a1:
59:fd:f7:7f:84:21:34:79:ea:36:fc:ca:73:2d:3a:
2c:91:88:a1:32:d3:91:07:22:f4:99:be:56:96:3e:
c6:55:42:27:32:e6:09:20:79:d9:bd:3c:a9:17:fa:
86:7c:8d:b3:ae:a9:7a:48:05:c4:26:3e:5b:0a:51:
d9:df:b1:0b:c1:62:62:64:e4:30:e4:8b:bb:45:c8:
ca:3c:51:59:b6:4d:df:31:fd:27:53:39:66:c1:ad:
ca:b2:d2:d5:5a:57:69:91:a1:69:aa:d9:0f:22:88:
f2:24:7c:2e:22:b7:16:17:20:3c:b3:e9:18:67:83:
e0:54:63:c6:ac:ff:8c:36:59:89:f2:a7:a7:dd:50:
29:74:21:39:b1:5e:7a:87:10:84:c6:b0:be:0f:aa:
77:e1:cb:6a:c6:51:ed:00:80:e6:c1:e9:c5:0f:da:
7f:d3:1f:b8:7c:ea:fb:c1:e5:51:4e:b9:b6:78:71:
3e:de:05:2a:33:59:cc:4e:df:12:5f:b4:a5:0d:b7:
2a:8c:b6:92:c9:9d:fc:11:76:9d:6c:aa:06:18:2d:
b4:85:03:a1:18:28:65:55:ae:92:8f:83:5b:2b:28:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:73:91:F3:DF:4E:CB:D7:8C:21:C6:53:DC:B6:0F:D1:34:13:DD
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/L1RzkfPfTsvXjCHGU9y2D9E0E90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:601e::-2a0b:21c1:6022:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:6024::/46
2a0b:21c1:6032::/47
Signature Algorithm: sha256WithRSAEncryption
3e:2f:f2:0e:61:bb:17:ba:0c:ab:f5:f2:9b:ab:ea:6a:7a:11:
77:20:85:f5:73:02:6d:a0:26:f8:55:f1:8f:94:f8:2b:c0:86:
15:29:3b:84:77:9b:fd:d5:3d:b7:be:3c:d2:c8:5b:67:34:08:
14:46:8d:0b:30:0e:85:e3:04:ae:90:e7:be:69:1b:a3:8e:1d:
2c:f5:80:89:aa:2b:e2:d9:e3:1d:40:f5:00:fd:f3:23:e8:48:
d5:b1:d1:8a:1d:a6:96:26:8d:9b:09:46:29:a6:c8:9c:a9:2d:
8d:e1:dc:b6:5e:8f:66:6f:66:de:e2:cd:93:84:30:31:b7:a7:
4b:6d:06:e0:84:f3:4f:75:15:2a:ff:b3:b7:26:1c:d7:dd:fb:
1c:b2:c1:e1:61:c3:15:bb:e4:dc:59:ef:1d:fb:ce:9a:5d:c2:
47:63:99:1d:69:ec:b3:47:42:1f:12:54:08:17:28:2f:c0:33:
fc:a6:7c:fe:54:d9:59:da:0c:4a:df:69:75:2e:e7:60:5d:ef:
9a:bd:0a:41:18:84:c3:dc:2e:28:74:bd:25:a3:66:6f:b7:70:
18:c6:e4:1e:18:30:d5:f8:10:6c:45:55:47:dd:d7:7f:30:0e:
01:18:2b:19:84:76:1d:22:78:36:36:8e:dc:b5:08:73:73:95:
19:5f:06:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:50 2026 by rpki-client