Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/4612gzdi-UH5Qjg22ZZ5_BiHxKc.roa
File: 4612gzdi-UH5Qjg22ZZ5_BiHxKc.roa (raw, json)
Hash identifier: OzLPJHDp/NYCIQmCmr+HzbM8GW1ho6gfEdKVXLtwW1A=
Subject key identifier: E3:AD:76:83:37:62:F9:41:F9:42:38:36:D9:96:79:FC:18:87:C4:A7
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A15D53503E4F1ADC6A0154A786FC7C07B0
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/4612gzdi-UH5Qjg22ZZ5_BiHxKc.roa
Signing time: Wed 21 Oct 2026 07:18:23 +0000
ROA not before: Wed 21 Oct 2026 07:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218339
IP address blocks: 2a0a:87c0:fff6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:53:50:3e:4f:1a:dc:6a:01:54:a7:86:fc:7c:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 21 07:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3ad76833762f941f9423836d99679fc1887c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:a4:fe:4e:0b:8b:2f:1b:cc:c7:13:51:a4:
91:0f:e4:48:2d:d6:7f:cb:83:e1:23:88:99:ab:21:
d5:12:5a:a8:ff:17:36:86:3f:7e:d2:54:d1:64:f1:
c5:a7:ae:4e:c3:07:36:8c:6f:a4:73:83:b8:a2:af:
7d:1a:62:dd:1c:eb:f2:c0:aa:34:fc:0e:cc:47:f2:
e0:94:54:7c:b0:83:68:07:7d:36:8a:16:00:25:cb:
e2:d1:2b:be:f2:30:e3:f1:ae:e2:00:08:9a:7e:65:
81:05:d4:69:91:bd:69:cf:ed:09:c4:31:8e:cd:58:
5b:2c:af:d1:2b:c4:00:4d:2c:55:95:29:94:33:be:
e1:69:c9:41:53:01:45:29:36:15:4a:85:2d:2e:4e:
0d:48:20:12:5d:51:88:89:ed:ae:92:c5:8a:43:f5:
37:4d:be:87:c5:3b:c2:96:a2:12:6c:31:f7:4e:83:
59:80:d5:d3:d5:38:ca:13:3a:ea:33:d9:e1:8b:b6:
a2:80:3c:91:7a:f0:ed:bb:52:79:d2:b2:71:90:be:
d4:a7:2b:d7:77:45:ec:97:31:56:cb:e7:3e:50:a8:
2d:67:f8:4e:9f:2d:1d:34:9c:99:8b:43:6f:5a:15:
0b:6f:bb:d1:65:86:5a:14:00:53:85:4a:21:2e:a4:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:76:83:37:62:F9:41:F9:42:38:36:D9:96:79:FC:18:87:C4:A7
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/4612gzdi-UH5Qjg22ZZ5_BiHxKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f1:7e:c8:8b:76:29:2e:cc:a8:e7:68:56:15:19:6b:d0:77:
26:7d:c3:ea:59:6e:a2:a6:5f:11:66:6f:95:bc:43:88:b6:09:
73:21:ea:4b:e0:45:16:ed:10:1d:35:6b:f0:c8:71:ad:90:66:
02:a1:d1:c9:b0:2e:e5:6d:4e:85:7c:91:7f:b3:00:f1:62:9a:
46:71:02:39:08:db:61:90:15:51:5a:c1:7a:08:6a:28:5f:a3:
bb:57:f1:f6:70:af:06:36:0e:39:74:9b:b5:d2:09:fa:96:cb:
10:4b:b3:22:a2:ce:df:62:6e:f1:78:83:94:00:be:34:5d:c6:
98:8c:d3:05:11:02:1e:30:62:2e:08:89:c2:8c:16:d4:45:4d:
62:65:11:7d:cf:05:55:9c:1d:bf:09:7e:07:3a:f0:4d:94:26:
33:12:d2:35:3b:16:9a:c0:48:5e:14:d2:06:14:3d:66:9d:aa:
81:b9:f3:3d:32:2f:80:62:ba:37:32:75:eb:1d:bb:d1:02:2e:
b8:4e:7d:f6:95:52:3a:38:70:c1:6c:16:12:70:0d:6c:1d:a0:
a0:52:08:ac:89:2b:d0:87:4e:ae:8f:40:96:0a:93:29:d8:8f:
2a:c0:9b:fc:d8:05:e6:26:70:3a:74:c8:f5:c9:fe:54:e2:27:
6b:66:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:31 2026 by rpki-client